gcloud alpha compute ssl-certificates test-iam-permissions

NAME
gcloud alpha compute ssl-certificates test-iam-permissions - test IAM permissions for a Compute Engine SSL certificate
SYNOPSIS
gcloud alpha compute ssl-certificates test-iam-permissions NAME --permissions=[PERMISSION,…] [--global     | --region=REGION] [GCLOUD_WIDE_FLAG …]
DESCRIPTION
(ALPHA) gcloud alpha compute ssl-certificates test-iam-permissions tests the IAM permissions that a caller has on a Compute Engine SSL certificate.
EXAMPLES
To test if the caller has the compute.regionSslCertificates.get permission on the regional SSL certificate my-cert in region us-central1, run: 
gcloud alpha compute ssl-certificates test-iam-permissions my-cert --region=us-central1 --permissions=compute.regionSslCertificates.get

To test if the caller has the compute.sslCertificates.get permission on the global SSL certificate my-cert, run: 

gcloud alpha compute ssl-certificates test-iam-permissions my-cert --global --permissions=compute.sslCertificates.get
POSITIONAL ARGUMENTS
NAME
Name of the SSL certificate to test-iam-permissions.
REQUIRED FLAGS
--permissions=[PERMISSION,…]
Permissions to be tested.
OPTIONAL FLAGS
At most one of these can be specified:
--global
(Default) If set, the SSL certificate is global.
--region=REGION
Region of the SSL certificate to test-iam-permissions. If not specified, you might be prompted to select a region (interactive mode only).

To avoid prompting when this flag is omitted, you can set the compute/region property: 

gcloud config set compute/region REGION

A list of regions can be fetched by running: 

gcloud compute regions list

To unset the property, run: 

gcloud config unset compute/region

Alternatively, the region can be stored in the environment variable CLOUDSDK_COMPUTE_REGION.

GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.

NOTES
This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early access allowlist.