Gecko [ v3.cesa.co.za ]

Name	Size	Permission	Date
__pycache__	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
__init__.py	2.08 KB	-rw-r--r--	1980-01-01 08:00
add_iam_policy_binding.yaml	1.75 KB	-rw-r--r--	1980-01-01 08:00
create.py	6.64 KB	-rw-r--r--	1980-01-01 08:00
delete.py	3.34 KB	-rw-r--r--	1980-01-01 08:00
describe.py	1.55 KB	-rw-r--r--	1980-01-01 08:00
get_ancestors.yaml	778 B	-rw-r--r--	1980-01-01 08:00
get_ancestors_iam_policy.py	1.63 KB	-rw-r--r--	1980-01-01 08:00
get_iam_policy.py	1.51 KB	-rw-r--r--	1980-01-01 08:00
get_iam_policy.yaml	943 B	-rw-r--r--	1980-01-01 08:00
list.py	5.07 KB	-rw-r--r--	1980-01-01 08:00
move.py	3.56 KB	-rw-r--r--	1980-01-01 08:00
remove_iam_policy_binding.py	3.12 KB	-rw-r--r--	1980-01-01 08:00
remove_iam_policy_binding.yaml	2.12 KB	-rw-r--r--	1980-01-01 08:00
search.py	2.7 KB	-rw-r--r--	1980-01-01 08:00
set_iam_policy.py	1.79 KB	-rw-r--r--	1980-01-01 08:00
set_iam_policy.yaml	1.01 KB	-rw-r--r--	1980-01-01 08:00
undelete.py	1.74 KB	-rw-r--r--	1980-01-01 08:00
update.py	3.56 KB	-rw-r--r--	1980-01-01 08:00

Rename

release_tracks: [ALPHA, BETA, GA]
help_text:
  brief: Add IAM policy binding for a project
  description: |
    Adds a policy binding to the IAM policy of a project, given a
    project ID and the binding. One binding consists of a member, a role, and
    an optional condition.

examples: |
    To add an IAM policy binding for the role of `roles/editor` for the user
    `test-user@gmail.com` on a project with identifier `example-project-id-1`,
    run:

$ {command} example-project-id-1 --member='user:test-user@gmail.com' --role='roles/editor'

To add an IAM policy binding for the role of `roles/editor` to the service
    account `test-proj1@example.domain.com` on a project with identifier `example-project-id-1`,
    run:

$ {command} example-project-id-1 --member='serviceAccount:test-proj1@example.domain.com' --role='roles/editor'

To add an IAM policy binding that expires at the end of the year 2021 for
    the role of `roles/browser` and the user `test-user@gmail.com` on a project
    with identifier `example-project-id-1`, run:

$ {command} example-project-id-1 --member='user:test-user@gmail.com' --role='roles/browser' --condition='expression=request.time < timestamp("2019-01-01T00:00:00Z"),title=expires_end_of_2021,description=Expires at midnight on 2021-12-31'

See https://cloud.google.com/iam/docs/managing-policies for details of
    policy role and member types.

request:
  collection: cloudresourcemanager.projects
  use_relative_name: false

arguments:
  resource:
    help_text: The project to add the IAM policy binding.
    spec: !REF googlecloudsdk.command_lib.projects.resources:project

iam:
  enable_condition: true
  policy_version: 3
  get_iam_policy_version_path: getIamPolicyRequest.options.requestedPolicyVersion