- NAME
-
- gcloud beta iam list-grantable-roles - list IAM grantable roles for a resource
- SYNOPSIS
-
-
gcloud beta iam list-grantable-rolesRESOURCE[--filter=EXPRESSION] [--page-size=PAGE_SIZE; default=300] [GCLOUD_WIDE_FLAG …]
-
- DESCRIPTION
-
(BETA)This command displays the list of grantable roles for a resource. The resource can be referenced either via the full resource name or via a URI. User can then add IAM policy bindings to grant the roles. - EXAMPLES
- List grantable roles for a project:
gcloud beta iam list-grantable-roles //cloudresourcemanager.googleapis.com/projects/PROJECT_IDList grantable roles for a resource identified via full resource name:
gcloud beta iam list-grantable-roles //compute.googleapis.com/projects/example-project/zones/us-central1-f/instances/example-instanceList grantable roles for a resource identified via URI:
gcloud beta iam list-grantable-roles https://www.googleapis.com/compute/v1/projects/example-project/ \zones/us-central1-f/instances/example-instance - POSITIONAL ARGUMENTS
-
-
RESOURCE - The full resource name or URI to get the list of roles for.
See "Resource Names" for details. To get a URI from most
listcommands ingcloud, pass the--uriflag. For example:gcloud compute instances list --project prj --uri https://compute.googleapis.com/compute/v1/projects/prj/zones/us-east1-c/instances/i1 https://compute.googleapis.com/compute/v1/projects/prj/zones/us-east1-d/instances/i2
-
- LIST COMMAND FLAGS
-
-
--filter=EXPRESSION - Apply a Boolean filter
EXPRESSIONto each resource item to be listed. If the expression evaluatesTrue, then that item is listed. For more details and examples of filter expressions, run $ gcloud topic filters . This flag interacts with other flags that are applied in this order:--flatten,--sort-by,--filter,--limit. -
--page-size=PAGE_SIZE; default=300 - Some services group resource list output into pages. This flag specifies the
maximum number of resources per page. The default is
300. Paging may be applied before or after--filterand--limitdepending on the service.
-
- GCLOUD WIDE FLAGS
- These flags are available to all commands:
--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.Run
$ gcloud helpfor details. - NOTES
- This command is currently in beta and might change without notice. These
variants are also available:
gcloud iam list-grantable-rolesgcloud alpha iam list-grantable-roles
gcloud beta iam list-grantable-roles
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License , and code samples are licensed under the Apache 2.0 License . For details, see the Google Developers Site Policies . Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-05-27 UTC.

