Method: policies.update

Updates the specified policy.

You can update only the rules and the display name for the policy.

To update a policy, you should use a read-modify-write loop:

  1. Usepolicies.get to read the current version of the policy.
  2. Modify the policy as needed.
  3. Usepolicies.update to write the updated policy.

This pattern helps prevent conflicts between concurrent updates.

HTTP request

PUT https://iam.googleapis.com/v2beta/{policy.name=policies/*/*/*}

The URL usesgRPC Transcoding syntax.

Path parameters

Parameters
policy.name

string

Immutable. The resource name of thePolicy, which must be unique. Format:policies/{attachmentPoint}/denypolicies/{policyId}

The attachment point is identified by its URL-encoded full resource name, which means that the forward-slash character,/, must be written as%2F. For example,policies/cloudresourcemanager.googleapis.com%2Fprojects%2Fmy-project/denypolicies/my-deny-policy.

For organizations and folders, use the numeric ID in the full resource name. For projects, requests can use the alphanumeric or the numeric ID. Responses always contain the numeric ID.

Request body

The request body contains an instance ofPolicy.

Response body

If successful, the response body contains an instance ofOperation.

Authorization scopes

Requires one of the following OAuth scopes:

  • https://www.googleapis.com/auth/cloud-platform
  • https://www.googleapis.com/auth/iam

For more information, see theAuthentication Overview.

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-05-21 UTC.