Updates a GcpUserAccessBinding. Completion of this long-running operation does not necessarily signify that the changed binding is deployed onto all affected users, which may take more time.
Immutable. Assigned by the server during creation. The last segment has an arbitrary length and has only URI unreserved characters (as defined by RFC 3986 Section 2.3). Should not be specified by the client during creation. Example: "organizations/256/gcpUserAccessBindings/b3-BhcX_Ud5N"
Required. Only the fields specified in this mask are updated. Because name and groupKey cannot be changed, updateMask is required and may only contain the following fields: accessLevels, dryRunAccessLevels, reauth_settingssessionSettings, scopedAccessSettings.
updateMask { paths: "accessLevels" }
This is a comma-separated list of fully qualified names of fields. Example: "user.displayName,photo".
append
boolean
Optional. This field controls whether or not certain repeated settings in the update request overwrite or append to existing settings on the binding. If true, then append. Otherwise overwrite.
So far, only scopedAccessSettings with reauth_settings supports appending. Global accessLevels, accessLevels in scopedAccessSettings, dryRunAccessLevels, reauth_settings, and sessionSettings are not compatible with append functionality, and the request will return an error if append=true when these settings are in the updateMask. The request will also return an error if append=true when "scopedAccessSettings" is not set in the updateMask.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-07-17 UTC."],[[["\u003cp\u003eThis endpoint updates an existing GcpUserAccessBinding, but changes may take time to propagate to all affected users.\u003c/p\u003e\n"],["\u003cp\u003eThe request uses a PATCH HTTP method with a specific URL structure defined by gRPC Transcoding and requires a \u003ccode\u003egcpUserAccessBinding.name\u003c/code\u003e path parameter.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eupdateMask\u003c/code\u003e query parameter is required to specify which fields are updated, with restrictions on which fields can be modified and certain fields being incompatible with \u003ccode\u003eappend\u003c/code\u003e.\u003c/p\u003e\n"],["\u003cp\u003eThe request body must contain a GcpUserAccessBinding instance, and a successful request will return an Operation instance in the response body.\u003c/p\u003e\n"],["\u003cp\u003eAuthorization for this operation requires the \u003ccode\u003ehttps://www.googleapis.com/auth/cloud-platform\u003c/code\u003e OAuth scope.\u003c/p\u003e\n"]]],[],null,["# Method: organizations.gcpUserAccessBindings.patch\n\n- [HTTP request](#body.HTTP_TEMPLATE)\n- [Path parameters](#body.PATH_PARAMETERS)\n- [Query parameters](#body.QUERY_PARAMETERS)\n- [Request body](#body.request_body)\n- [Response body](#body.response_body)\n- [Authorization scopes](#body.aspect)\n- [Try it!](#try-it)\n\nUpdates a [GcpUserAccessBinding](/access-context-manager/docs/reference/rest/v1/organizations.gcpUserAccessBindings#GcpUserAccessBinding). Completion of this long-running operation does not necessarily signify that the changed binding is deployed onto all affected users, which may take more time.\n\n### HTTP request\n\n`PATCH https://accesscontextmanager.googleapis.com/v1/{gcpUserAccessBinding.name=organizations/*/gcpUserAccessBindings/*}`\n\nThe URL uses [gRPC Transcoding](https://google.aip.dev/127) syntax.\n\n### Path parameters\n\n### Query parameters\n\n### Request body\n\nThe request body contains an instance of [GcpUserAccessBinding](/access-context-manager/docs/reference/rest/v1/organizations.gcpUserAccessBindings#GcpUserAccessBinding).\n\n### Response body\n\nIf successful, the response body contains an instance of [Operation](/access-context-manager/docs/reference/rest/Shared.Types/Operation).\n\n### Authorization scopes\n\nRequires the following OAuth scope:\n\n- `https://www.googleapis.com/auth/cloud-platform`\n\nFor more information, see the [Authentication Overview](/docs/authentication#authorization-gcp)."]]
