gcloud iap web set-iam-policy

NAME
gcloud iap web set-iam-policy - set the IAM policy for an IAP IAM resource
SYNOPSIS
gcloud iap web set-iam-policyPOLICY_FILE[--region=REGION--resource-type=RESOURCE_TYPE--service=SERVICE--version=VERSION][GCLOUD_WIDE_FLAG …]
DESCRIPTION
This command replaces the existing IAM policy for an IAP IAM resource, given afile encoded in JSON or YAML that contains the IAM policy. If the given policyfile specifies an "etag" value, then the replacement will succeed only if thepolicy already in place matches that etag. (An etag obtained via $gcloud iap webget-iam-policy will prevent the replacement if the policy for the resourcehas been subsequently updated.) A policy file that does not contain an etagvalue will replace any existing policy for the resource.
EXAMPLES
To set the IAM policy for the web accesses to the IAP protected resources withinthe active project, run:
gcloudiapwebset-iam-policyPOLICY_FILE

To set the IAM policy for the web accesses to the IAP protected resources withina project, run:

gcloudiapwebset-iam-policyPOLICY_FILE--project=PROJECT_ID

To set the IAM policy for the web accesses to the IAP protected resources withinan App Engine application, run:

gcloudiapwebset-iam-policyPOLICY_FILE--resource-type=app-engine

To set the IAM policy for the web accesses to the IAP protected resources withinan App Engine service, run:

gcloudiapwebset-iam-policyPOLICY_FILE--resource-type=app-engine--service=SERVICE_ID

To set the IAM policy for the web accesses to the IAP protected resources withinan App Engine service version, run:

gcloudiapwebset-iam-policyPOLICY_FILE--resource-type=app-engine--service=SERVICE_ID--version=VERSION

To set the IAM policy for the web accesses to the IAP protected resources withinall backend services, run:

gcloudiapwebset-iam-policyPOLICY_FILE--resource-type=backend-services

To set the IAM policy for the web accesses to the IAP protected resources withina backend service, run:

gcloudiapwebset-iam-policyPOLICY_FILE--resource-type=backend-services--service=SERVICE_ID

To set the IAM policy for the web accesses to the IAP protected resources withina regional backend service, run:

gcloudiapwebset-iam-policyPOLICY_FILE--resource-type=backend-services--service=SERVICE_ID--region=REGION
POSITIONAL ARGUMENTS
POLICY_FILE
JSON or YAML file containing the IAM policy.
FLAGS
--region=REGION
Region name. Should only be specified with--resource-type=backend-services if it is a regional scoped. Notapplicable for global scoped backend services.
--resource-type=RESOURCE_TYPE
Resource type of the IAP resource.RESOURCE_TYPE must beone of:app-engine,backend-services,forwarding-rule.
--service=SERVICE
Service name.
--version=VERSION
Service version. Should only be specified with--resource-type=app-engine.
GCLOUD WIDE FLAGS
These flags are available to all commands:--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.

Run$gcloud help for details.

NOTES
These variants are also available:
gcloudalphaiapwebset-iam-policy
gcloudbetaiapwebset-iam-policy

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-05-07 UTC.