IssueTracker

A StackOverflow user is requesting to include a way to test permissions for a given user/service account as shown here [1] via "gcloud" commands.

My idea is to have an option to either check all permissions (returning only the ones that are granted) or to pass a JSON file containing the permissions you want to test to the command and the return to be the ones that passed the test (as in the POST of [1])

Example of my idea:

$ gcloud iam testIamPermissions <user/service account>
-- returns all permissions granted to that user/service account

$ gcloud iam testIamPermissions <user/service account>  --from-json PermissionsToCheck.json
-- returns all permissions granted within the ones in the JSON file


SO question: https://stackoverflow.com/questions/52933607/google-cloud-how-to-list-granted-permission-for-user-or-service-account/

[1]: https://cloud.google.com/iam/docs/testing-permissions