gcloud-help/gcloud/alpha/iam/policies/update

NAME
    gcloud alpha iam policies update - update the policy on the given
        attachment point with the given name

SYNOPSIS
    gcloud alpha iam policies update POLICY_ID
        --attachment-point=ATTACHMENT_POINT --kind=KIND
        --policy-file=POLICY_FILE [--etag=ETAG] [GCLOUD_WIDE_FLAG ...]

DESCRIPTION
    (ALPHA) Update the policy on the given attachment point with the given
    name.

EXAMPLES
    The following command updates the IAM policy my-deny-policy, which is
    attached to the resource project 123 and has the etag abc:

        $ gcloud alpha iam policies update my-deny-policy \
            --attachment-point=cloudresourcemanager.googleapis.com/\
        projects/123 --kind=denypolicies --policy-file=policy.json \
            --etag=abc

POSITIONAL ARGUMENTS
     POLICY_ID
        Policy ID that is unique for the resource to which the policy is
        attached.

REQUIRED FLAGS
     --attachment-point=ATTACHMENT_POINT
        Resource to which the policy is attached. For valid formats, see
        https://cloud.google.com/iam/help/deny/attachment-point.

     --kind=KIND
        Policy type. Use denypolicies for deny policies.

     --policy-file=POLICY_FILE
        Path to the file that contains the policy, in JSON or YAML format. For
        valid syntax, see https://cloud.google.com/iam/help/deny/policy-syntax.

OPTIONAL FLAGS
     --etag=ETAG
        Etag that identifies the version of the existing policy. It can be
        obtained by running gcloud iam policies get. When deleting a policy, if
        the etag is omitted, the policy is deleted regardless of its current
        etag. When updating a policy, if the etag is omitted, the update uses
        the etag provided in the policy file.

GCLOUD WIDE FLAGS
    These flags are available to all commands: --access-token-file, --account,
    --billing-project, --configuration, --flags-file, --flatten, --format,
    --help, --impersonate-service-account, --log-http, --project, --quiet,
    --trace-token, --user-output-enabled, --verbosity.

    Run $ gcloud help for details.

NOTES
    This command is currently in alpha and might change without notice. If this
    command fails with API permission errors despite specifying the correct
    project, you might be trying to access an API with an invitation-only early
    access allowlist. These variants are also available:

        $ gcloud iam policies update

        $ gcloud beta iam policies update