gcloud alpha compute forwarding-rules test-iam-permissions

NAME

gcloud alpha compute forwarding-rules test-iam-permissions - test IAM permissions for a Compute Engine forwarding rule

SYNOPSIS

gcloud alpha compute forwarding-rules test-iam-permissions NAME --permissions=[PERMISSION,…] [--global     | --region=REGION] [GCLOUD_WIDE_FLAG …]

DESCRIPTION

(ALPHA) gcloud alpha compute forwarding-rules test-iam-permissions tests the IAM permissions that a caller has on a Compute Engine forwarding rule.

EXAMPLES

To test if the caller has the compute.forwardingRules.setIamPolicy permission on the regional forwarding rule my-forwarding-rule in region us-central1, run:

gcloud alpha compute forwarding-rules test-iam-permissions my-forwarding-rule --region=us-central1 --permissions=compute.forwardingRules.setIamPolicy

To test if the caller has the compute.globalForwardingRules.setIamPolicy permission on the global forwarding rule my-forwarding-rule, run:

gcloud alpha compute forwarding-rules test-iam-permissions my-forwarding-rule --global --permissions=compute.globalForwardingRules.setIamPolicy

POSITIONAL ARGUMENTS

NAME

Name of the forwarding rule to test-iam-permissions.

REQUIRED FLAGS

--permissions=[PERMISSION,…]

The set of permissions to check for the resource.

OPTIONAL FLAGS

At most one of these can be specified:

--global

If set, the forwarding rule is global.

--region=REGION

Region of the forwarding rule to test-iam-permissions. If not specified, you might be prompted to select a region (interactive mode only).

To avoid prompting when this flag is omitted, you can set the compute/region property:

gcloud config set compute/region REGION

A list of regions can be fetched by running:

gcloud compute regions list

To unset the property, run:

gcloud config unset compute/region

Alternatively, the region can be stored in the environment variable CLOUDSDK_COMPUTE_REGION.

GCLOUD WIDE FLAGS

These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.

NOTES

This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early access allowlist.