gcloud run jobs remove-iam-policy-binding - remove IAM policy binding of a Cloud Run job

gcloud run jobs remove-iam-policy-bindingJOB--member=PRINCIPAL--role=ROLE[--region=REGION][GCLOUD_WIDE_FLAG …]

gcloudrunjobsremove-iam-policy-bindingmy-job--region='us-central1'--member='user:test-user@gmail.com'--role='roles/run.invoker'

Seehttps://cloud.google.com/iam/docs/managing-policiesfor details of policy role and member types.

Job resource - The job for which to remove the IAM policy binding. Thisrepresents a Cloud resource. (NOTE) Some attributes are not given arguments inthis group but can be set in other ways.

To set theproject attribute:

• provide the argumentjob on the command line with a fully specifiedname;
• provide the argument--project on the command line;
• set the propertycore/project.

To set theregion attribute:

• provide the argumentjob on the command line with a fully specifiedname;
• provide the argument--region on the command line;
• set the propertyrun/region;
• specify from a list of available regions in a prompt.

This must be specified.

JOB

ID of the job or fully qualified identifier for the job.

To set thejob attribute:

• provide the argumentjob on the command line.

--member=PRINCIPAL

The principal to remove the binding for. Should be of the formuser|group|serviceAccount:email ordomain:domain.

Examples:user:test-user@gmail.com,group:admins@example.com,serviceAccount:test123@example.domain.com, ordomain:example.domain.com.

Deleted principals have an additionaldeleted: prefix and a?uid=UID suffix, whereUID isa unique identifier for the principal. Example:deleted:user:test-user@gmail.com?uid=123456789012345678901.

Some resources also accept the following special values:

• allUsers - Special identifier that represents anyone who is on theinternet, with or without a Google account.
• allAuthenticatedUsers - Special identifier that represents anyonewho is authenticated with a Google account or a service account.

--role=ROLE

The role to remove the principal from.

--region=REGION

Region in which the resource can be found. Alternatively, set the property[run/region].

Run$gcloud help for details.