Find unique permissions between 2 Google Cloud roles

unique_gcp_role.sh

function unique_gcp_role (){

 # colouring output
 red=`tput setaf 1`
 green=`tput setaf 2`
 underlined=`tput smul`
 reset=`tput sgr0`

 # request role data from google
 gcp_role_1="roles/$1"
 gcp_role_2="roles/$2"
 gcp_role_permissions_1=$(gcloud iam roles describe $gcp_role_1 | awk '/^-/')
 gcp_role_permissions_2=$(gcloud iam roles describe $gcp_role_2 | awk '/^-/')

 # first unique
 echo ""
 echo "${underlined}permissions unique to role $1${reset}"
 echo ""
 gcp_role_unique_1=$(comm -23 <(echo "$gcp_role_permissions_1" | sort) <(echo "$gcp_role_permissions_2" | sort))
 if [ -z "$gcp_role_unique_1" ]; then echo "- ${green}no unique permissions${reset}"; else echo $gcp_role_unique_1; fi
 echo ""

 # second unique
 echo ""
 echo "${underlined}permissions unique to role $2${reset}"
 echo ""
 gcp_role_unique_2=$(comm -23 <(echo "$gcp_role_permissions_2" | sort) <(echo "$gcp_role_permissions_1" | sort))
 if [ -z "$gcp_role_unique_2" ]; then echo "- ${green}no unique permissions${reset}"; else echo $gcp_role_unique_2; fi
 echo ""

} 

Nice and simple way to compare 2 Google Cloud roles when trying to prevent redundant assignments.