gcloud preview compute reservations sub-blocks set-iam-policy

NAME

gcloud preview compute reservations sub-blocks set-iam-policy - set the IAM policy binding for a Compute Engine reservation sub-block

SYNOPSIS

gcloud preview compute reservations sub-blocks set-iam-policy RESERVATION POLICY_FILE --block-name=BLOCK_NAME --sub-block-name=SUB_BLOCK_NAME [--zone=ZONE] [GCLOUD_WIDE_FLAG …]

DESCRIPTION

(PREVIEW) Sets the IAM policy for the given reservation sub-block as defined in a JSON or YAML file.

EXAMPLES

To set the IAM policy on a reservation sub-block in reservation my-reservation in zone us-central1-a with block name my-block and sub-block name my-sub-block using a policy file policy.json, run:

gcloud preview compute reservations sub-blocks set-iam-policy my-reservation policy.json --zone=us-central1-a --block-name=my-block --sub-block-name=my-sub-block

POSITIONAL ARGUMENTS

RESERVATION

Name of the reservation to set-iam-policy.

POLICY_FILE

Path to a local JSON or YAML formatted file containing a valid policy.

The output of the get-iam-policy command is a valid file, as is any JSON or YAML file conforming to the structure of a Policy.

REQUIRED FLAGS

--block-name=BLOCK_NAME

The name of the reservation block.

--sub-block-name=SUB_BLOCK_NAME

The name of the reservation sub block.

OPTIONAL FLAGS

--zone=ZONE

Zone of the reservation to set-iam-policy. If not specified and the compute/zone property isn't set, you might be prompted to select a zone (interactive mode only).

To avoid prompting when this flag is omitted, you can set the compute/zone property:

gcloud config set compute/zone ZONE

A list of zones can be fetched by running:

gcloud compute zones list

To unset the property, run:

gcloud config unset compute/zone

Alternatively, the zone can be stored in the environment variable CLOUDSDK_COMPUTE_ZONE.

GCLOUD WIDE FLAGS

These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.

NOTES

This command is currently in DEVELOPER PREVIEW and may change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early access allowlist. These variants are also available:

gcloud compute reservations sub-blocks set-iam-policy

gcloud beta compute reservations sub-blocks set-iam-policy