The role that should be applied. Only one gcp.iap.AppEngineVersionIamBinding can be used per role. Note that custom roles must be of the format [projects|organizations]/{parent-name}/roles/{role-name}.
gcp.iap.AppEngineVersionIamBinding
[projects|organizations]/{parent-name}/roles/{role-name}