gcloud active-directory domains set-iam-policy - set the IAM policy for a Managed Microsoft AD domain

gcloud active-directory domains set-iam-policyDOMAINPOLICY_FILE[GCLOUD_WIDE_FLAG …]

This command can fail for the following reasons:

• The domain specified does not exist.
• The active account does not have permission to access the given domain's IAMpolicies.

gcloudactive-directorydomainsset-iam-policymy-domain.compolicy.json

Seehttps://cloud.google.com/iam/docs/managing-policiesfor details of the policy file format and contents.

Domain resource - Name of the Managed Microsoft AD domain you want to set theIAM policy for. This represents a Cloud resource. (NOTE) Some attributes are notgiven arguments in this group but can be set in other ways.

To set theproject attribute:

• provide the argumentdomain on the command line with a fullyspecified name;
• provide the argument--project on the command line;
• set the propertycore/project.

This must be specified.

DOMAIN

ID of the domain or fully qualified identifier for the domain.

To set thedomain attribute:

• provide the argumentdomain on the command line.

POLICY_FILE

Path to a local JSON or YAML formatted file containing a valid policy.

The output of theget-iam-policy command is a valid file, as is anyJSON or YAML file conforming to the structure of aPolicy.

Run$gcloud help for details.