- NAME
-
- gcloud beta active-directory domains trusts create - create a Microsoft Active Directory Trust between a Managed Microsoft AD domain and another domain
- SYNOPSIS
-
-
gcloud beta active-directory domains trusts createDOMAIN--target-dns-ip-addresses= [TARGET_DNS_IP_ADDRESSES, …]--target-domain-name=TARGET_DOMAIN_NAME[--async] [--direction=DIRECTION; default="BIDIRECTIONAL"] [--handshake-secret=HANDSHAKE_SECRET] [--selective-authentication] [--type=TYPE; default="FOREST"] [GCLOUD_WIDE_FLAG …]
-
- DESCRIPTION
-
(BETA)Create a Microsoft Active Directory Trust between a Managed Microsoft AD domain and another domain.This command can fail for the following reasons:
- The domain specified does not exist.
- The active account does not have permission to access the given domain.
- A trust already exists with the same target domain name.
- The active account does not have permission to create AD trusts.
- EXAMPLES
- The following command creates an external, bidirectional AD trust between
my-domain.comandtarget-domain.com.gcloud beta active-directory domains trusts create my-domain.com --target-domain-name = target-domain.com --target-dns-ip-addresses = 10 .177.0.2 --type = EXTERNAL --direction = BIDIRECTIONAL --selective-authentication = false --async - POSITIONAL ARGUMENTS
-
- Domain resource - Name of the Managed Microsoft AD domain you want to create an
AD trust from. This represents a Cloud resource. (NOTE) Some attributes are not
given arguments in this group but can be set in other ways.
To set the
projectattribute:- provide the argument
domainon the command line with a fully specified name; - provide the argument
--projecton the command line; - set the property
core/project.
This must be specified.
-
DOMAIN - ID of the domain or fully qualified identifier for the domain.
To set the
domainattribute:- provide the argument
domainon the command line.
- provide the argument
- provide the argument
- Domain resource - Name of the Managed Microsoft AD domain you want to create an
AD trust from. This represents a Cloud resource. (NOTE) Some attributes are not
given arguments in this group but can be set in other ways.
- REQUIRED FLAGS
-
-
--target-dns-ip-addresses=[TARGET_DNS_IP_ADDRESSES,…] - Target DNS server IP addresses that can resolve the target domain.
Only IPv4 is supported.
-
--target-domain-name=TARGET_DOMAIN_NAME - Target domain name for the Managed Microsoft AD Trust.
-
- OPTIONAL FLAGS
-
-
--async - Return immediately, without waiting for the operation in progress to complete.
-
--direction=DIRECTION; default="BIDIRECTIONAL" - Direction of the trust.
Must be one of: INBOUND, OUTBOUND, BIDIRECTIONAL. Default is BIDIRECTIONAL.
DIRECTIONmust be one of:bidirectional,inbound,outbound,trust-direction-unspecified. -
--handshake-secret=HANDSHAKE_SECRET - Trust handshake secret with target domain. The secret will not be stored. If not specified, command will prompt user for secret.
-
--selective-authentication - If specified, trusted side will only have selective access to approved set of
resources.
Otherwise, the trusted side has forest/domain wide access. Default is false.
-
--type=TYPE; default="FOREST" - Type of the trust. Must be FOREST or EXTERNAL. Default is FOREST.
TYPEmust be one of:external,forest,trust-type-unspecified.
-
- GCLOUD WIDE FLAGS
- These flags are available to all commands:
--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.Run
$ gcloud helpfor details. - API REFERENCE
- This command uses the
managedidentities/v1API. The full documentation for this API can be found at: https://cloud.google.com/managed-microsoft-ad/ - NOTES
- This command is currently in beta and might change without notice. These
variants are also available:
gcloud active-directory domains trusts creategcloud alpha active-directory domains trusts create
gcloud beta active-directory domains trusts create
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License , and code samples are licensed under the Apache 2.0 License . For details, see the Google Developers Site Policies . Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-05-27 UTC.

