-
Notifications
You must be signed in to change notification settings - Fork 6.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
IAM: update quickstart comments #4716
Conversation
iam/api-client/quickstartv2.py
Outdated
member = "your_member" | ||
project_id = "your-project-id" | ||
# TODO: Replace with the ID of your member in the form | ||
# 'user|group|serviceAccount:email' or 'domain:domain' |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can we add a link to the IAM reference documentation for this format?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Added. The link has some good examples of what member
should look like.
Since this is a quickstart and we want to be as directive as possible, I would prefer not to give the user multiple options for the member type. We're assuming at this point that they will be testing out IAM by adding a user. The goal of the quickstart is just to give users a first-touch experience with IAM. If we need to instruct users about how to modify policy, including modifying policy for different member types, we should use the Granting, changing, and revoking access page, and/or the access sample. |
user:email
in comments
Reference: https://cloud.google.com/sdk/gcloud/reference/iam/service-accounts/add-iam-policy-binding#--member