Method: ekmConfig.setIamPolicy

Full name: projects.locations.ekmConfig.setIamPolicy

Sets the access control policy on the specified resource. Replaces any existing policy.

Can return NOT_FOUND , INVALID_ARGUMENT , and PERMISSION_DENIED errors.

HTTP request


The URLs use gRPC Transcoding syntax.

Path parameters

Parameters
resource

string

REQUIRED: The resource for which the policy is being specified. See Resource names for the appropriate value for this field.

Request body

The request body contains data with the following structure:

JSON representation 
 { 
 "policy" 
 : 
 { 
 object (  Policy 
 
) 
 } 
 , 
 "updateMask" 
 : 
 string 
 }
Fields
policy

object ( Policy )

REQUIRED: The complete policy to be applied to the resource . The size of the policy is limited to a few 10s of KB. An empty policy is a valid policy but certain Google Cloud services (such as Projects) might reject them.
updateMask

string ( FieldMask format)

OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only the fields in the mask will be modified. If no mask is provided, the following default mask is used:

paths: "bindings, etag"

This is a comma-separated list of fully qualified names of fields. Example: "user.displayName,photo" .

Response body

If successful, the response body contains an instance of Policy .

Authorization scopes

Requires one of the following OAuth scopes:

  • https://www.googleapis.com/auth/cloudkms
  • https://www.googleapis.com/auth/cloud-platform

For more information, see the Authentication Overview .