gcloud beta active-directory domains trusts create

NAME
gcloud beta active-directory domains trusts create - create a Microsoft Active Directory Trust between a Managed Microsoft AD domain and another domain
SYNOPSIS
gcloud beta active-directory domains trusts create DOMAIN --target-dns-ip-addresses = [ TARGET_DNS_IP_ADDRESSES , …] --target-domain-name = TARGET_DOMAIN_NAME [ --async ] [ --direction = DIRECTION ; default="BIDIRECTIONAL"] [ --handshake-secret = HANDSHAKE_SECRET ] [ --selective-authentication ] [ --type = TYPE ; default="FOREST"] [ GCLOUD_WIDE_FLAG ]
DESCRIPTION
(BETA) Create a Microsoft Active Directory Trust between a Managed Microsoft AD domain and another domain.

This command can fail for the following reasons:

  • The domain specified does not exist.
  • The active account does not have permission to access the given domain.
  • A trust already exists with the same target domain name.
  • The active account does not have permission to create AD trusts.
EXAMPLES
The following command creates an external, bidirectional AD trust between my-domain.com and target-domain.com .
 gcloud  
beta  
active-directory  
domains  
trusts  
create  
my-domain.com  
 --target-domain-name 
 = 
target-domain.com  
 --target-dns-ip-addresses 
 = 
 10 
.177.0.2  
 --type 
 = 
EXTERNAL  
 --direction 
 = 
BIDIRECTIONAL  
 --selective-authentication 
 = 
 false 
  
 --async 
 
POSITIONAL ARGUMENTS
Domain resource - Name of the Managed Microsoft AD domain you want to create an AD trust from. This represents a Cloud resource. (NOTE) Some attributes are not given arguments in this group but can be set in other ways.

To set the project attribute:

  • provide the argument domain on the command line with a fully specified name;
  • provide the argument --project on the command line;
  • set the property core/project .

This must be specified.

DOMAIN
ID of the domain or fully qualified identifier for the domain.

To set the domain attribute:

  • provide the argument domain on the command line.
REQUIRED FLAGS
--target-dns-ip-addresses =[ TARGET_DNS_IP_ADDRESSES ,…]
Target DNS server IP addresses that can resolve the target domain.

Only IPv4 is supported.

--target-domain-name = TARGET_DOMAIN_NAME
Target domain name for the Managed Microsoft AD Trust.
OPTIONAL FLAGS
--async
Return immediately, without waiting for the operation in progress to complete.
--direction = DIRECTION ; default="BIDIRECTIONAL"
Direction of the trust.

Must be one of: INBOUND, OUTBOUND, BIDIRECTIONAL. Default is BIDIRECTIONAL.

DIRECTION must be one of: bidirectional , inbound , outbound , trust-direction-unspecified .

--handshake-secret = HANDSHAKE_SECRET
Trust handshake secret with target domain. The secret will not be stored. If not specified, command will prompt user for secret.
--selective-authentication
If specified, trusted side will only have selective access to approved set of resources.

Otherwise, the trusted side has forest/domain wide access. Default is false.

--type = TYPE ; default="FOREST"
Type of the trust. Must be FOREST or EXTERNAL. Default is FOREST. TYPE must be one of: external , forest , trust-type-unspecified .
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file , --account , --billing-project , --configuration , --flags-file , --flatten , --format , --help , --impersonate-service-account , --log-http , --project , --quiet , --trace-token , --user-output-enabled , --verbosity .

Run $ gcloud help for details.

API REFERENCE
This command uses the managedidentities/v1 API. The full documentation for this API can be found at: https://cloud.google.com/managed-microsoft-ad/
NOTES
This command is currently in beta and might change without notice. These variants are also available:
  gcloud  
active-directory  
domains  
trusts  
create 
 
  gcloud  
alpha  
active-directory  
domains  
trusts  
create 
 
Create a Mobile Website
View Site in Mobile | Classic
Share by: