HEX
Server: Apache/2.4.65 (Ubuntu)
System: Linux ielts-store-v2 6.8.0-1036-gcp #38~22.04.1-Ubuntu SMP Thu Aug 14 01:19:18 UTC 2025 x86_64
User: root (0)
PHP: 7.2.34-54+ubuntu20.04.1+deb.sury.org+1
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: //snap/google-cloud-cli/394/help/man/man1/gcloud_dataplex_lakes_authorize.1
.TH "GCLOUD_DATAPLEX_LAKES_AUTHORIZE" 1



.SH "NAME"
.HP
gcloud dataplex lakes authorize \- authorize a service agent to manage resources



.SH "SYNOPSIS"
.HP
\f5gcloud dataplex lakes authorize\fR (\fB\-\-project\-resource\fR=\fIPROJECT_RESOURCE\fR\ |\ \fB\-\-storage\-bucket\-resource\fR=\fISTORAGE_BUCKET_RESOURCE\fR\ |\ \fB\-\-bigquery\-dataset\-resource\fR=\fIBIGQUERY_DATASET_RESOURCE\fR\ \fB\-\-secondary\-project\fR=\fISECONDARY_PROJECT\fR) [\fIGCLOUD_WIDE_FLAG\ ...\fR]



.SH "DESCRIPTION"

The service agent for the primary project will be granted an IAM role on a
secondary project, a Cloud Storage bucket, or a BigQuery dataset.



.SH "EXAMPLES"

To authorize the service agent in project \f5test\-project\fR to manage
resources in the project \f5test\-project2\fR, run:

.RS 2m
$ gcloud dataplex lakes authorize \-\-project=test\-project \e
    \-\-project\-resource=test\-project2
.RE

To authorize the service agent in project \f5test\-project\fR to manage the
Cloud Storage bucket \f5dataplex\-storage\-bucket\fR, run:

.RS 2m
$ gcloud dataplex lakes authorize \-\-project=test\-project \e
    \-\-storage\-bucket\-resource=dataplex\-storage\-bucket
.RE

To authorize the service agent in project \f5test\-project\fR to manage the
BigQuery dataset \f5test\-dataset\fR in project \f5test\-project2\fR, run:

.RS 2m
$ gcloud dataplex lakes authorize \-\-project=test\-project \e
    \-\-bigquery\-dataset\-resource=test\-dataset \e
    \-\-secondary\-project=test\-project2
.RE



.SH "REQUIRED FLAGS"

.RS 2m
.TP 2m

The resource on which to grant a role to the service agent.

Exactly one of these must be specified:


.RS 2m
.TP 2m
\fB\-\-project\-resource\fR=\fIPROJECT_RESOURCE\fR

The identifier of the project whose resources the service agent will manage.

.TP 2m
\fB\-\-storage\-bucket\-resource\fR=\fISTORAGE_BUCKET_RESOURCE\fR

The identifier of the Cloud Storage bucket that the service agent will manage.

.TP 2m

Fields to identify the BigQuery dataset.


.RS 2m
.TP 2m
\fB\-\-bigquery\-dataset\-resource\fR=\fIBIGQUERY_DATASET_RESOURCE\fR

The identifier of the BigQuery dataset that the service agent will manage.

This flag argument must be specified if any of the other arguments in this group
are specified.

.TP 2m
\fB\-\-secondary\-project\fR=\fISECONDARY_PROJECT\fR

The identifier of the project where the BigQuery dataset is located.

This flag argument must be specified if any of the other arguments in this group
are specified.


.RE
.RE
.RE
.sp

.SH "GCLOUD WIDE FLAGS"

These flags are available to all commands: \-\-access\-token\-file, \-\-account,
\-\-billing\-project, \-\-configuration, \-\-flags\-file, \-\-flatten,
\-\-format, \-\-help, \-\-impersonate\-service\-account, \-\-log\-http,
\-\-project, \-\-quiet, \-\-trace\-token, \-\-user\-output\-enabled,
\-\-verbosity.

Run \fB$ gcloud help\fR for details.



.SH "NOTES"

This variant is also available:

.RS 2m
$ gcloud alpha dataplex lakes authorize
.RE