GCP-IAM

Adds members to the folder policy.

Removes members from the folder policy.

Returns permissions that a caller has on the specified folder. The permission list can be obtained by running the 'gcp-iam-testable-permission-list' command.

Adds a new folder IAM policy.

Retrieves the IAM access control policy for the specified folder.

Removes a policy from the folder IAM policies.

Sets the IAM access control policy for the specified folder. This operation will overwrite any existing policy.

Lists folders under the specified parent, or retrieves a specific folder information. One of the arguments: 'parent' or 'folder_name' must be provided.

Lists roles that can be granted on a Google Cloud resource. A role is grantable if the IAM policy for the resource can contain bindings to the role.

Create a new group. The end user making the request will be added as the initial owner of the group.

Deletes a group.

Retrieves a group information.

Lists groups that are visible to the caller.

Creates a group membership.

Deletes a group membership.

Retrieves group membership information.

Lists group memberships.

Adds a group membership role.

Removes a group membership role.

Adds members to the organization policy.

Removes members from the organization policy.

Returns permissions that a caller has on the specified organization. The permission list can be obtained by running the 'gcp-iam-testable-permission-list' command.

Adds a new organization IAM policy.

Retrieves the IAM access control policy for the specified organization.

Removes a policy from the organization IAM policies.

Sets the IAM access control policy for the specified organization. This operation will overwrite any existing policy.

Creates a custom organization role.

Deletes a custom organization role.

Retrieves the organization role information.

Lists the organization custom roles.

Adds permissions to a custom organization role.

Removes permissions from a custom organization role.

Updates a custom organization role.

Lists organization resources that are visible to the caller, or retrieves an organization's information.

Adds members to the project policy.

Removes members from the project policy.

Returns permissions that a caller has on the specified project. The permission list can be obtained by running the 'gcp-iam-testable-permission-list' command.

Adds a new project IAM policy.

Retrieves the IAM access control policy for the specified project.

Removes the policy from the project IAM policies.

Sets the IAM access control policy for the specified project. This operation will overwrite any existing policy.

Creates a custom project role.

Deletes a custom project role.

Retrieves a custom project role.

Lists a project custom roles.

Adds permissions to a custom project role.

Removes permissions from a custom project role.

Updates a custom project role.

Lists project under the specified parent, or retrieves a specific project's information. One of the following arguments must be provided: "parent" or "project_name".

Retrieves the GCP IAM predefined role information.

Lists every predefined role that IAM supports.

Creates a service account in project.

Deletes a service account.

Disables a project service account.

Enables a project service account.

Create a short-lived access token for a service account. The generated token will be exposed to the context menu and War Room, and can potentially be logged.

Creates a service account key. A service account can have up to 10 keys. Service account keys that you create don't have an expiry date and stay valid until you delete them.

Deletes a service account key.

Disables a service account key.

Enables a service account key.

Lists service account keys, or retrieves a specific service account key information. One of the arguments: 'service_account_name' or 'key_name' must be provided.

Updates a service account.

Lists service accounts in project, or retrieves a specific service accounts information. One of the arguments: 'service_account_name' or 'project_name' must be provided.

List tag bindings (key value pair) applied to a project/folder/organization object.

Lists every permission that can be tested on a resource.