Updates a GcpUserAccessBinding. Completion of this long-running operation does not necessarily signify that the changed binding is deployed onto all affected users, which may take more time.
Immutable. Identifier. Assigned by the server during creation. The last segment has an arbitrary length and has only URI unreserved characters (as defined by RFC 3986 Section 2.3). Should not be specified by the client during creation. Example: "organizations/256/gcpUserAccessBindings/b3-BhcX_Ud5N"
Required. Only the fields specified in this mask are updated. Because name and groupKey cannot be changed, updateMask is required and may only contain the following fields: accessLevels, dryRunAccessLevels, sessionSettings, and scopedAccessSettings.
Example: updateMask { paths: "accessLevels" }
This is a comma-separated list of fully qualified names of fields. Example: "user.displayName,photo".
append
boolean
Optional. This field controls whether or not certain repeated settings in the update request overwrite or append to existing settings on the binding. If true, then append. Otherwise overwrite.
So far, only scopedAccessSettings with reauth_settings supports appending. Global accessLevels, accessLevels in scopedAccessSettings, dryRunAccessLevels, reauth_settings, and sessionSettings are not compatible with append functionality, and the request will return an error if append=true when these settings are in the updateMask. The request will also return an error if append=true when "scopedAccessSettings" is not set in the updateMask.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-07-17 UTC."],[[["\u003cp\u003eThis webpage details how to update a GcpUserAccessBinding, with the update operation being a long-running process that may take time to fully deploy to users.\u003c/p\u003e\n"],["\u003cp\u003eThe HTTP request to update a GcpUserAccessBinding is a PATCH request to a specific URL constructed using gRPC Transcoding syntax.\u003c/p\u003e\n"],["\u003cp\u003eUpdates to a GcpUserAccessBinding are controlled using the \u003ccode\u003eupdateMask\u003c/code\u003e query parameter, which specifies the fields that will be modified, while \u003ccode\u003eappend\u003c/code\u003e query parameter is used to append certain settings to the binding instead of overwriting them.\u003c/p\u003e\n"],["\u003cp\u003eThe request body must contain an instance of GcpUserAccessBinding, and the response body, upon success, will contain an instance of Operation.\u003c/p\u003e\n"],["\u003cp\u003eAuthorization to perform this operation requires the \u003ccode\u003ehttps://www.googleapis.com/auth/cloud-platform\u003c/code\u003e OAuth scope.\u003c/p\u003e\n"]]],[],null,["# Method: organizations.gcpUserAccessBindings.patch\n\n- [HTTP request](#body.HTTP_TEMPLATE)\n- [Path parameters](#body.PATH_PARAMETERS)\n- [Query parameters](#body.QUERY_PARAMETERS)\n- [Request body](#body.request_body)\n- [Response body](#body.response_body)\n- [Authorization scopes](#body.aspect)\n- [Try it!](#try-it)\n\nUpdates a [GcpUserAccessBinding](/access-context-manager/docs/reference/rest/v1alpha/organizations.gcpUserAccessBindings#GcpUserAccessBinding). Completion of this long-running operation does not necessarily signify that the changed binding is deployed onto all affected users, which may take more time.\n\n### HTTP request\n\n`PATCH https://accesscontextmanager.googleapis.com/v1alpha/{gcpUserAccessBinding.name=organizations/*/gcpUserAccessBindings/*}`\n\nThe URL uses [gRPC Transcoding](https://google.aip.dev/127) syntax.\n\n### Path parameters\n\n### Query parameters\n\n### Request body\n\nThe request body contains an instance of [GcpUserAccessBinding](/access-context-manager/docs/reference/rest/v1alpha/organizations.gcpUserAccessBindings#GcpUserAccessBinding).\n\n### Response body\n\nIf successful, the response body contains an instance of [Operation](/access-context-manager/docs/reference/rest/Shared.Types/Operation).\n\n### Authorization scopes\n\nRequires the following OAuth scope:\n\n- `https://www.googleapis.com/auth/cloud-platform`\n\nFor more information, see the [Authentication Overview](/docs/authentication#authorization-gcp)."]]
