gcloud alpha pam entitlements

NAME
gcloud alpha pam entitlements - manage Privileged Access Manager entitlements
SYNOPSIS
gcloud alpha pam entitlementsCOMMAND[GCLOUD_WIDE_FLAG …]
DESCRIPTION
(ALPHA) Thegcloud pam entitlementscommand group lets you manage Privileged Access Manager (PAM) entitlements.
EXAMPLES
To create a new entitlement with a name ofsample-entitlement, in aproject namedsample-project, in locationglobal, andthe entitlement configuration stored in a file namedsample-entitlement.yaml, run:
gcloudalphapamentitlementscreatesample-entitlement--project=sample-project--location=global--entitlement-file=sample-entitlement.yaml

To create a new entitlement with a name ofsample-entitlement, in afolder with IDFOLDER_ID, in locationglobal, and the entitlement configuration stored in a file namedsample-entitlement.yaml, run:

gcloudalphapamentitlementscreatesample-entitlement--folder=FOLDER_ID--location=global--entitlement-file=sample-entitlement.yaml

To create a new entitlement with a name ofsample-entitlement, inan organization with IDORGANIZATION_ID, inlocationglobal, and the entitlement configuration stored in a filenamedsample-entitlement.yaml, run:

gcloudalphapamentitlementscreatesample-entitlement--organization=ORGANIZATION_ID--location=global--entitlement-file=sample-entitlement.yaml

To update an entitlement with a name ofsample-entitlement, in aproject namedsample-project, in locationglobal, andthe new entitlement configuration stored in a file namedsample-entitlement.yaml, run:

gcloudalphapamentitlementsupdatesample-entitlement--project=sample-project--location=global--entitlement-file=sample-entitlement.yaml

To update an entitlement with a name ofsample-entitlement, in afolder with IDFOLDER_ID, in locationglobal, and the new entitlement configuration stored in a filenamedsample-entitlement.yaml, run:

gcloudalphapamentitlementsupdatesample-entitlement--folder=FOLDER_ID--location=global--entitlement-file=sample-entitlement.yaml

To update an entitlement with a name ofsample-entitlement, in anorganization with IDORGANIZATION_ID, inlocationglobal, and the new entitlement configuration stored in afile namedsample-entitlement.yaml, run:

gcloudalphapamentitlementsupdatesample-entitlement--organization=ORGANIZATION_ID--location=global--entitlement-file=sample-entitlement.yaml

To describe an entitlement with a name ofsample-entitlement, in aproject namedsample-project, and in locationglobal,run:

gcloudalphapamentitlementsdescribesample-entitlement--project=sample-project--location=global

To describe an entitlement with a name ofsample-entitlement, in afolder with IDFOLDER_ID, and in locationglobal, run:

gcloudalphapamentitlementsdescribesample-entitlement--folder=FOLDER_ID--location=global

To describe an entitlement with a name ofsample-entitlement, in anorganization with IDORGANIZATION_ID, andin locationglobal, run:

gcloudalphapamentitlementsdescribesample-entitlement--organization=ORGANIZATION_ID--location=global

To search for and list all entitlements for which you are a requester, in aproject namedsample-project, and in locationglobal,run:

gcloudalphapamentitlementssearch--project=sample-project--location=global--caller-access-type=grant-requester

To search for and list all entitlements for which you are an approver, in aproject namedsample-project, and in locationglobal,run:

gcloudalphapamentitlementssearch--project=sample-project--location=global--caller-access-type=grant-approver

To search for and list all entitlements for which you are a requester, in afolder with IDFOLDER_ID, and in locationglobal, run:

gcloudalphapamentitlementssearch--folder=FOLDER_ID--location=global--caller-access-type=grant-requester

To search for and list all entitlements for which you are an approver, in afolder with IDFOLDER_ID, and in locationglobal, run:

gcloudalphapamentitlementssearch--folder=FOLDER_ID--location=global--caller-access-type=grant-approver

To search for and list all entitlements for which you are a requester, in anorganization with IDORGANIZATION_ID, andin locationglobal, run:

gcloudalphapamentitlementssearch--organization=ORGANIZATION_ID--location=global--caller-access-type=grant-requester

To search for and list all entitlements for which you are an approver, in anorganization with IDORGANIZATION_ID, andin locationglobal, run:

gcloudalphapamentitlementssearch--organization=ORGANIZATION_ID--location=global--caller-access-type=grant-approver

To list all entitlements in a project namedsample-project and inlocationglobal, run:

gcloudalphapamentitlementslist--project=sample-project--location=global

To list all entitlements in a folder with IDFOLDER_ID and in locationglobal, run:

gcloudalphapamentitlementslist--folder=FOLDER_ID--location=global

To list all entitlements in an organization with IDORGANIZATION_ID and in locationglobal, run:

gcloudalphapamentitlementslist--organization=ORGANIZATION_ID--location=global

To delete an entitlement with a name ofsample-entitlement, in aproject namedsample-project, and in locationglobal,run:

gcloudalphapamentitlementsdeletesample-entitlement--project=sample-project--location=global

To delete an entitlement with a name ofsample-entitlement, in afolder with IDFOLDER_ID, and in locationglobal, run:

gcloudalphapamentitlementsdeletesample-entitlement--folder=FOLDER_ID--location=global

To delete an entitlement with a name ofsample-entitlement, in anorganization with IDORGANIZATION_ID, andin locationglobal, run:

gcloudalphapamentitlementsdeletesample-entitlement--organization=ORGANIZATION_ID--location=global

To export an entitlement with a name ofsample-entitlement, in aproject namedsample-project, and in locationglobalto a local YAML file namedsample-entitlement.yaml, run:

gcloudalphapamentitlementsexportsample-entitlement--project=sample-project--location=global--destination=sample-entitlement.yaml

To export an entitlement with a name ofsample-entitlement, in afolder with IDFOLDER_ID, and in locationglobal to a local YAML file namedsample-entitlement.yaml, run:

gcloudalphapamentitlementsexportsample-entitlement--folder=FOLDER_ID--location=global--destination=sample-entitlement.yaml

To export an entitlement with a name ofsample-entitlement, in anorganization with IDORGANIZATION_ID, andin locationglobal to a local YAML file namedsample-entitlement.yaml, run:

gcloudalphapamentitlementsexportsample-entitlement--organization=ORGANIZATION_ID--location=global--destination=sample-entitlement.yaml
GCLOUD WIDE FLAGS
These flags are available to all commands:--help.

Run$gcloud help for details.

COMMANDS
COMMAND is one of the following:
create
(ALPHA) Create a new Privileged Access Manager (PAM) entitlement.
delete
(ALPHA) Delete a Privileged Access Manager (PAM) entitlement.
describe
(ALPHA) Show details of a Privileged Access Manager (PAM)entitlement.
export
(ALPHA) Export a Privileged Access Manager (PAM) entitlement into alocal YAML file.
list
(ALPHA) List all Privileged Access Manager (PAM) entitlements undera parent.
search
(ALPHA) Search and list all Privileged Access Manager (PAM)entitlements in a parent for which you are a requester/approver.
update
(ALPHA) Update an existing Privileged Access Manager (PAM)entitlement.
NOTES
This command is currently in alpha and might change without notice. If thiscommand fails with API permission errors despite specifying the correct project,you might be trying to access an API with an invitation-only early accessallowlist. These variants are also available:
gcloudpamentitlements
gcloudbetapamentitlements

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-05-07 UTC.