- gcloud alpha kms keyrings set-iam-policy - set the IAM policy for a keyring
gcloud alpha kms keyrings set-iam-policy KEYRING POLICY_FILE [--location=LOCATION] [GCLOUD_WIDE_FLAG ...]
(ALPHA) Sets the IAM policy for the given keyring as defined in a JSON or
See cloud.google.com/iam/docs/managing-policies for details of the policy file format and contents.
Name of the key ring whose IAM policy to update.
JSON or YAML file with the IAM policy
Location of the keyring.
GCLOUD WIDE FLAGS
These flags are available to all commands: --account, --configuration, --flags-file, --flatten, --format, --help, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity. Run $ gcloud help for details.
The following command will read am IAM policy defined in a JSON file 'policy.json' and set it for the keyring fellowship with location global:
$ gcloud alpha kms keyrings set-iam-policy fellowship policy.json \
This command is currently in ALPHA and may change without notice. If this command fails with API permission errors despite specifying the right project, you will have to apply for early access and have your projects registered on the API whitelist to use it. To do so, contact Support at cloud.google.com/support These variants are also available:
- $ gcloud kms keyrings set-iam-policy $ gcloud beta kms keyrings set-iam-policy