gcloud access-context-manager levels create - create a new access level

gcloud access-context-manager levels create(LEVEL :--policy=POLICY)--title=TITLE(--custom-level-spec=CUSTOM_LEVEL_SPEC    | [--basic-level-spec=BASIC_LEVEL_SPEC :--combine-function=COMBINE_FUNCTION; default="and"])[--async][--description=DESCRIPTION][GCLOUD_WIDE_FLAG …]

Level resource - The access level to create. The arguments in this group can beused to specify the attributes of this resource.

This must be specified.

LEVEL

ID of the level or fully qualified identifier for the level.

To set thelevel attribute:

• provide the argumentlevel on the command line.

This positional argument must be specified if any of the other arguments in thisgroup are specified.

--policy=POLICY

The ID of the access policy.To set thepolicy attribute:

• provide the argumentlevel on the command line with a fullyspecified name;
• provide the argument--policy on the command line;
• set the propertyaccess_context_manager/policy;
• automatically, if the current account belongs to an organization with exactlyone access policy..

--title=TITLE

Short human-readable title of the access level.

Level specification.

Exactly one of these must be specified:

Custom level specification.

--custom-level-spec=CUSTOM_LEVEL_SPEC

Path to a file representing an expression that represents an access level.

The expression is in the Common Expression Language (CEL) format. For example:

expression:"origin.region_code in ['US', 'CA']"

Basic level specification.

--basic-level-spec=BASIC_LEVEL_SPEC

Path to a file containing a list of basic access level conditions.

An access level condition file is a YAML-formatted list of conditions, which areYAML objects representing a Condition as described in the API reference. Forexample:

-ipSubnetworks:-162.222.181.197/24-2001:db8::/48-members:-user:user@example.com

This flag argument must be specified if any of the other arguments in this groupare specified.

--combine-function=COMBINE_FUNCTION; default="and"

For a basic level, determines how conditions are combined.COMBINE_FUNCTION must be one of:and,or.

--async

Return immediately, without waiting for the operation in progress to complete.

--description=DESCRIPTION

Long-form description of access level.

Run$gcloud help for details.