- NAME
-
- gcloud access-context-manager levels update - update an existing access level
- SYNOPSIS
-
-
gcloud access-context-manager levels update(LEVEL:--policy=POLICY) [--description=DESCRIPTION] [--title=TITLE] [--custom-level-spec=CUSTOM_LEVEL_SPEC|--basic-level-spec=BASIC_LEVEL_SPEC--combine-function=COMBINE_FUNCTION] [GCLOUD_WIDE_FLAG …]
-
- DESCRIPTION
- Update an existing access level.
- POSITIONAL ARGUMENTS
-
- Level resource - The access level to update. The arguments in this group can be
used to specify the attributes of this resource.
This must be specified.
-
LEVEL - ID of the level or fully qualified identifier for the level.
To set the
levelattribute:- provide the argument
levelon the command line.
This positional argument must be specified if any of the other arguments in this group are specified.
- provide the argument
-
--policy=POLICY - The ID of the access policy.
To set the
policyattribute:- provide the argument
levelon the command line with a fully specified name; - provide the argument
--policyon the command line; - set the property
access_context_manager/policy.
- provide the argument
-
- Level resource - The access level to update. The arguments in this group can be
used to specify the attributes of this resource.
- FLAGS
-
-
--description=DESCRIPTION - Long-form description of access level.
-
--title=TITLE - Short human-readable title of the access level.
- Level specification.
At most one of these can be specified:
- Custom level specification.
-
--custom-level-spec=CUSTOM_LEVEL_SPEC - Path to a file representing an expression for an access level.
The expression is in the Common Expression Langague (CEL) format.For example:
expression: "origin.region_code in ['US', 'CA']"
- Basic level specification.
-
--basic-level-spec=BASIC_LEVEL_SPEC - Path to a file containing a list of basic access level conditions.
An access level condition file is a YAML-formatted list of conditions,which are YAML objects representing a Condition as described in the API reference. For example:
- ipSubnetworks: - 162 .222.181.197/24 - 2001 :db8::/48 - members: - user:user@example.com
-
--combine-function=COMBINE_FUNCTION - For a basic level, determines how conditions are combined.
COMBINE_FUNCTIONmust be one of:and,or.
-
- GCLOUD WIDE FLAGS
- These flags are available to all commands:
--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.Run
$ gcloud helpfor details. - NOTES
- These variants are also available:
gcloud alpha access-context-manager levels updategcloud beta access-context-manager levels update
gcloud access-context-manager levels update
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License , and code samples are licensed under the Apache 2.0 License . For details, see the Google Developers Site Policies . Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-05-27 UTC.

