gcloud alpha pam grants create - create a new Privileged Access Manager grant

gcloud alpha pam grants create--requested-duration=REQUESTED_DURATION(--entitlement=ENTITLEMENT :--folder=FOLDER--location=LOCATION--organization=ORGANIZATION)[--additional-email-recipients=[ADDITIONAL_EMAIL_RECIPIENTS,…]][--justification=JUSTIFICATION][--requested-access-from-file=[REQUESTED_ACCESS_FROM_FILE,…]    |--requested-resources=[REQUESTED_RESOURCES,…]][GCLOUD_WIDE_FLAG …]

--requested-duration=REQUESTED_DURATION

Duration of the grant being created.

Entitlement resource - Entitlement the grant is to be created against. Thearguments in this group can be used to specify the attributes of this resource.(NOTE) Some attributes are not given arguments in this group but can be set inother ways.

To set theproject attribute:

• provide the argument--entitlement on the command line with a fullyspecified name;
• provide the argument--project on the command line;
• set the propertycore/project. This resource can be one of thefollowing types: [privilegedaccessmanager.projects.locations.entitlements,privilegedaccessmanager.folders.locations.entitlements,privilegedaccessmanager.organizations.locations.entitlements].

This must be specified.

--entitlement=ENTITLEMENT

ID of the entitlement or fully qualified identifier for the entitlement.

To set theentitlement attribute:

• provide the argument--entitlement on the command line.

This flag argument must be specified if any of the other arguments in this groupare specified.

--folder=FOLDER

The name of the folder

To set thefolder attribute:

• provide the argument--entitlement on the command line with a fullyspecified name;
• provide the argument--folder on the command line. Must bespecified for resource of type[privilegedaccessmanager.folders.locations.entitlements].

--location=LOCATION

The resource location

To set thelocation attribute:

• provide the argument--entitlement on the command line with a fullyspecified name;
• provide the argument--location on the command line.

--organization=ORGANIZATION

The name of the organization

To set theorganization attribute:

• provide the argument--entitlement on the command line with a fullyspecified name;
• provide the argument--organization on the command line. Must bespecified for resource of type[privilegedaccessmanager.organizations.locations.entitlements].

--additional-email-recipients=[ADDITIONAL_EMAIL_RECIPIENTS,…]

Additional email addresses that are notified for all actions performed on thegrant.

--justification=JUSTIFICATION

Justification for the grant.

Specify the grant's scope using either high-level resource or a fine-grainedscope configuration.At most one of these can be specified:

--requested-access-from-file=[REQUESTED_ACCESS_FROM_FILE,…]

Path to a YAML file defining the fine-grained scope for the grant.

--requested-resources=[REQUESTED_RESOURCES,…]

The Google Cloud resources to be granted access to. Format:{resource-type}/{resource_id}. Example:projects/{project_id} orfolders/{folder_id} ororganizations/{organization_id}. This command currently acceptsonly one resource.

Run$gcloud help for details.