NAME
    gcloud alpha dataplex lakes deauthorize - deauthorize a service agent from
        managing resources

SYNOPSIS
    gcloud alpha dataplex lakes deauthorize
        (--project-resource=PROJECT_RESOURCE
          | --storage-bucket-resource=STORAGE_BUCKET_RESOURCE
          | --bigquery-dataset-resource=BIGQUERY_DATASET_RESOURCE
          --secondary-project=SECONDARY_PROJECT) [GCLOUD_WIDE_FLAG ...]

DESCRIPTION
    (ALPHA) The service agent for the primary project will have its IAM role
    revoked from a secondary project, a Cloud Storage bucket, or a BigQuery
    dataset.

EXAMPLES
    To deauthorize the service agent in project test-project from managing
    resources in the project test-project2, run:

        $ gcloud alpha dataplex lakes deauthorize --project=test-project \
            --project-resource=test-project2

    To deauthorize the service agent in project test-project from managing the
    Cloud Storage bucket dataplex-storage-bucket, run:

        $ gcloud alpha dataplex lakes deauthorize --project=test-project \
            --storage-bucket-resource=dataplex-storage-bucket

    To deauthorize the service agent in project test-project from managing the
    BigQuery dataset test-dataset in project test-project2, run:

        $ gcloud alpha dataplex lakes deauthorize --project=test-project \
            --bigquery-dataset-resource=test-dataset \
            --secondary-project=test-project2

REQUIRED FLAGS
     The resource for which the service agent's role will be revoked.

     Exactly one of these must be specified:

       --project-resource=PROJECT_RESOURCE
          The identifier of the project whose resources the service agent will
          no longer manage.

       --storage-bucket-resource=STORAGE_BUCKET_RESOURCE
          The identifier of the Cloud Storage bucket that the service agent
          will no longer manage.

       Or at least one of these can be specified:

         Fields to identify the BigQuery dataset.

         --bigquery-dataset-resource=BIGQUERY_DATASET_RESOURCE
            The identifier of the BigQuery dataset that the service agent will
            no longer manage.

            This flag argument must be specified if any of the other arguments
            in this group are specified.

         --secondary-project=SECONDARY_PROJECT
            The identifier of the project where the BigQuery dataset is
            located.

            This flag argument must be specified if any of the other arguments
            in this group are specified.

GCLOUD WIDE FLAGS
    These flags are available to all commands: --access-token-file, --account,
    --billing-project, --configuration, --flags-file, --flatten, --format,
    --help, --impersonate-service-account, --log-http, --project, --quiet,
    --trace-token, --user-output-enabled, --verbosity.

    Run $ gcloud help for details.

NOTES
    This command is currently in alpha and might change without notice. If this
    command fails with API permission errors despite specifying the correct
    project, you might be trying to access an API with an invitation-only early
    access allowlist. This variant is also available:

        $ gcloud dataplex lakes deauthorize

