GCP IAM page displays project-wide permissions and principals.
I've granted Object Admin permission to [email protected] to a specific GCS bucket. This permission is not visible on the IAM page.
How do I list all permissions granted to [email protected] across all resources using console or gcloud CLI?
It seems like this can be done with the gcloud asset command: https://cloud.google.com/sdk/gcloud/reference/asset/search-all-iam-policies
Eg. a basic example query for a single project:
gcloud asset search-all-iam-policies --scope=projects/<project> --query="policy:<email>"
The output is quite verbose, but does what you want, I think.
