NAME
    gcloud iap web set-iam-policy - set the IAM policy for an IAP IAM resource

SYNOPSIS
    gcloud iap web set-iam-policy POLICY_FILE
        [--region=REGION
          --resource-type=RESOURCE_TYPE --service=SERVICE --version=VERSION]
        [GCLOUD_WIDE_FLAG ...]

DESCRIPTION
    This command replaces the existing IAM policy for an IAP IAM resource,
    given a file encoded in JSON or YAML that contains the IAM policy. If the
    given policy file specifies an "etag" value, then the replacement will
    succeed only if the policy already in place matches that etag. (An etag
    obtained via $ gcloud iap web get-iam-policy will prevent the replacement
    if the policy for the resource has been subsequently updated.) A policy
    file that does not contain an etag value will replace any existing policy
    for the resource.

EXAMPLES
    To set the IAM policy for the web accesses to the IAP protected resources
    within the active project, run:

        $ gcloud iap web set-iam-policy POLICY_FILE

    To set the IAM policy for the web accesses to the IAP protected resources
    within a project, run:

        $ gcloud iap web set-iam-policy POLICY_FILE --project=PROJECT_ID

    To set the IAM policy for the web accesses to the IAP protected resources
    within an App Engine application, run:

        $ gcloud iap web set-iam-policy POLICY_FILE \
            --resource-type=app-engine

    To set the IAM policy for the web accesses to the IAP protected resources
    within an App Engine service, run:

        $ gcloud iap web set-iam-policy POLICY_FILE \
            --resource-type=app-engine --service=SERVICE_ID

    To set the IAM policy for the web accesses to the IAP protected resources
    within an App Engine service version, run:

        $ gcloud iap web set-iam-policy POLICY_FILE \
            --resource-type=app-engine --service=SERVICE_ID \
            --version=VERSION

    To set the IAM policy for the web accesses to the IAP protected resources
    within all backend services, run:

        $ gcloud iap web set-iam-policy POLICY_FILE \
            --resource-type=backend-services

    To set the IAM policy for the web accesses to the IAP protected resources
    within a backend service, run:

        $ gcloud iap web set-iam-policy POLICY_FILE \
            --resource-type=backend-services --service=SERVICE_ID

    To set the IAM policy for the web accesses to the IAP protected resources
    within a regional backend service, run:

        $ gcloud iap web set-iam-policy POLICY_FILE \
            --resource-type=backend-services --service=SERVICE_ID \
            --region=REGION

    To set the IAM policy for the web accesses to the IAP protected resources
    within a Cloud Run service, run:

        $ gcloud iap web set-iam-policy POLICY_FILE \
            --resource-type=cloud-run --service=SERVICE_ID --region=REGION

POSITIONAL ARGUMENTS
     POLICY_FILE
        JSON or YAML file containing the IAM policy.

FLAGS
     --region=REGION
        Region name. Not applicable for resource-type=app-engine. Required when
        resource-type=backend-services and regional scoped. Not applicable for
        global backend-services. Required when resource-type=cloud-run.

     --resource-type=RESOURCE_TYPE
        Resource type of the IAP resource. RESOURCE_TYPE must be one of:
        app-engine, backend-services, forwarding-rule, cloud-run.

     --service=SERVICE
        Service name.

     --version=VERSION
        Service version. Should only be specified with
        --resource-type=app-engine.

GCLOUD WIDE FLAGS
    These flags are available to all commands: --access-token-file, --account,
    --billing-project, --configuration, --flags-file, --flatten, --format,
    --help, --impersonate-service-account, --log-http, --project, --quiet,
    --trace-token, --user-output-enabled, --verbosity.

    Run $ gcloud help for details.

NOTES
    These variants are also available:

        $ gcloud alpha iap web set-iam-policy

        $ gcloud beta iap web set-iam-policy

