gcloud iam policies get

NAME

gcloud iam policies get - get a policy on the given attachment point with the given name

SYNOPSIS

gcloud iam policies get POLICY_ID --attachment-point=ATTACHMENT_POINT --kind=KIND [GCLOUD_WIDE_FLAG …]

DESCRIPTION

Get a policy on the given attachment point with the given name.

EXAMPLES

The following command gets the IAM policy defined at the resource project 123 of kind denypolicies and id my-deny-policy:

gcloud iam policies get my-deny-policy --attachment-point=cloudresourcemanager.googleapis.com/projects/123 --kind=denypolicies

POSITIONAL ARGUMENTS

POLICY_ID: Policy ID that is unique for the resource to which the policy is attached.

REQUIRED FLAGS

--attachment-point=ATTACHMENT_POINT: Resource to which the policy is attached. For valid formats, see https://cloud.google.com/iam/help/deny/attachment-point.
--kind=KIND: Policy type. Use denypolicies for deny policies.

GCLOUD WIDE FLAGS

These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.

NOTES

These variants are also available:

gcloud alpha iam policies get

gcloud beta iam policies get

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-05-27 UTC.