gcloud beta pam entitlements

gcloud beta pam entitlements - manage Privileged Access Manager entitlements

gcloud beta pam entitlements COMMAND [GCLOUD_WIDE_FLAG …]

gcloud beta pam entitlements create sample-entitlement --project=sample-project --location=global --entitlement-file=sample-entitlement.yaml

To create a new entitlement with a name of sample-entitlement, in a folder with ID FOLDER_ID, in location global, and the entitlement configuration stored in a file named sample-entitlement.yaml, run:

gcloud beta pam entitlements create sample-entitlement --folder=FOLDER_ID --location=global --entitlement-file=sample-entitlement.yaml

To create a new entitlement with a name of sample-entitlement, in an organization with ID ORGANIZATION_ID, in location global, and the entitlement configuration stored in a file named sample-entitlement.yaml, run:

gcloud beta pam entitlements create sample-entitlement --organization=ORGANIZATION_ID --location=global --entitlement-file=sample-entitlement.yaml

To update an entitlement with a name of sample-entitlement, in a project named sample-project, in location global, and the new entitlement configuration stored in a file named sample-entitlement.yaml, run:

gcloud beta pam entitlements update sample-entitlement --project=sample-project --location=global --entitlement-file=sample-entitlement.yaml

To update an entitlement with a name of sample-entitlement, in a folder with ID FOLDER_ID, in location global, and the new entitlement configuration stored in a file named sample-entitlement.yaml, run:

gcloud beta pam entitlements update sample-entitlement --folder=FOLDER_ID --location=global --entitlement-file=sample-entitlement.yaml

To update an entitlement with a name of sample-entitlement, in an organization with ID ORGANIZATION_ID, in location global, and the new entitlement configuration stored in a file named sample-entitlement.yaml, run:

gcloud beta pam entitlements update sample-entitlement --organization=ORGANIZATION_ID --location=global --entitlement-file=sample-entitlement.yaml

To describe an entitlement with a name of sample-entitlement, in a project named sample-project, and in location global, run:

gcloud beta pam entitlements describe sample-entitlement --project=sample-project --location=global

To describe an entitlement with a name of sample-entitlement, in a folder with ID FOLDER_ID, and in location global, run:

gcloud beta pam entitlements describe sample-entitlement --folder=FOLDER_ID --location=global

To describe an entitlement with a name of sample-entitlement, in an organization with ID ORGANIZATION_ID, and in location global, run:

gcloud beta pam entitlements describe sample-entitlement --organization=ORGANIZATION_ID --location=global

To search for and list all entitlements for which you are a requester, in a project named sample-project, and in location global, run:

gcloud beta pam entitlements search --project=sample-project --location=global --caller-access-type=grant-requester

To search for and list all entitlements for which you are an approver, in a project named sample-project, and in location global, run:

gcloud beta pam entitlements search --project=sample-project --location=global --caller-access-type=grant-approver

To search for and list all entitlements for which you are a requester, in a folder with ID FOLDER_ID, and in location global, run:

gcloud beta pam entitlements search --folder=FOLDER_ID --location=global --caller-access-type=grant-requester

To search for and list all entitlements for which you are an approver, in a folder with ID FOLDER_ID, and in location global, run:

gcloud beta pam entitlements search --folder=FOLDER_ID --location=global --caller-access-type=grant-approver

To search for and list all entitlements for which you are a requester, in an organization with ID ORGANIZATION_ID, and in location global, run:

gcloud beta pam entitlements search --organization=ORGANIZATION_ID --location=global --caller-access-type=grant-requester

To search for and list all entitlements for which you are an approver, in an organization with ID ORGANIZATION_ID, and in location global, run:

gcloud beta pam entitlements search --organization=ORGANIZATION_ID --location=global --caller-access-type=grant-approver

To list all entitlements in a project named sample-project and in location global, run:

gcloud beta pam entitlements list --project=sample-project --location=global

To list all entitlements in a folder with ID FOLDER_ID and in location global, run:

gcloud beta pam entitlements list --folder=FOLDER_ID --location=global

To list all entitlements in an organization with ID ORGANIZATION_ID and in location global, run:

gcloud beta pam entitlements list --organization=ORGANIZATION_ID --location=global

To delete an entitlement with a name of sample-entitlement, in a project named sample-project, and in location global, run:

gcloud beta pam entitlements delete sample-entitlement --project=sample-project --location=global

To delete an entitlement with a name of sample-entitlement, in a folder with ID FOLDER_ID, and in location global, run:

gcloud beta pam entitlements delete sample-entitlement --folder=FOLDER_ID --location=global

To delete an entitlement with a name of sample-entitlement, in an organization with ID ORGANIZATION_ID, and in location global, run:

gcloud beta pam entitlements delete sample-entitlement --organization=ORGANIZATION_ID --location=global

To export an entitlement with a name of sample-entitlement, in a project named sample-project, and in location global to a local YAML file named sample-entitlement.yaml, run:

gcloud beta pam entitlements export sample-entitlement --project=sample-project --location=global --destination=sample-entitlement.yaml

To export an entitlement with a name of sample-entitlement, in a folder with ID FOLDER_ID, and in location global to a local YAML file named sample-entitlement.yaml, run:

gcloud beta pam entitlements export sample-entitlement --folder=FOLDER_ID --location=global --destination=sample-entitlement.yaml

To export an entitlement with a name of sample-entitlement, in an organization with ID ORGANIZATION_ID, and in location global to a local YAML file named sample-entitlement.yaml, run:

gcloud beta pam entitlements export sample-entitlement --organization=ORGANIZATION_ID --location=global --destination=sample-entitlement.yaml

Run $ gcloud help for details.

create

(BETA) Create a new Privileged Access Manager (PAM) entitlement.

delete

(BETA) Delete a Privileged Access Manager (PAM) entitlement.

describe

(BETA) Show details of a Privileged Access Manager (PAM) entitlement.

export

(BETA) Export a Privileged Access Manager (PAM) entitlement into a local YAML file.

list

(BETA) List all Privileged Access Manager (PAM) entitlements under a parent.

search

(BETA) Search and list all Privileged Access Manager (PAM) entitlements in a parent for which you are a requester/approver.

update

(BETA) Update an existing Privileged Access Manager (PAM) entitlement.