POSITIONAL ARGUMENTS

Dataset resource - The genomics dataset for which to add IAM policy binding to. This represents a Cloud resource. This must be specified.

DATASET

ID of the dataset or fully qualified identifier for the dataset.

REQUIRED FLAGS

--member=MEMBER

The member to add the binding for. Should be of the form user|group|serviceAccount:email or domain:domain.
Examples: user:test-user@gmail.com, group:admins@example.com, serviceAccount:test123@example.domain.com, or domain:example.domain.com.
Can also be one of the following special values:

---

allUsers - anyone who is on the internet, with or without a Google account.

---

allAuthenticatedUsers - anyone who is authenticated with a Google account or a service account.

--role=ROLE

Define the role of the member.

OPTIONAL FLAGS

At most one of these may be specified:

--condition=[KEY=VALUE,...]

Condition of the binding to be added. When condition is explicitly specified as None (e.g. --condition=None), a binding without a condition is added. When --condition is specified and is not a None condition, --role cannot be a primitive role. Primitive roles are roles/editor, roles/owner, and roles/viewer.

expression

(Required) Expression of the condition which evaluates to True or False. This uses a subset of Common Expression Language syntax.

title

(Required) Title for the expression, i.e. a short string describing its purpose.

description

(Optional) Description for the expression. This is a longer text which describes the expression.
NOTE: An unsatisfied condition will not allow access via this binding.

--condition-from-file=CONDITION_FROM_FILE

Path to a local JSON or YAML file that defines the condition. To see available fields, see the help for --condition.

GCLOUD WIDE FLAGS

API REFERENCE

EXAMPLES

$ gcloud alpha genomics datasets add-iam-policy-binding my-dataset \
    --member='user:test-user@gmail.com' --role='roles/editor'

$ gcloud alpha genomics datasets add-iam-policy-binding \
    test-proj1@example.domain.com \
    --member='serviceAccount:test-proj1@example.domain.com' \
    --role='roles/editor'

$ gcloud alpha genomics datasets add-iam-policy-binding my-dataset \
    --member='allAuthenticatedUsers' --role='roles/editor'

$ gcloud alpha genomics datasets add-iam-policy-binding my-dataset \
    --member='user:test-user@gmail.com' \
    --role='roles/genomics.admin' \
    --condition='expression=request.time <
 timestamp("2019-01-01T00:00:00Z"),title=expires_end_of_2018,descrip\ tion=Expires at midnight on 2018-12-31'

NOTES