capabilities.work

Update Organization IAM Policy

A 3-step recipe with Google Cloud Platform. We can help you get access.

Recipe · 3 steps

Update Organization IAM Policy

Grant an IAM role to a member on an organization using read-modify-write.

  1. Read the current IAM policy for the organization to capture its etag.
  2. Write back a policy granting the role to the member, supplying the captured etag for optimistic concurrency.
  3. Re-read the organization IAM policy to confirm the new binding persisted.
What you'll need to have ready
  • resource: The organization resource, e.g. organizations/12345.
  • role: The IAM role to grant, e.g. roles/resourcemanager.organizationViewer.
  • member: The member to grant the role to, e.g. group:admins@example.com.
For your developer

Arazzo workflow google-cloud-platform:update-organization-iam-policy, 3 operations: cloudresourcemanager.organizations.getIamPolicy → cloudresourcemanager.organizations.setIamPolicy → cloudresourcemanager.organizations.getIamPolicy. Specs on APIs.io.