NAME
    gcloud dataplex lakes authorize - authorize a service agent to manage
        resources

SYNOPSIS
    gcloud dataplex lakes authorize
        (--project-resource=PROJECT_RESOURCE
          | --storage-bucket-resource=STORAGE_BUCKET_RESOURCE
          | --bigquery-dataset-resource=BIGQUERY_DATASET_RESOURCE
          --secondary-project=SECONDARY_PROJECT) [GCLOUD_WIDE_FLAG ...]

DESCRIPTION
    The service agent for the primary project will be granted an IAM role on a
    secondary project, a Cloud Storage bucket, or a BigQuery dataset.

EXAMPLES
    To authorize the service agent in project test-project to manage resources
    in the project test-project2, run:

        $ gcloud dataplex lakes authorize --project=test-project \
            --project-resource=test-project2

    To authorize the service agent in project test-project to manage the Cloud
    Storage bucket dataplex-storage-bucket, run:

        $ gcloud dataplex lakes authorize --project=test-project \
            --storage-bucket-resource=dataplex-storage-bucket

    To authorize the service agent in project test-project to manage the
    BigQuery dataset test-dataset in project test-project2, run:

        $ gcloud dataplex lakes authorize --project=test-project \
            --bigquery-dataset-resource=test-dataset \
            --secondary-project=test-project2

REQUIRED FLAGS
     The resource on which to grant a role to the service agent.

     Exactly one of these must be specified:

       --project-resource=PROJECT_RESOURCE
          The identifier of the project whose resources the service agent will
          manage.

       --storage-bucket-resource=STORAGE_BUCKET_RESOURCE
          The identifier of the Cloud Storage bucket that the service agent
          will manage.

       Fields to identify the BigQuery dataset.

         --bigquery-dataset-resource=BIGQUERY_DATASET_RESOURCE
            The identifier of the BigQuery dataset that the service agent will
            manage.

            This flag argument must be specified if any of the other arguments
            in this group are specified.

         --secondary-project=SECONDARY_PROJECT
            The identifier of the project where the BigQuery dataset is
            located.

            This flag argument must be specified if any of the other arguments
            in this group are specified.

GCLOUD WIDE FLAGS
    These flags are available to all commands: --access-token-file, --account,
    --billing-project, --configuration, --flags-file, --flatten, --format,
    --help, --impersonate-service-account, --log-http, --project, --quiet,
    --trace-token, --user-output-enabled, --verbosity.

    Run $ gcloud help for details.

NOTES
    This variant is also available:

        $ gcloud alpha dataplex lakes authorize