gcloud iam policies update

NAME
gcloud iam policies update - update the policy on the given attachment point with the given name
SYNOPSIS
gcloud iam policies update POLICY_ID --attachment-point=ATTACHMENT_POINT --kind=KIND --policy-file=POLICY_FILE [--etag=ETAG] [GCLOUD_WIDE_FLAG …]
DESCRIPTION
Update the policy on the given attachment point with the given name.
EXAMPLES
The following command updates the IAM policy my-deny-policy, which is attached to the resource project 123 and has the etag abc: 
gcloud iam policies update my-deny-policy --attachment-point=cloudresourcemanager.googleapis.com/projects/123 --kind=denypolicies --policy-file=policy.json --etag=abc
POSITIONAL ARGUMENTS
POLICY_ID
Policy ID that is unique for the resource to which the policy is attached.
REQUIRED FLAGS
--attachment-point=ATTACHMENT_POINT
Resource to which the policy is attached. For valid formats, see https://cloud.google.com/iam/help/deny/attachment-point.
--kind=KIND
Policy type. Use denypolicies for deny policies.
--policy-file=POLICY_FILE
Path to the file that contains the policy, in JSON or YAML format. For valid syntax, see https://cloud.google.com/iam/help/deny/policy-syntax.
OPTIONAL FLAGS
--etag=ETAG
Etag that identifies the version of the existing policy. It can be obtained by running gcloud iam policies get. When deleting a policy, if the etag is omitted, the policy is deleted regardless of its current etag. When updating a policy, if the etag is omitted, the update uses the etag provided in the policy file.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.

NOTES
These variants are also available: 
gcloud alpha iam policies update
 
gcloud beta iam policies update