Method: projects.locations.services.setIamPolicy

HTTP request
Path parameters
Request body
- JSON representation
Response body
Authorization scopes

Sets the IAM Access control policy for the specified Service. Overwrites any existing policy.

HTTP request

POST https://run.googleapis.com/v1/{resource}:setIamPolicy

Path parameters

Parameters

Parameters
`resource`	`string` REQUIRED: The resource for which the policy is being specified. See Resource names for the appropriate value for this field. It takes the form `projects/{project}/locations/{location}/services/{service}` .

resource

string

REQUIRED: The resource for which the policy is being specified. See Resource names for the appropriate value for this field. It takes the form projects/{project}/locations/{location}/services/{service} .

Request body

The request body contains data with the following structure:

JSON representation
{ "policy" : { object ( `Policy` ) } , "updateMask" : string }

Fields

Fields
`policy`	`object ( Policy )` REQUIRED: The complete policy to be applied to the `resource` . The size of the policy is limited to a few 10s of KB. An empty policy is a valid policy but certain Google Cloud services (such as Projects) might reject them.
`updateMask`	`string ( FieldMask format)` OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only the fields in the mask will be modified. If no mask is provided, the following default mask is used: `paths: "bindings, etag"` This is a comma-separated list of fully qualified names of fields. Example: `"user.displayName,photo"` .

policy

object ( Policy )

REQUIRED: The complete policy to be applied to the resource . The size of the policy is limited to a few 10s of KB. An empty policy is a valid policy but certain Google Cloud services (such as Projects) might reject them.

updateMask

string ( FieldMask format)

OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only the fields in the mask will be modified. If no mask is provided, the following default mask is used:

paths: "bindings, etag"

This is a comma-separated list of fully qualified names of fields. Example: "user.displayName,photo" .

Response body

If successful, the response body contains an instance of Policy .

Authorization scopes

Requires the following OAuth scope:

https://www.googleapis.com/auth/cloud-platform

For more information, see the Authentication Overview .