gcloud dataplex lakes deauthorize

NAME
gcloud dataplex lakes deauthorize - deauthorize a service agent from managing resources
SYNOPSIS
gcloud dataplex lakes deauthorize(--project-resource=PROJECT_RESOURCE    |--storage-bucket-resource=STORAGE_BUCKET_RESOURCE    |--bigquery-dataset-resource=BIGQUERY_DATASET_RESOURCE--secondary-project=SECONDARY_PROJECT)[GCLOUD_WIDE_FLAG …]
DESCRIPTION
The service agent for the primary project will have its IAM role revoked from asecondary project, a Cloud Storage bucket, or a BigQuery dataset.
EXAMPLES
To deauthorize the service agent in projecttest-project frommanaging resources in the projecttest-project2, run:
gclouddataplexlakesdeauthorize--project=test-project--project-resource=test-project2

To deauthorize the service agent in projecttest-project frommanaging the Cloud Storage bucketdataplex-storage-bucket, run:

gclouddataplexlakesdeauthorize--project=test-project--storage-bucket-resource=dataplex-storage-bucket

To deauthorize the service agent in projecttest-project frommanaging the BigQuery datasettest-dataset in projecttest-project2, run:

gclouddataplexlakesdeauthorize--project=test-project--bigquery-dataset-resource=test-dataset--secondary-project=test-project2
REQUIRED FLAGS
The resource for which the service agent's role will be revoked.

Exactly one of these must be specified:

--project-resource=PROJECT_RESOURCE
The identifier of the project whose resources the service agent will no longermanage.
--storage-bucket-resource=STORAGE_BUCKET_RESOURCE
The identifier of the Cloud Storage bucket that the service agent will no longermanage.
Or at least one of these can be specified:
Fields to identify the BigQuery dataset.
--bigquery-dataset-resource=BIGQUERY_DATASET_RESOURCE
The identifier of the BigQuery dataset that the service agent will no longermanage.

This flag argument must be specified if any of the other arguments in this groupare specified.

--secondary-project=SECONDARY_PROJECT
The identifier of the project where the BigQuery dataset is located.

This flag argument must be specified if any of the other arguments in this groupare specified.

GCLOUD WIDE FLAGS
These flags are available to all commands:--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.

Run$gcloud help for details.

NOTES
This variant is also available:
gcloudalphadataplexlakesdeauthorize

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-01-21 UTC.