Skip to content

Instantly share code, notes, and snippets.

@janmasarik

janmasarik/default_sa_downgrade.sh

Created August 4, 2020 14:48
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save janmasarik/4746b540614b54573c1329e6a40ff7b3 to your computer and use it in GitHub Desktop.
Save janmasarik/4746b540614b54573c1329e6a40ff7b3 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
default_sa_downgrade.sh
while read PROJECT_ID
do
SA_NAME="$PROJECT_ID@appspot.gserviceaccount.com"
echo "Downgrading $SA_NAME"
gcloud projects add-iam-policy-binding $PROJECT_ID --member "serviceAccount:$SA_NAME" --role roles/logging.logWriter
gcloud projects add-iam-policy-binding $PROJECT_ID --member "serviceAccount:$SA_NAME" --role roles/monitoring.metricWriter
gcloud projects add-iam-policy-binding $PROJECT_ID --member "serviceAccount:$SA_NAME" --role roles/monitoring.viewer
gcloud projects remove-iam-policy-binding $PROJECT_ID --member "serviceAccount:$SA_NAME" --role roles/editor
done < project_ids_to_disable_sa.txt
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment