Stay organized with collectionsSave and categorize content based on your preferences.
Using Access Context Manager, you can create access levels that permit access
to data based on the context of a request. While Access Context Manager
already provides a method of creatingbasic access levels, you can also create custom
access levels. Custom access levels enable your organization to use the device
and context data of third-party security and endpoint management vendors to
permit access to Google Cloud resources.
Custom access levels use boolean expressions written in a subset ofCommon Expression Language(CEL)
to test the attributes of a client making a request.
In the Google Cloud console, custom access levels are configured usingAdvanced Modewhen you create an access level.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-04 UTC."],[[["\u003cp\u003eAccess Context Manager allows you to create access levels that control data access based on request context.\u003c/p\u003e\n"],["\u003cp\u003eIn addition to basic access levels, custom access levels are available to use third-party security and endpoint data to control access to Google Cloud resources.\u003c/p\u003e\n"],["\u003cp\u003eCustom access levels utilize boolean expressions written in a subset of Common Expression Language (CEL) to test client request attributes.\u003c/p\u003e\n"],["\u003cp\u003eCreating a custom access level is done using the \u003cstrong\u003eAdvanced Mode\u003c/strong\u003e within the Google Cloud console.\u003c/p\u003e\n"],["\u003cp\u003eAfter creation, custom access levels are managed in the same way as other access levels.\u003c/p\u003e\n"]]],[],null,["# Custom access levels\n\nUsing Access Context Manager, you can create access levels that permit access\nto data based on the context of a request. While Access Context Manager\nalready provides a method of creating\n[basic access levels](/access-context-manager/docs/create-basic-access-level), you can also create custom\naccess levels. Custom access levels enable your organization to use the device\nand context data of third-party security and endpoint management vendors to\npermit access to Google Cloud resources.\n\nCustom access levels use boolean expressions written in a subset of\n[Common Expression Language](https://opensource.google.com/projects/cel) (CEL)\nto test the attributes of a client making a request.\n\nIn the Google Cloud console, custom access levels are configured using\n**Advanced Mode** when you create an access level.\n\nTo learn more about building CEL expressions for custom access levels, see the\n[custom access level specification](/access-context-manager/docs/custom-access-level-spec).\n\nTo start using custom access levels, see\n[Creating custom access levels](/access-context-manager/docs/create-custom-access-level).\n\nAfter custom access levels are created, they can be\n[managed like other access levels](/access-context-manager/docs/manage-access-levels)."]]
