setAcl.sh

#!/bin/bash

TOKEN=$(gcloud auth application-default print-access-token)
PROJECT_ID="663188713804"
DOCUMENT_ID="29oiqkhlqm5o8"
ENDPOINT="https://contentwarehouse.googleapis.com/v1/projects/$PROJECT_ID/locations/us/documents/$DOCUMENT_ID:setAcl"

# Set the policy
POLICY='{
  "policy": {
    "bindings": [
      {
        "role": "roles/contentwarehouse.documentViewer",
        "members": [
          "user:[email protected]"
        ]
      }
    ]
  },
  "requestMetadata": {
    "userInfo": {
        "id": "user:[email protected]",
        "groupIds": []
    }
  }
}'

# Make an API request to grant [email protected] contentwarehouse.documentViewer privileges
echo $ENDPOINT

curl -s -X POST \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  -d "$POLICY" \
  $ENDPOINT | jq