Method: accessPolicies.servicePerimeters.replaceAll

Replace all existing service perimeters in an access policy with the service perimeters provided. This is done atomically. The long-running operation from this RPC has a successful status after all replacements propagate to long-lasting storage. Replacements containing errors result in an error response for the first error encountered. Upon an error, replacement are cancelled and existing service perimeters are not affected. The Operation.response field contains ReplaceServicePerimetersResponse.

HTTP request


The URL uses gRPC Transcoding syntax.

Path parameters



Required. Resource name for the access policy which owns these Service Perimeters.

Format: accessPolicies/{policy_id}

Request body

The request body contains data with the following structure:

JSON representation
  "servicePerimeters": [
      object (ServicePerimeter)
  "etag": string

object (ServicePerimeter)

Required. The desired Service Perimeters that should replace all existing Service Perimeters in the Access Policy.



Optional. The etag for the version of the Access Policy that this replace operation is to be performed on. If, at the time of replace, the etag for the Access Policy stored in Access Context Manager is different from the specified etag, then the replace operation will not be performed and the call will fail. This field is not required. If etag is not provided, the operation will be performed as if a valid etag is provided.

Response body

If successful, the response body contains an instance of Operation.

Authorization scopes

Requires the following OAuth scope:


For more information, see the Authentication Overview.