- NAME
-
- gcloud network-security security-profile-groups create - create a new Security Profile Group
- SYNOPSIS
-
-
gcloud network-security security-profile-groups create(SECURITY_PROFILE_GROUP:--location=LOCATION--organization=ORGANIZATION) ([--custom-intercept-profile=CUSTOM_INTERCEPT_PROFILE:--custom-intercept-profile-location=CUSTOM_INTERCEPT_PROFILE_LOCATION--custom-intercept-profile-organization=CUSTOM_INTERCEPT_PROFILE_ORGANIZATION] [--custom-mirroring-profile=CUSTOM_MIRRORING_PROFILE:--custom-mirroring-profile-location=CUSTOM_MIRRORING_PROFILE_LOCATION--custom-mirroring-profile-organization=CUSTOM_MIRRORING_PROFILE_ORGANIZATION] [--threat-prevention-profile=THREAT_PREVENTION_PROFILE:--threat-prevention-profile-location=THREAT_PREVENTION_PROFILE_LOCATION--threat-prevention-profile-organization=THREAT_PREVENTION_PROFILE_ORGANIZATION] [--url-filtering-profile=URL_FILTERING_PROFILE:--url-filtering-profile-location=URL_FILTERING_PROFILE_LOCATION--url-filtering-profile-organization=URL_FILTERING_PROFILE_ORGANIZATION]) [--async] [--description=DESCRIPTION] [--labels=[KEY=VALUE, …]] [GCLOUD_WIDE_FLAG …]
-
- DESCRIPTION
- Create a new Security Profile Group with the given name.
- EXAMPLES
- To create a Security Profile Group with the name
my-security-profile-group, with a threat prevention profile using--threat-prevention-profileflag and optional description asoptional description, run:gcloud network-security security-profile-groups create my-security-profile-group --organization = 1234 --location = global --threat-prevention-profile = ` organizations/1234/locations/global/securityProfiles/my-security-profile ` --description = 'optional description' - POSITIONAL ARGUMENTS
-
- Security profile group resource - Security Profile Group Name. The arguments in
this group can be used to specify the attributes of this resource. This resource
can be one of the following types: [security_profile_group].
This must be specified.
-
SECURITY_PROFILE_GROUP - ID of the security_profile_group or fully qualified identifier for the
security_profile_group.
To set the
security_profile_groupattribute:- provide the argument
security_profile_groupon the command line.
This positional argument must be specified if any of the other arguments in this group are specified.
- provide the argument
-
--location=LOCATION - location of the security_profile_group - Global.
To set the
locationattribute:- provide the argument
security_profile_groupon the command line with a fully specified name; - provide the argument
--locationon the command line.
- provide the argument
-
--organization=ORGANIZATION - Organization ID of Security Profile Group
To set the
organizationattribute:- provide the argument
security_profile_groupon the command line with a fully specified name; - provide the argument
--organizationon the command line.
- provide the argument
-
- Security profile group resource - Security Profile Group Name. The arguments in
this group can be used to specify the attributes of this resource. This resource
can be one of the following types: [security_profile_group].
- REQUIRED FLAGS
-
- At least one of these must be specified:
- Custom intercept profile resource - Path to Custom Intercept Profile resource. The arguments in this group can be used to specify the attributes of this resource. This resource can be one of the following types: [custom_intercept_profile].
-
--custom-intercept-profile=CUSTOM_INTERCEPT_PROFILE - ID of the custom_intercept_profile or fully qualified identifier for the
custom_intercept_profile.
To set the
nameattribute:- provide the argument
--custom-intercept-profileon the command line.
This flag argument must be specified if any of the other arguments in this group are specified.
- provide the argument
-
--custom-intercept-profile-location=CUSTOM_INTERCEPT_PROFILE_LOCATION - Location of the custom_intercept_profile. NOTE: Only
globalsecurity profiles are supported. To set thelocationattribute:- provide the argument
--custom-intercept-profileon the command line with a fully specified name; - provide the argument
--custom-intercept-profile-locationon the command line; - provide the argument
--locationon the command line; - provide the argument
security_profile_groupon the command line with a fully specified name.
- provide the argument
-
--custom-intercept-profile-organization=CUSTOM_INTERCEPT_PROFILE_ORGANIZATION - Organization ID of the Security Profile.
To set the
organizationattribute:- provide the argument
--custom-intercept-profileon the command line with a fully specified name; - provide the argument
--custom-intercept-profile-organizationon the command line; - provide the argument
--organizationon the command line; - provide the argument
security_profile_groupon the command line with a fully specified name.
- provide the argument
- Custom mirroring profile resource - Path to Custom Mirroring Profile resource. The arguments in this group can be used to specify the attributes of this resource. This resource can be one of the following types: [custom_mirroring_profile].
-
--custom-mirroring-profile=CUSTOM_MIRRORING_PROFILE - ID of the custom_mirroring_profile or fully qualified identifier for the
custom_mirroring_profile.
