Search for GCP Roles containing a given permission

iam_search.sh

#!/usr/bin/bash
# This is not an official product of Google Inc.

# This is a SLOW but convenient utility for finding
# GCP roles containing a permission.

# Example use: 
# ./iam_search.sh compute.instances.setMetadata

# $1 a gcp permission (e.g. compute.instances.setMetadata)
function search_for_roles(){
    for ROLE in $(gcloud iam roles list | grep -oP "^name: \K(.+)")
    do
        DESCRIPTION=$(gcloud iam roles describe "${ROLE}")
        if echo "${DESCRIPTION}" | grep -q "$1"; then
            echo "${DESCRIPTION}" | grep -oP "^name: \K(.+)"
        fi
    done
}

search_for_roles $1