- NAME
-
- gcloud beta active-directory domains update - update a Managed Microsoft AD domain
- SYNOPSIS
-
-
gcloud beta active-directory domains updateDOMAIN[--async] [--enable-audit-logs] [--update-labels=[KEY=VALUE,…]] [--add-authorized-networks=[AUTH_NET1,AUTH_NET2, …,…] |--remove-authorized-networks=[AUTH_NET1,AUTH_NET2, …,…]] [--add-region=ADD_REGION|--remove-region=REMOVE_REGION] [--clear-labels|--remove-labels=[KEY,…]] [GCLOUD_WIDE_FLAG …]
-
- DESCRIPTION
-
(BETA)Update the metadata and/or configuration parameters of a managed Microsoft AD domain.This command can fail for the following reasons:
- The AD domain specified does not exist.
- The active account does not have permission to update the given AD domain.
- EXAMPLES
-
The following command updates an AD domain with the name
my-domain.comto add the two labels,envandserviceand to add a provisioned regionus-west1:gcloud beta active-directory domains update my-domain.com --update-labels=env=test,service=foo --add-region=us-west1This peers the domain
my-domain.comto the networkmy-network.gcloud beta active-directory domains update my-domain.com --add-authorized-networks=projects/my-project/global/networks/my-network - POSITIONAL ARGUMENTS
-
-
Domain resource - Name of the Managed Microsoft AD domain you want to update.
This represents a Cloud resource. (NOTE) Some attributes are not given arguments
in this group but can be set in other ways.
To set the
projectattribute:-
provide the argument
domainon the command line with a fully specified name; -
provide the argument
--projecton the command line; -
set the property
core/project.
This must be specified.
DOMAIN-
ID of the domain or fully qualified identifier for the domain.
To set the
domainattribute:-
provide the argument
domainon the command line.
-
provide the argument
-
provide the argument
-
Domain resource - Name of the Managed Microsoft AD domain you want to update.
This represents a Cloud resource. (NOTE) Some attributes are not given arguments
in this group but can be set in other ways.
- FLAGS
-
--async- Return immediately, without waiting for the operation in progress to complete.
--enable-audit-logs- If specified, Active Directory data audit logs are enabled for the domain.
--update-labels=[KEY=VALUE,…]-
List of label KEY=VALUE pairs to update. If a label exists, its value is
modified. Otherwise, a new label is created.
Keys must start with a lowercase character and contain only hyphens (
-), underscores (_), lowercase characters, and numbers. Values must contain only hyphens (-), underscores (_), lowercase characters, and numbers. -
At most one of these can be specified:
- A list of URLs of additional networks to peer this domain to in the form projects/{project}/global/networks/{network}. Networks must belong to the project.
- A list of URLs of additional networks to unpeer this domain from in the form projects/{project}/global/networks/{network}. Networks must belong to the project.
-
At most one of these can be specified:
--add-region=ADD_REGION- An additional region to provision this domain in. If domain is already provisioned in region, nothing will be done in that region. Supported regions are: asia-east1, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2.
--remove-region=REMOVE_REGION- A region to de-provision this domain from. If domain is already not provisioned in a region, nothing will be done in that region. Domains must be left provisioned in at least one region. Supported regions are: asia-east1, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2.
-
At most one of these can be specified:
--clear-labels-
Remove all labels. If
--update-labelsis also specified then--clear-labelsis applied first.For example, to remove all labels:
gcloud beta active-directory domains update --clear-labelsTo remove all existing labels and create two new labels,
andfoo:bazgcloud beta active-directory domains update --clear-labels --update-labels foo=bar,baz=qux --remove-labels=[KEY,…]-
List of label keys to remove. If a label does not exist it is silently ignored.
If
--update-labelsis also specified then--update-labelsis applied first.
- GCLOUD WIDE FLAGS
-
These flags are available to all commands:
--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.Run
$ gcloud helpfor details. - API REFERENCE
-
This command uses the
managedidentities/v1beta1API. The full documentation for this API can be found at: https://cloud.google.com/managed-microsoft-ad/ - NOTES
-
This command is currently in beta and might change without notice. These
variants are also available:
gcloud active-directory domains updategcloud alpha active-directory domains update
gcloud beta active-directory domains update
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2025-05-07 UTC.