.TH "GCLOUD_DATAPLEX_LAKES_DEAUTHORIZE" 1



.SH "NAME"
.HP
gcloud dataplex lakes deauthorize \- deauthorize a service agent from managing resources



.SH "SYNOPSIS"
.HP
\f5gcloud dataplex lakes deauthorize\fR (\fB\-\-project\-resource\fR=\fIPROJECT_RESOURCE\fR\ |\ \fB\-\-storage\-bucket\-resource\fR=\fISTORAGE_BUCKET_RESOURCE\fR\ |\ \fB\-\-bigquery\-dataset\-resource\fR=\fIBIGQUERY_DATASET_RESOURCE\fR\ \fB\-\-secondary\-project\fR=\fISECONDARY_PROJECT\fR) [\fIGCLOUD_WIDE_FLAG\ ...\fR]



.SH "DESCRIPTION"

The service agent for the primary project will have its IAM role revoked from a
secondary project, a Cloud Storage bucket, or a BigQuery dataset.



.SH "EXAMPLES"

To deauthorize the service agent in project \f5test\-project\fR from managing
resources in the project \f5test\-project2\fR, run:

.RS 2m
$ gcloud dataplex lakes deauthorize \-\-project=test\-project \e
    \-\-project\-resource=test\-project2
.RE

To deauthorize the service agent in project \f5test\-project\fR from managing
the Cloud Storage bucket \f5dataplex\-storage\-bucket\fR, run:

.RS 2m
$ gcloud dataplex lakes deauthorize \-\-project=test\-project \e
    \-\-storage\-bucket\-resource=dataplex\-storage\-bucket
.RE

To deauthorize the service agent in project \f5test\-project\fR from managing
the BigQuery dataset \f5test\-dataset\fR in project \f5test\-project2\fR, run:

.RS 2m
$ gcloud dataplex lakes deauthorize \-\-project=test\-project \e
    \-\-bigquery\-dataset\-resource=test\-dataset \e
    \-\-secondary\-project=test\-project2
.RE



.SH "REQUIRED FLAGS"

.RS 2m
.TP 2m

The resource for which the service agent's role will be revoked.

Exactly one of these must be specified:


.RS 2m
.TP 2m
\fB\-\-project\-resource\fR=\fIPROJECT_RESOURCE\fR

The identifier of the project whose resources the service agent will no longer
manage.

.TP 2m
\fB\-\-storage\-bucket\-resource\fR=\fISTORAGE_BUCKET_RESOURCE\fR

The identifier of the Cloud Storage bucket that the service agent will no longer
manage.

.TP 2m

Fields to identify the BigQuery dataset.


.RS 2m
.TP 2m
\fB\-\-bigquery\-dataset\-resource\fR=\fIBIGQUERY_DATASET_RESOURCE\fR

The identifier of the BigQuery dataset that the service agent will no longer
manage.

This flag argument must be specified if any of the other arguments in this group
are specified.

.TP 2m
\fB\-\-secondary\-project\fR=\fISECONDARY_PROJECT\fR

The identifier of the project where the BigQuery dataset is located.

This flag argument must be specified if any of the other arguments in this group
are specified.


.RE
.RE
.RE
.sp

.SH "GCLOUD WIDE FLAGS"

These flags are available to all commands: \-\-access\-token\-file, \-\-account,
\-\-billing\-project, \-\-configuration, \-\-flags\-file, \-\-flatten,
\-\-format, \-\-help, \-\-impersonate\-service\-account, \-\-log\-http,
\-\-project, \-\-quiet, \-\-trace\-token, \-\-user\-output\-enabled,
\-\-verbosity.

Run \fB$ gcloud help\fR for details.



.SH "NOTES"

This variant is also available:

.RS 2m
$ gcloud alpha dataplex lakes deauthorize
.RE