gcloud preview compute backend-buckets test-iam-permissions

NAME

gcloud preview compute backend-buckets test-iam-permissions - test IAM permissions for a Compute Engine backend bucket

SYNOPSIS

gcloud preview compute backend-buckets test-iam-permissions BACKEND_BUCKET --permissions=[PERMISSION,…] [--global     | --region=REGION] [GCLOUD_WIDE_FLAG …]

DESCRIPTION

(PREVIEW) gcloud preview compute backend-buckets test-iam-permissions tests the IAM permissions that a caller has on a Compute Engine backend bucket.

Note: This operation is designed to be used for building permission-aware UIs and command-line tools, not for authorization checking. This operation may "fail open" without warning.

EXAMPLES

To test if the caller has compute.backendBuckets.get and compute.backendBuckets.update permissions on a global backend bucket my-backend-bucket, run:

gcloud preview compute backend-buckets test-iam-permissions my-backend-bucket --permissions=compute.backendBuckets.get,compute.backendBuckets.update

To test permissions on a regional backend bucket my-backend-bucket in region us-central1, run:

gcloud preview compute backend-buckets test-iam-permissions my-backend-bucket --region=us-central1 --permissions=compute.regionBackendBuckets.get,compute.regionBackendBuckets.update

POSITIONAL ARGUMENTS

BACKEND_BUCKET

ID of the backend bucket or fully qualified identifier for the backend bucket.

To set the backend_bucket attribute:
+ provide the argument backend_bucket on the command line.

REQUIRED FLAGS

--permissions=[PERMISSION,…]

The set of permissions to check for the resource.

OPTIONAL FLAGS

At most one of these can be specified:

--global

If set, the backend bucket is global.

--region=REGION

Region of the backend bucket to test IAM permissions for. Overrides the default compute/region property value for this command invocation.

GCLOUD WIDE FLAGS

These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.

API REFERENCE

This command uses the compute API. The full documentation for this API can be found at: https://cloud.google.com/compute/

NOTES

This command is currently in DEVELOPER PREVIEW and may change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early access allowlist. These variants are also available:

gcloud compute backend-buckets test-iam-permissions

gcloud alpha compute backend-buckets test-iam-permissions

gcloud beta compute backend-buckets test-iam-permissions