GITBOOK-658: No subject

pentesting-cloud/gcp-security/gcp-privilege-escalation/gcp-cloudfunctions-privesc.md

@@ -66,12 +66,14 @@ gcloud functions deploy <cloudfunction-name> \
   --trigger-http \
   --allow-unauthenticated
 
-# If you don't have permissions to change the IAM policy, the "--allow-unauthenticated" will just fail and do nothing
-
 # Get SA token calling the new function code
 gcloud functions call <cloudfunction-name>
 ```
 
+{% hint style="danger" %}
+If you get the error `Permission 'run.services.setIamPolicy' denied on resource...` is because you are using the `--allow-unauthenticated` param and you don't have enough permissions for it.
+{% endhint %}
+
 The exploit script for this method can be found [here](https://github.com/RhinoSecurityLabs/GCP-IAM-Privilege-Escalation/blob/master/ExploitScripts/cloudfunctions.functions.update.py).
 
 ### `cloudfunctions.functions.sourceCodeSet`