gcloud projects get-iam-policy

From wikieduonline
Jump to navigation Jump to search 

gcloud projects get-iam-policy your_project_name doc

gcloud projects get-iam-policy $GCP_PROJECT_NAME --flatten="bindings[].members" --format="table(bindings.members)"

 gcloud projects get-iam-policy $GCP_PROJECT_NAME --flatten="bindings[].members" --format="table(bindings.members)" | grep . | sort -u


Fish 

# Policies for all projects

#!/usr/bin/env fish

set user_email (gcloud config get-value account)

echo "Checking roles for $user_email across all visible projects..."
echo ""

for project_id in (gcloud projects list --format="value(projectId)")
   echo "=== $project_id ==="
   gcloud projects get-iam-policy $project_id \
       --flatten="bindings[].members" \
       --filter="bindings.members:user:$user_email" \
       --format="value(bindings.role)"
   echo ""
end

# Policies for my project
set p (gcloud config get-value project); set a (gcloud config get-value account)
gcloud projects get-iam-policy $p --flatten="bindings[].members" --filter="bindings.members:user:$a" --format="table(bindings.role)"



gcloud projects get-iam-policy your_project_name
.../...
- members:
  - user: your_username1@your_domain.com
  - user: your_username2@your_domain.com



- condition:
    expression: resource.name == "your-bucket-name"
    title: Your-tible
  members:
  - user:[email protected]
  role: roles/storage.admin



# View projects with their owners: roles/owner
for project in (gcloud projects list --format="value(projectId)")
  echo "========================================"
  echo "Project: $project"
  echo "========================================"
  gcloud projects describe $project
  echo ""
  echo "Owners:"
  gcloud projects get-iam-policy $project \
    --flatten="bindings[].members" \
    --filter="bindings.role=roles/owner" \
    --format="value(bindings.members)"
  echo ""
end


Errors[edit]

gcloud projects get-iam-policy project-co
ERROR: (gcloud.projects.get-iam-policy) User [local-user@your-project.iam.gserviceaccount.com] does not have permission to  access projects instance [your-project:getIamPolicy] (or it may not exist): The caller does not have permission

Related[edit]

See also[edit]

Retrieved from "https://www.wikieduonline.com/index.php?title=Gcloud_projects_get-iam-policy&oldid=461886"

Advertising: