I'm looking to migrate to Artifact Registry, but when I run a command
gcloud projects add-iam-policy-binding my-first-project-6b87f --member='serviceAccount:service-434105066879@gcp-sa-artifactregistry.iam.gserviceaccount.com' --role='roles/storage.objectViewer'
I get
ERROR: Policy modification failed. For a binding with condition, run "gcloud alpha iam policies lint-condition" to identify issues in condition.
ERROR: (gcloud.projects.add-iam-policy-binding) INVALID_ARGUMENT: Policy members must be of the form "<type>:<value>".
- '@type': type.googleapis.com/google.rpc.BadRequest
fieldViolations:
- description: Policy members must be prefixed of the form '<type>:<value>', where
<type> is 'domain', 'group', 'serviceAccount', or 'user'.
field: policy.bindings.member
- '@type': type.googleapis.com/google.rpc.ErrorInfo
domain: cloudresourcemanager.googleapis.com
reason: PROJECT_SET_IAM_DISALLOWED_MEMBER_TYPE
- '@type': type.googleapis.com/google.rpc.ResourceInfo
resourceName: projects/my-first-project-6b87f
What's wrong? The type is serviceAccount.
LinkedIn
Twitter
