mirror of
https://github.com/imjasonh/gcloud-help
synced 2026-07-16 20:36:39 +00:00
88 lines
3.7 KiB
Text
88 lines
3.7 KiB
Text
NAME
|
|
gcloud active-directory domains get-iam-policy - describe the IAM policy
|
|
for a Managed Microsoft AD domain
|
|
|
|
SYNOPSIS
|
|
gcloud active-directory domains get-iam-policy DOMAIN [--filter=EXPRESSION]
|
|
[--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]]
|
|
[GCLOUD_WIDE_FLAG ...]
|
|
|
|
DESCRIPTION
|
|
gcloud active-directory domains get-iam-policy displays the IAM policy
|
|
associated with an Managed Microsoft AD domain. If formatted as JSON, the
|
|
output can be edited and used as a policy file for set-iam-policy. The
|
|
output includes an "etag" field identifying the version emitted and
|
|
allowing detection of concurrent policy updates.
|
|
|
|
This command can fail for the following reasons:
|
|
▪ The domain specified does not exist.
|
|
▪ The active account does not have permission to access the given
|
|
domain's IAM policies.
|
|
|
|
EXAMPLES
|
|
To print the IAM policy for my-domain.com, run:
|
|
|
|
$ gcloud active-directory domains get-iam-policy my-domain.com
|
|
|
|
POSITIONAL ARGUMENTS
|
|
Domain resource - Name of the Managed Microsoft AD domain that you want to
|
|
get the IAM policy for. This represents a Cloud resource. (NOTE) Some
|
|
attributes are not given arguments in this group but can be set in other
|
|
ways. To set the project attribute:
|
|
◆ provide the argument domain on the command line with a fully
|
|
specified name;
|
|
◆ set the property core/project;
|
|
◆ provide the argument --project on the command line.
|
|
|
|
This must be specified.
|
|
|
|
DOMAIN
|
|
ID of the domain or fully qualified identifier for the domain. To set
|
|
the domain attribute:
|
|
▸ provide the argument domain on the command line.
|
|
|
|
LIST COMMAND FLAGS
|
|
--filter=EXPRESSION
|
|
Apply a Boolean filter EXPRESSION to each resource item to be listed.
|
|
If the expression evaluates True, then that item is listed. For more
|
|
details and examples of filter expressions, run $ gcloud topic filters.
|
|
This flag interacts with other flags that are applied in this order:
|
|
--flatten, --sort-by, --filter, --limit.
|
|
|
|
--limit=LIMIT
|
|
Maximum number of resources to list. The default is unlimited. This
|
|
flag interacts with other flags that are applied in this order:
|
|
--flatten, --sort-by, --filter, --limit.
|
|
|
|
--page-size=PAGE_SIZE
|
|
Some services group resource list output into pages. This flag
|
|
specifies the maximum number of resources per page. The default is
|
|
determined by the service if it supports paging, otherwise it is
|
|
unlimited (no paging). Paging may be applied before or after --filter
|
|
and --limit depending on the service.
|
|
|
|
--sort-by=[FIELD,...]
|
|
Comma-separated list of resource field key names to sort by. The
|
|
default order is ascending. Prefix a field with ``~'' for descending
|
|
order on that field. This flag interacts with other flags that are
|
|
applied in this order: --flatten, --sort-by, --filter, --limit.
|
|
|
|
GCLOUD WIDE FLAGS
|
|
These flags are available to all commands: --access-token-file, --account,
|
|
--billing-project, --configuration, --flags-file, --flatten, --format,
|
|
--help, --impersonate-service-account, --log-http, --project, --quiet,
|
|
--trace-token, --user-output-enabled, --verbosity.
|
|
|
|
Run $ gcloud help for details.
|
|
|
|
API REFERENCE
|
|
This command uses the managedidentities/v1 API. The full documentation for
|
|
this API can be found at: https://cloud.google.com/managed-microsoft-ad/
|
|
|
|
NOTES
|
|
These variants are also available:
|
|
|
|
$ gcloud alpha active-directory domains get-iam-policy
|
|
|
|
$ gcloud beta active-directory domains get-iam-policy
|
|
|