gcloud iam list-grantable-roles

gcloud iam list-grantable-roles - list IAM grantable roles for a resource

gcloud iam list-grantable-roles RESOURCE [--filter=EXPRESSION] [--page-size=PAGE_SIZE; default=100] [GCLOUD_WIDE_FLAG …]

RESOURCE

The full resource name or URI to get the list of roles for.

See "Resource Names" for details. To get a URI from most list commands in gcloud, pass the --uri flag. For example:

  $ gcloud compute instances list --project prj --uri
  https://www.googleapis.com/compute/v1/projects/prj/zones/us-east1-c/instances/i1
  https://www.googleapis.com/compute/v1/projects/prj/zones/us-east1-d/instances/i2

--filter=EXPRESSION

Apply a Boolean filter EXPRESSION to each resource item to be listed. If the expression evaluates True, then that item is listed. For more details and examples of filter expressions, run $ gcloud topic filters. This flag interacts with other flags that are applied in this order: --flatten, --sort-by, --filter, --limit.

--page-size=PAGE_SIZE; default=100

Some services group resource list output into pages. This flag specifies the maximum number of resources per page. The default is 100. Paging may be applied before or after --filter and --limit depending on the service.

  $ gcloud iam list-grantable-roles \
      //cloudresourcemanager.googleapis.com/projects/PROJECT_ID

List grantable roles for a resource identified via full resource name:

  $ gcloud iam list-grantable-roles \
      //compute.googleapis.com/projects/example-project/zones/\
  us-central1-f/instances/example-instance

List grantable roles for a resource identified via URI:

  $ gcloud iam list-grantable-roles \
      https://www.googleapis.com/compute/v1/projects/example-project/\
  zones/us-central1-f/instances/example-instance

  $ gcloud alpha iam list-grantable-roles
  $ gcloud beta iam list-grantable-roles