GCP-IAM

Manage identity and access control for Google Cloud Platform resources.

Category

IT Services

Pack

GCP-IAM

Configuration parameters

• credentials — (required)
• proxy — Use system proxy settings
• insecure — Trust any certificate (not secure)

Commands (65)

• gcp-iam-folder-iam-member-add — Adds members to the folder policy.
• gcp-iam-folder-iam-member-remove — Removes members from the folder policy.
• gcp-iam-folder-iam-permission-test — Returns permissions that a caller has on the specified folder. The permission list can be obtained by running the 'gcp-iam-testable-permission-list' command.
• gcp-iam-folder-iam-policy-create — Adds a new folder IAM policy.
• gcp-iam-folder-iam-policy-get — Retrieves the IAM access control policy for the specified folder.
• gcp-iam-folder-iam-policy-remove — Removes a policy from the folder IAM policies.
• gcp-iam-folder-iam-policy-set — Sets the IAM access control policy for the specified folder. This operation will overwrite any existing policy.
• gcp-iam-folders-get — Lists folders under the specified parent, or retrieves a specific folder information. One of the arguments: 'parent' or 'folder_name' must be provided.
• gcp-iam-grantable-role-list — Lists roles that can be granted on a Google Cloud resource. A role is grantable if the IAM policy for the resource can contain bindings to the role.
• gcp-iam-group-create — Create a new group. The end user making the request will be added as the initial owner of the group.
• gcp-iam-group-delete — Deletes a group.
• gcp-iam-group-get — Retrieves a group information.
• gcp-iam-group-list — Lists groups that are visible to the caller.
• gcp-iam-group-membership-create — Creates a group membership.
• gcp-iam-group-membership-delete — Deletes a group membership.
• gcp-iam-group-membership-get — Retrieves group membership information.
• gcp-iam-group-membership-list — Lists group memberships.
• gcp-iam-group-membership-role-add — Adds a group membership role.
• gcp-iam-group-membership-role-remove — Removes a group membership role.
• gcp-iam-organization-iam-member-add — Adds members to the organization policy.
• gcp-iam-organization-iam-member-remove — Removes members from the organization policy.
• gcp-iam-organization-iam-permission-test — Returns permissions that a caller has on the specified organization. The permission list can be obtained by running the 'gcp-iam-testable-permission-list' command.
• gcp-iam-organization-iam-policy-create — Adds a new organization IAM policy.
• gcp-iam-organization-iam-policy-get — Retrieves the IAM access control policy for the specified organization.
• gcp-iam-organization-iam-policy-remove — Removes a policy from the organization IAM policies.
• gcp-iam-organization-iam-policy-set — Sets the IAM access control policy for the specified organization. This operation will overwrite any existing policy.
• gcp-iam-organization-role-create — Creates a custom organization role.
• gcp-iam-organization-role-delete — Deletes a custom organization role.
• gcp-iam-organization-role-get — Retrieves the organization role information.
• gcp-iam-organization-role-list — Lists the organization custom roles.
• gcp-iam-organization-role-permission-add — Adds permissions to a custom organization role.
• gcp-iam-organization-role-permission-remove — Removes permissions from a custom organization role.
• gcp-iam-organization-role-update — Updates a custom organization role.
• gcp-iam-organizations-get — Lists organization resources that are visible to the caller, or retrieves an organization's information.
• gcp-iam-project-iam-member-add — Adds members to the project policy.
• gcp-iam-project-iam-member-remove — Removes members from the project policy.
• gcp-iam-project-iam-permission-test — Returns permissions that a caller has on the specified project. The permission list can be obtained by running the 'gcp-iam-testable-permission-list' command.
• gcp-iam-project-iam-policy-create — Adds a new project IAM policy.
• gcp-iam-project-iam-policy-get — Retrieves the IAM access control policy for the specified project.
• gcp-iam-project-iam-policy-remove — Removes the policy from the project IAM policies.
• gcp-iam-project-iam-policy-set — Sets the IAM access control policy for the specified project. This operation will overwrite any existing policy.
• gcp-iam-project-role-create — Creates a custom project role.
• gcp-iam-project-role-delete — Deletes a custom project role.
• gcp-iam-project-role-get — Retrieves a custom project role.
• gcp-iam-project-role-list — Lists a project custom roles.
• gcp-iam-project-role-permission-add — Adds permissions to a custom project role.
• gcp-iam-project-role-permission-remove — Removes permissions from a custom project role.
• gcp-iam-project-role-update — Updates a custom project role.
• gcp-iam-projects-get — Lists project under the specified parent, or retrieves a specific project's information. One of the following arguments must be provided: "parent" or "project_name".
• gcp-iam-role-get — Retrieves the GCP IAM predefined role information.
• gcp-iam-role-list — Lists every predefined role that IAM supports.
• gcp-iam-service-account-create — Creates a service account in project.
• gcp-iam-service-account-delete — Deletes a service account.
• gcp-iam-service-account-disable — Disables a project service account.
• gcp-iam-service-account-enable — Enables a project service account.
• gcp-iam-service-account-generate-access-token — Create a short-lived access token for a service account. The generated token will be exposed to the context menu and War Room, and can potentially be logged.
• gcp-iam-service-account-key-create — Creates a service account key. A service account can have up to 10 keys. Service account keys that you create don't have an expiry date and stay valid until you delete them.
• gcp-iam-service-account-key-delete — Deletes a service account key.
• gcp-iam-service-account-key-disable — Disables a service account key.
• gcp-iam-service-account-key-enable — Enables a service account key.
• gcp-iam-service-account-keys-get — Lists service account keys, or retrieves a specific service account key information. One of the arguments: 'service_account_name' or 'key_name' must be provided.
• gcp-iam-service-account-update — Updates a service account.
• gcp-iam-service-accounts-get — Lists service accounts in project, or retrieves a specific service accounts information. One of the arguments: 'service_account_name' or 'project_name' must be provided.
• gcp-iam-tagbindings-list — List tag bindings (key value pair) applied to a project/folder/organization object.
• gcp-iam-testable-permission-list — Lists every permission that can be tested on a resource.