gcloud kms keyrings set-iam-policy

NAME
gcloud kms keyrings set-iam-policy - set the IAM policy for a keyring
SYNOPSIS
gcloud kms keyrings set-iam-policyKEYRINGPOLICY_FILE[--location=LOCATION][GCLOUD_WIDE_FLAG …]
DESCRIPTION
Sets the IAM policy for the given keyring as defined in a JSON or YAML file.

Seehttps://cloud.google.com/iam/docs/managing-policiesfor details of the policy file format and contents.

EXAMPLES
The following command will read am IAM policy defined in a JSON file'policy.json' and set it for the keyringfellowship with locationglobal:
gcloudkmskeyringsset-iam-policyfellowshippolicy.json--location=global
POSITIONAL ARGUMENTS
KEYRING
Name of the key ring whose IAM policy to update.
POLICY_FILE
JSON or YAML file with the IAM policy
FLAGS
--location=LOCATION
Location of the keyring.
GCLOUD WIDE FLAGS
These flags are available to all commands:--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.

Run$gcloud help for details.

NOTES
These variants are also available:
gcloudalphakmskeyringsset-iam-policy
gcloudbetakmskeyringsset-iam-policy

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-05-07 UTC.