Method: organizations.gcpUserAccessBindings.patch

Updates a GcpUserAccessBinding. Completion of this long-running operation does not necessarily signify that the changed binding is deployed onto all affected users, which may take more time.

HTTP request


The URL uses gRPC Transcoding syntax.

Path parameters



Immutable. Assigned by the server during creation. The last segment has an arbitrary length and has only URI unreserved characters (as defined by RFC 3986 Section 2.3). Should not be specified by the client during creation. Example: "organizations/256/gcpUserAccessBindings/b3-BhcX_Ud5N"

Query parameters


string (FieldMask format)

Required. Only the fields specified in this mask are updated. Because name and groupKey cannot be changed, updateMask is required and may only contain the following fields: accessLevels, dryRunAccessLevels.

updateMask { paths: "accessLevels" }

This is a comma-separated list of fully qualified names of fields. Example: "user.displayName,photo".

Request body

The request body contains an instance of GcpUserAccessBinding.

Response body

If successful, the response body contains an instance of Operation.

Authorization scopes

Requires the following OAuth scope:


For more information, see the Authentication Overview.