gcloud access-context-manager policies create - create a new access policy

gcloud access-context-manager policies create--organization=ORGANIZATION--title=TITLE[--async][--scopes=[SCOPES,…]][GCLOUD_WIDE_FLAG …]

You can optionally specify either a folder or a project as a scope of an accesspolicy. A scoped policy only allows projects under that scope to be restrictedby any service perimeters defined with that policy. The scope must be within theorganization that this policy is associated with. You can specify only onefolder or project as the scope for an access policy. If you don't specify ascope, then the scope extends to the entire organization and any projects withinthe organization can be added to service perimeters in this policy.

This command only creates an access policy. Access levels and service perimetersneed to be created explicitly.

gcloudaccess-context-managerpoliciescreate--organization=organizations/123--title="My Policy"

To create an access policy that applies to the folder with the ID 345, run:

gcloudaccess-context-managerpoliciescreate--organization=organizations/123--scopes=folders/345--title="My Folder Policy"

Only projects within this folder can be added to service perimeters within thispolicy.

To create an access policy that applies only to the project with the projectnumber 567, run:

gcloudaccess-context-managerpoliciescreate--organization=organizations/123--scopes=projects/567--title="My Project Policy"

--organization=ORGANIZATION

Parent organization for the access policies.

--title=TITLE

Short human-readable title of the access policy.

--async

Return immediately, without waiting for the operation in progress to complete.

--scopes=[SCOPES,…]

Folder or project on which this policy is applicable. You can specify only onefolder or project as the scope and the scope must exist within the specifiedorganization. If you don't specify a scope, the policy applies to the entireorganization.

Run$gcloud help for details.