- NAME
-
- gcloud network-security security-profile-groups update - update a Security Profile Group
- SYNOPSIS
-
-
gcloud network-security security-profile-groups update(SECURITY_PROFILE_GROUP:--location=LOCATION--organization=ORGANIZATION) [--async] [--description=DESCRIPTION] [--update-labels=[KEY=VALUE, …]] [--clear-labels|--remove-labels=[KEY, …]] [--clear-threat-prevention-profile| [--threat-prevention-profile=THREAT_PREVENTION_PROFILE:--threat-prevention-profile-location=THREAT_PREVENTION_PROFILE_LOCATION--threat-prevention-profile-organization=THREAT_PREVENTION_PROFILE_ORGANIZATION]] [--clear-url-filtering-profile| [--url-filtering-profile=URL_FILTERING_PROFILE:--url-filtering-profile-location=URL_FILTERING_PROFILE_LOCATION--url-filtering-profile-organization=URL_FILTERING_PROFILE_ORGANIZATION]] [GCLOUD_WIDE_FLAG …]
-
- DESCRIPTION
- Update details of a Security Profile Group.
- EXAMPLES
- To update a Security Profile Group with new threat prevention profile
my-new-security-profile, run:gcloud network-security security-profile-groups update my-security-profile-group --organization = 1234 --location = global --threat-prevention-profile = ` organizations/1234/locations/global/securityProfiles/my-new-security-profile ` --description = 'New Security Profile of type threat prevention' - POSITIONAL ARGUMENTS
-
- Security profile group resource - Security Profile Group Name. The arguments in
this group can be used to specify the attributes of this resource. This resource
can be one of the following types: [security_profile_group].
This must be specified.
-
SECURITY_PROFILE_GROUP - ID of the security_profile_group or fully qualified identifier for the
security_profile_group.
To set the
security_profile_groupattribute:- provide the argument
security_profile_groupon the command line.
This positional argument must be specified if any of the other arguments in this group are specified.
- provide the argument
-
--location=LOCATION - location of the security_profile_group - Global.
To set the
locationattribute:- provide the argument
security_profile_groupon the command line with a fully specified name; - provide the argument
--locationon the command line.
- provide the argument
-
--organization=ORGANIZATION - Organization ID of Security Profile Group
To set the
organizationattribute:- provide the argument
security_profile_groupon the command line with a fully specified name; - provide the argument
--organizationon the command line.
- provide the argument
-
- Security profile group resource - Security Profile Group Name. The arguments in
this group can be used to specify the attributes of this resource. This resource
can be one of the following types: [security_profile_group].
- FLAGS
-
-
--async - Return immediately, without waiting for the operation in progress to complete.
The default is
False. -
--description=DESCRIPTION - Brief description of the security profile group
-
--update-labels=[KEY=VALUE,…] - List of label KEY=VALUE pairs to update. If a label exists, its value is
modified. Otherwise, a new label is created.
Keys must start with a lowercase character and contain only hyphens (
-), underscores (_), lowercase characters, and numbers. Values must contain only hyphens (-), underscores (_), lowercase characters, and numbers. - At most one of these can be specified:
-
--clear-labels - Remove all labels. If
--update-labelsis also specified then--clear-labelsis applied first.For example, to remove all labels:
gcloud network-security security-profile-groups update --clear-labelsTo remove all existing labels and create two new labels,
andfoo:bazgcloud network-security security-profile-groups update --clear-labels --update-labels foo = bar,baz = qux -
--remove-labels=[KEY,…] - List of label keys to remove. If a label does not exist it is silently ignored.
If
--update-labelsis also specified then--update-labelsis applied first.
-
- At most one of these can be specified:
-
--clear-threat-prevention-profile - Clear the threat-prevention-profile field.
- Or at least one of these can be specified:
- Threat prevention profile resource - Path to Threat Prevention Profile resource. The arguments in this group can be used to specify the attributes of this resource. This resource can be one of the following types: [threat_prevention_profile].
-
--threat-prevention-profile=THREAT_PREVENTION_PROFILE - ID of the threat_prevention_profile or fully qualified identifier for the
threat_prevention_profile.
To set the
nameattribute:- provide the argument
--threat-prevention-profileon the command line.
This flag argument must be specified if any of the other arguments in this group are specified.
- provide the argument
-
--threat-prevention-profile-location=THREAT_PREVENTION_PROFILE_LOCATION - Location of the threat_prevention_profile. NOTE: Only
globalsecurity profiles are supported. To set thelocationattribute:- provide the argument
--threat-prevention-profileon the command line with a fully specified name; - provide the argument
--threat-prevention-profile-locationon the command line; - provide the argument
--security-profile-locationon the command line; - provide the argument
--locationon the command line; - provide the argument
security_profile_groupon the command line with a fully specified name.
- provide the argument
-
--threat-prevention-profile-organization=THREAT_PREVENTION_PROFILE_ORGANIZATION - Organization ID of the Security Profile.
To set the
organizationattribute:- provide the argument
--threat-prevention-profileon the command line with a fully specified name; - provide the argument
--threat-prevention-profile-organizationon the command line; - provide the argument
--security-profile-organizationon the command line; - provide the argument
--organizationon the command line; - provide the argument
security_profile_groupon the command line with a fully specified name.
- provide the argument
-
- At most one of these can be specified:
-
--clear-url-filtering-profile - Clear the url-filtering-profile field.
- Or at least one of these can be specified:
- Url filtering profile resource - Path to URL Filtering Profile resource. The arguments in this group can be used to specify the attributes of this resource. This resource can be one of the following types: [url_filtering_profile].
-
--url-filtering-profile=URL_FILTERING_PROFILE - ID of the url_filtering_profile or fully qualified identifier for the
url_filtering_profile.
To set the
nameattribute:- provide the argument
--url-filtering-profileon the command line.
This flag argument must be specified if any of the other arguments in this group are specified.
- provide the argument
-
--url-filtering-profile-location=URL_FILTERING_PROFILE_LOCATION - Location of the url_filtering_profile. NOTE: Only
globalsecurity profiles are supported. To set thelocationattribute:- provide the argument
--url-filtering-profileon the command line with a fully specified name; - provide the argument
--url-filtering-profile-locationon the command line; - provide the argument
--locationon the command line; - provide the argument
security_profile_groupon the command line with a fully specified name.
- provide the argument
-
--url-filtering-profile-organization=URL_FILTERING_PROFILE_ORGANIZATION - Organization ID of the Security Profile.
To set the
organizationattribute:- provide the argument
--url-filtering-profileon the command line with a fully specified name; - provide the argument
--url-filtering-profile-organizationon the command line; - provide the argument
--organizationon the command line; - provide the argument
security_profile_groupon the command line with a fully specified name.
- provide the argument
-
-
- GCLOUD WIDE FLAGS
- These flags are available to all commands:
--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.Run
$ gcloud helpfor details. - NOTES
- These variants are also available:
gcloud alpha network-security security-profile-groups updategcloud beta network-security security-profile-groups update
gcloud network-security security-profile-groups update
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License , and code samples are licensed under the Apache 2.0 License . For details, see the Google Developers Site Policies . Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-05-27 UTC.

