- NAME
-
- gcloud beta active-directory domains migration enable - enable domain migration permissions on a Managed Microsoft AD domain
- SYNOPSIS
-
-
gcloud beta active-directory domains migration enableDOMAIN--onprem-domains= [ONPREM_DOMAINS, …] [--async] [--disable-sid-filtering-domains=[DISABLE_SID_FILTERING_DOMAINS, …]] [GCLOUD_WIDE_FLAG …]
-
- DESCRIPTION
-
(BETA)Enable domain migration permissions on a Managed Microsoft AD domain.This command can fail for the following reasons:
- The specified domain doesn't exist.
- The specified domain is either being created or updated.
- The active account doesn't have permission to enable migration permissions on the specified domain.
- EXAMPLES
- The following command enables migration permissions on the domain
my-domain.comin projectmy-projectfor two on-premises domainsonprem-domain-1.comandonprem-domain-2.com, with SID Filtering disabled foronprem-domain-1.com.gcloud beta active-directory domains migration enable my-domain.com --onprem-domains = onprem-domain-1.com,onprem-domain-2.com --disable-sid-filtering-domains = onprem-domain-1.com --project = my-project --async - POSITIONAL ARGUMENTS
-
- Domain resource - Name of the Managed Microsoft AD domain on which you want to
enable migration permissions. This represents a Cloud resource. (NOTE) Some
attributes are not given arguments in this group but can be set in other ways.
To set the
projectattribute:- provide the argument
domainon the command line with a fully specified name; - provide the argument
--projecton the command line; - set the property
core/project.
This must be specified.
-
DOMAIN - ID of the domain or fully qualified identifier for the domain.
To set the
domainattribute:- provide the argument
domainon the command line.
- provide the argument
- provide the argument
- Domain resource - Name of the Managed Microsoft AD domain on which you want to
enable migration permissions. This represents a Cloud resource. (NOTE) Some
attributes are not given arguments in this group but can be set in other ways.
- REQUIRED FLAGS
-
-
--onprem-domains=[ONPREM_DOMAINS,…] - List of trusted domains that are being migrated.
-
- OPTIONAL FLAGS
-
-
--async - Return immediately, without waiting for the operation in progress to complete.
-
--disable-sid-filtering-domains=[DISABLE_SID_FILTERING_DOMAINS,…] - List of migrating domains on which SID Filtering must be disabled. The list is empty by default.
-
- GCLOUD WIDE FLAGS
- These flags are available to all commands:
--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.Run
$ gcloud helpfor details. - API REFERENCE
- This command uses the
managedidentities/v1beta1API. The full documentation for this API can be found at: https://cloud.google.com/managed-microsoft-ad/ - NOTES
- This command is currently in beta and might change without notice. This variant
is also available:
gcloud alpha active-directory domains migration enable
gcloud beta active-directory domains migration enable
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License , and code samples are licensed under the Apache 2.0 License . For details, see the Google Developers Site Policies . Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-05-27 UTC.

