gcloud beta pam entitlements

NAME
gcloud beta pam entitlements - manage Privileged Access Manager entitlements
SYNOPSIS
gcloud beta pam entitlements COMMAND [ GCLOUD_WIDE_FLAG ]
DESCRIPTION
(BETA) The gcloud pam entitlements command group lets you manage Privileged Access Manager (PAM) entitlements.
EXAMPLES
To create a new entitlement with a name of sample-entitlement , in a project named sample-project , in location global , and the entitlement configuration stored in a file named sample-entitlement.yaml , run:
  gcloud  
beta  
pam  
entitlements  
create 
  
sample-entitlement  
 --project 
 = 
sample-project  
 --location 
 = 
global  
 --entitlement-file 
 = 
sample-entitlement.yaml 

To create a new entitlement with a name of sample-entitlement , in a folder with ID FOLDER_ID , in location global , and the entitlement configuration stored in a file named sample-entitlement.yaml , run:

  gcloud  
beta  
pam  
entitlements  
create 
  
sample-entitlement  
 --folder 
 = 
FOLDER_ID  
 --location 
 = 
global  
 --entitlement-file 
 = 
sample-entitlement.yaml 

To create a new entitlement with a name of sample-entitlement , in an organization with ID ORGANIZATION_ID , in location global , and the entitlement configuration stored in a file named sample-entitlement.yaml , run:

  gcloud  
beta  
pam  
entitlements  
create 
  
sample-entitlement  
 --organization 
 = 
ORGANIZATION_ID  
 --location 
 = 
global  
 --entitlement-file 
 = 
sample-entitlement.yaml 

To update an entitlement with a name of sample-entitlement , in a project named sample-project , in location global , and the new entitlement configuration stored in a file named sample-entitlement.yaml , run:

  gcloud  
beta  
pam  
entitlements  
update 
  
sample-entitlement  
 --project 
 = 
sample-project  
 --location 
 = 
global  
 --entitlement-file 
 = 
sample-entitlement.yaml 

To update an entitlement with a name of sample-entitlement , in a folder with ID FOLDER_ID , in location global , and the new entitlement configuration stored in a file named sample-entitlement.yaml , run:

  gcloud  
beta  
pam  
entitlements  
update 
  
sample-entitlement  
 --folder 
 = 
FOLDER_ID  
 --location 
 = 
global  
 --entitlement-file 
 = 
sample-entitlement.yaml 

To update an entitlement with a name of sample-entitlement , in an organization with ID ORGANIZATION_ID , in location global , and the new entitlement configuration stored in a file named sample-entitlement.yaml , run:

  gcloud  
beta  
pam  
entitlements  
update 
  
sample-entitlement  
 --organization 
 = 
ORGANIZATION_ID  
 --location 
 = 
global  
 --entitlement-file 
 = 
sample-entitlement.yaml 

To describe an entitlement with a name of sample-entitlement , in a project named sample-project , and in location global , run:

  gcloud  
beta  
pam  
entitlements  
describe 
  
sample-entitlement  
 --project 
 = 
sample-project  
 --location 
 = 
global 

To describe an entitlement with a name of sample-entitlement , in a folder with ID FOLDER_ID , and in location global , run:

  gcloud  
beta  
pam  
entitlements  
describe 
  
sample-entitlement  
 --folder 
 = 
FOLDER_ID  
 --location 
 = 
global 

To describe an entitlement with a name of sample-entitlement , in an organization with ID ORGANIZATION_ID , and in location global , run:

  gcloud  
beta  
pam  
entitlements  
describe 
  
sample-entitlement  
 --organization 
 = 
ORGANIZATION_ID  
 --location 
 = 
global 

To search for and list all entitlements for which you are a requester, in a project named sample-project , and in location global , run:

  gcloud  
beta  
pam  
entitlements  
search 
  
 --project 
 = 
sample-project  
 --location 
 = 
global  
 --caller-access-type 
 = 
grant-requester 

To search for and list all entitlements for which you are an approver, in a project named sample-project , and in location global , run:

  gcloud  
beta  
pam  
entitlements  
search 
  
 --project 
 = 
sample-project  
 --location 
 = 
global  
 --caller-access-type 
 = 
grant-approver 

To search for and list all entitlements for which you are a requester, in a folder with ID FOLDER_ID , and in location global , run:

  gcloud  
beta  
pam  
entitlements  
search 
  
 --folder 
 = 
FOLDER_ID  
 --location 
 = 
global  
 --caller-access-type 
 = 
grant-requester 