To set the
nameattribute:- provide the argument
--custom-mirroring-profileon the command line.
This flag argument must be specified if any of the other arguments in this group are specified.
- provide the argument
-
--custom-mirroring-profile-location=CUSTOM_MIRRORING_PROFILE_LOCATION - Location of the custom_mirroring_profile. NOTE: Only
globalsecurity profiles are supported. To set thelocationattribute:- provide the argument
--custom-mirroring-profileon the command line with a fully specified name; - provide the argument
--custom-mirroring-profile-locationon the command line; - provide the argument
--locationon the command line; - provide the argument
security_profile_groupon the command line with a fully specified name.
- provide the argument
-
--custom-mirroring-profile-organization=CUSTOM_MIRRORING_PROFILE_ORGANIZATION - Organization ID of the Security Profile.
To set the
organizationattribute:- provide the argument
--custom-mirroring-profileon the command line with a fully specified name; - provide the argument
--custom-mirroring-profile-organizationon the command line; - provide the argument
--organizationon the command line; - provide the argument
security_profile_groupon the command line with a fully specified name.
- provide the argument
- Threat prevention profile resource - Path to Threat Prevention Profile resource. The arguments in this group can be used to specify the attributes of this resource. This resource can be one of the following types: [threat_prevention_profile].
-
--threat-prevention-profile=THREAT_PREVENTION_PROFILE - ID of the threat_prevention_profile or fully qualified identifier for the
threat_prevention_profile.
To set the
nameattribute:- provide the argument
--threat-prevention-profileon the command line.
This flag argument must be specified if any of the other arguments in this group are specified.
- provide the argument
-
--threat-prevention-profile-location=THREAT_PREVENTION_PROFILE_LOCATION - Location of the threat_prevention_profile. NOTE: Only
globalsecurity profiles are supported. To set thelocationattribute:- provide the argument
--threat-prevention-profileon the command line with a fully specified name; - provide the argument
--threat-prevention-profile-locationon the command line; - provide the argument
--security-profile-locationon the command line; - provide the argument
--locationon the command line; - provide the argument
security_profile_groupon the command line with a fully specified name.
- provide the argument
-
--threat-prevention-profile-organization=THREAT_PREVENTION_PROFILE_ORGANIZATION - Organization ID of the Security Profile.
To set the
organizationattribute:- provide the argument
--threat-prevention-profileon the command line with a fully specified name; - provide the argument
--threat-prevention-profile-organizationon the command line; - provide the argument
--security-profile-organizationon the command line; - provide the argument
--organizationon the command line; - provide the argument
security_profile_groupon the command line with a fully specified name.
- provide the argument
- Url filtering profile resource - Path to URL Filtering Profile resource. The arguments in this group can be used to specify the attributes of this resource. This resource can be one of the following types: [url_filtering_profile].
-
--url-filtering-profile=URL_FILTERING_PROFILE - ID of the url_filtering_profile or fully qualified identifier for the
url_filtering_profile.
To set the
nameattribute:- provide the argument
--url-filtering-profileon the command line.
This flag argument must be specified if any of the other arguments in this group are specified.
- provide the argument
-
--url-filtering-profile-location=URL_FILTERING_PROFILE_LOCATION - Location of the url_filtering_profile. NOTE: Only
globalsecurity profiles are supported. To set thelocationattribute:- provide the argument
--url-filtering-profileon the command line with a fully specified name; - provide the argument
--url-filtering-profile-locationon the command line; - provide the argument
--locationon the command line; - provide the argument
security_profile_groupon the command line with a fully specified name.
- provide the argument
-
--url-filtering-profile-organization=URL_FILTERING_PROFILE_ORGANIZATION - Organization ID of the Security Profile.
To set the
organizationattribute:- provide the argument
--url-filtering-profileon the command line with a fully specified name; - provide the argument
--url-filtering-profile-organizationon the command line; - provide the argument
--organizationon the command line; - provide the argument
security_profile_groupon the command line with a fully specified name.
- provide the argument
- At least one of these must be specified:
- OPTIONAL FLAGS
-
-
--async - Return immediately, without waiting for the operation in progress to complete.
The default is
False. -
--description=DESCRIPTION - Brief description of the security profile group
-
--labels=[KEY=VALUE,…] - List of label KEY=VALUE pairs to add.
Keys must start with a lowercase character and contain only hyphens (
-), underscores (_), lowercase characters, and numbers. Values must contain only hyphens (-), underscores (_), lowercase characters, and numbers.
-
- GCLOUD WIDE FLAGS
- These flags are available to all commands:
--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.Run
$ gcloud helpfor details. - NOTES
- These variants are also available:
gcloud alpha network-security security-profile-groups creategcloud beta network-security security-profile-groups create
gcloud network-security security-profile-groups create
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License , and code samples are licensed under the Apache 2.0 License . For details, see the Google Developers Site Policies . Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-05-27 UTC.

