gcloud alpha active-directory domains create

NAME
gcloud alpha active-directory domains create - create a Managed Microsoft AD domain
SYNOPSIS
gcloud alpha active-directory domains createDOMAIN--region=[REGION,…]--reserved-ip-range=RESERVED_IP_RANGE[--admin-name=ADMIN_NAME][--async][--authorized-networks=[AUTHORIZED_NETWORKS,…]][--enable-audit-logs][--labels=[KEY=VALUE,…]][GCLOUD_WIDE_FLAG …]
DESCRIPTION
(ALPHA) Create a new Managed Microsoft AD domain with the givenname using Google Cloud's Managed Service for Microsoft Active Directory.

This command can fail for the following reasons:

  • An AD domain with the same name already exists.
  • The active account does not have permission to create AD domains.
  • There is an overlap between the provided CIDR range and authorized network'sCIDR.
  • A valid region was not provided.
EXAMPLES
The following command creates an AD domain with the namemy-domain.com in regionus-central1, a network peeringtomy-network and consuming the IP address range10.172.0.0/24.
gcloudalphaactive-directorydomainscreatemy-domain.com--region=us-central1--reserved-ip-range="10.172.0.0/24"--authorized-networks=projects/my-project/global/networks/my-network
POSITIONAL ARGUMENTS
Domain resource - Name of the managed Managed Microsoft AD domain you want tocreate. This represents a Cloud resource. (NOTE) Some attributes are not givenarguments in this group but can be set in other ways.

To set theproject attribute:

  • provide the argumentdomain on the command line with a fullyspecified name;
  • provide the argument--project on the command line;
  • set the propertycore/project.

This must be specified.

DOMAIN
ID of the domain or fully qualified identifier for the domain.

To set thedomain attribute:

  • provide the argumentdomain on the command line.
REQUIRED FLAGS
--region=[REGION,…]
Google Compute Engine region in which to provision domain controllers.
--reserved-ip-range=RESERVED_IP_RANGE
Classless Inter-Domain Routing range of internal addresses that are reserved forthis domain.
OPTIONAL FLAGS
--admin-name=ADMIN_NAME
Name of the administrator that may be used to perform Active Directoryoperations. This is a delegated administrator account provisioned by ourservice. If left unspecifiedMIAdmin will be used. This isdifferent from both the domain administrator and the Directory Services RestoreMode (DSRM) administrator.
--async
Return immediately, without waiting for the operation in progress to complete.
--authorized-networks=[AUTHORIZED_NETWORKS,…]
Names of the Google Compute Engine networks to which the domain will beconnected.
--enable-audit-logs
If specified, Active Directory data audit logs are enabled for the domain.
--labels=[KEY=VALUE,…]
List of label KEY=VALUE pairs to add.
GCLOUD WIDE FLAGS
These flags are available to all commands:--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.

Run$gcloud help for details.

API REFERENCE
This command uses themanagedidentities/v1alpha1 API. The fulldocumentation for this API can be found at:https://cloud.google.com/managed-microsoft-ad/
NOTES
This command is currently in alpha and might change without notice. If thiscommand fails with API permission errors despite specifying the correct project,you might be trying to access an API with an invitation-only early accessallowlist. These variants are also available:
gcloudactive-directorydomainscreate
gcloudbetaactive-directorydomainscreate

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-05-07 UTC.