To search for and list all entitlements for which you are an approver, in a folder with ID FOLDER_ID , and in location global , run:

  gcloud  
beta  
pam  
entitlements  
search 
  
 --folder 
 = 
FOLDER_ID  
 --location 
 = 
global  
 --caller-access-type 
 = 
grant-approver 

To search for and list all entitlements for which you are a requester, in an organization with ID ORGANIZATION_ID , and in location global , run:

  gcloud  
beta  
pam  
entitlements  
search 
  
 --organization 
 = 
ORGANIZATION_ID  
 --location 
 = 
global  
 --caller-access-type 
 = 
grant-requester 

To search for and list all entitlements for which you are an approver, in an organization with ID ORGANIZATION_ID , and in location global , run:

  gcloud  
beta  
pam  
entitlements  
search 
  
 --organization 
 = 
ORGANIZATION_ID  
 --location 
 = 
global  
 --caller-access-type 
 = 
grant-approver 

To list all entitlements in a project named sample-project and in location global , run:

  gcloud  
beta  
pam  
entitlements  
list 
  
 --project 
 = 
sample-project  
 --location 
 = 
global 

To list all entitlements in a folder with ID FOLDER_ID and in location global , run:

  gcloud  
beta  
pam  
entitlements  
list 
  
 --folder 
 = 
FOLDER_ID  
 --location 
 = 
global 

To list all entitlements in an organization with ID ORGANIZATION_ID and in location global , run:

  gcloud  
beta  
pam  
entitlements  
list 
  
 --organization 
 = 
ORGANIZATION_ID  
 --location 
 = 
global 

To delete an entitlement with a name of sample-entitlement , in a project named sample-project , and in location global , run:

  gcloud  
beta  
pam  
entitlements  
delete 
  
sample-entitlement  
 --project 
 = 
sample-project  
 --location 
 = 
global 

To delete an entitlement with a name of sample-entitlement , in a folder with ID FOLDER_ID , and in location global , run:

  gcloud  
beta  
pam  
entitlements  
delete 
  
sample-entitlement  
 --folder 
 = 
FOLDER_ID  
 --location 
 = 
global 

To delete an entitlement with a name of sample-entitlement , in an organization with ID ORGANIZATION_ID , and in location global , run:

  gcloud  
beta  
pam  
entitlements  
delete 
  
sample-entitlement  
 --organization 
 = 
ORGANIZATION_ID  
 --location 
 = 
global 

To export an entitlement with a name of sample-entitlement , in a project named sample-project , and in location global to a local YAML file named sample-entitlement.yaml , run:

  gcloud  
beta  
pam  
entitlements  
 export 
 
  
sample-entitlement  
 --project 
 = 
sample-project  
 --location 
 = 
global  
 --destination 
 = 
sample-entitlement.yaml 

To export an entitlement with a name of sample-entitlement , in a folder with ID FOLDER_ID , and in location global to a local YAML file named sample-entitlement.yaml , run:

  gcloud  
beta  
pam  
entitlements  
 export 
 
  
sample-entitlement  
 --folder 
 = 
FOLDER_ID  
 --location 
 = 
global  
 --destination 
 = 
sample-entitlement.yaml 

To export an entitlement with a name of sample-entitlement , in an organization with ID ORGANIZATION_ID , and in location global to a local YAML file named sample-entitlement.yaml , run:

  gcloud  
beta  
pam  
entitlements  
 export 
 
  
sample-entitlement  
 --organization 
 = 
ORGANIZATION_ID  
 --location 
 = 
global  
 --destination 
 = 
sample-entitlement.yaml 
GCLOUD WIDE FLAGS
These flags are available to all commands: --help .

Run $ gcloud help for details.

COMMANDS
COMMAND is one of the following:
create
(BETA) Create a new Privileged Access Manager (PAM) entitlement.
delete
(BETA) Delete a Privileged Access Manager (PAM) entitlement.
describe
(BETA) Show details of a Privileged Access Manager (PAM) entitlement.
export
(BETA) Export a Privileged Access Manager (PAM) entitlement into a local YAML file.
list
(BETA) List all Privileged Access Manager (PAM) entitlements under a parent.
(BETA) Search and list all Privileged Access Manager (PAM) entitlements in a parent for which you are a requester/approver.
update
(BETA) Update an existing Privileged Access Manager (PAM) entitlement.
NOTES
This command is currently in beta and might change without notice. These variants are also available:
  gcloud  
pam  
entitlements 
 
  gcloud  
alpha  
pam  
entitlements 
 
Create a Mobile Website
View Site in Mobile | Classic
Share by: