gcloud alpha pam settings

NAME
gcloud alpha pam settings - manage Privileged Access Manager Settings
SYNOPSIS
gcloud alpha pam settingsCOMMAND[GCLOUD_WIDE_FLAG …]
DESCRIPTION
(ALPHA) Thegcloud pam settings command group lets youmanage Privileged Access Manager (PAM) settings.
EXAMPLES
To describe the PAM Settings on a project namedsample-project andin locationglobal, run:
gcloudalphapamsettingsdescribe--project=sample-project--location=global

To describe the PAM Settings on a folder with IDFOLDER_ID and in locationglobal, run:

gcloudalphapamsettingsdescribe--folder=FOLDER_ID--location=global

To describe the PAM Settings on an organization with IDORGANIZATION_ID and in locationglobal, run:

gcloudalphapamsettingsdescribe--organization=ORGANIZATION_ID--location=global

To describe the effective PAM Settings on a project namedsample-project and in locationglobal, run:

gcloudalphapamsettingsdescribe-effective--project=sample-project--location=global

To describe the effective PAM Settings on a folder with IDFOLDER_ID and in locationglobal, run:

gcloudalphapamsettingsdescribe-effective--folder=FOLDER_ID--location=global

To describe the effective PAM Settings on an organization with IDORGANIZATION_ID and in locationglobal, run:

gcloudalphapamsettingsdescribe-effective--organization=ORGANIZATION_ID--location=global

To export the PAM Settings configured on a project namedsample-project, and in locationglobal to a local YAMLfile namedpam-settings.yaml, run:

gcloudalphapamsettingsexport--project=sample-project--location=global--destination=pam-settings.yaml

To export the PAM Settings configured on a folder with IDFOLDER_ID, and in locationglobal to a local YAML file namedpam-settings.yaml,run:

gcloudalphapamsettingsexport--folder=FOLDER_ID--location=global--destination=pam-settings.yaml

To export the PAM settings configured for an organization with IDORGANIZATION_ID in locationglobal to a local YAMLfile namedpam-settings.yaml, run:

gcloudalphapamsettingsexport--organization=ORGANIZATION_ID--location=global--destination=pam-settings.yaml

To update the PAM Settings on a project namedsample-project and inlocationglobal, and the new updated settings configuration storedin a file namedpam-settings.yaml, run:

gcloudalphapamsettingsupdate--project=sample-project--location=global--settings-file=pam-settings.yaml

To update the PAM Settings on a folder with IDFOLDER_ID and in locationglobal, and the new updated settings configuration stored in a filenamedpam-settings.yaml, run:

gcloudalphapamsettingsupdate--folder=FOLDER_ID--location=global--settings-file=pam-settings.yaml

To update the PAM Settings on an organization with IDORGANIZATION_ID and in locationglobal, and the new updated settings configuration stored in a filenamedpam-settings.yaml, run:

gcloudalphapamsettingsupdate--organization=ORGANIZATION_ID--location=global--settings-file=pam-settings.yaml
GCLOUD WIDE FLAGS
These flags are available to all commands:--help.

Run$gcloud help for details.

COMMANDS
COMMAND is one of the following:
describe
(ALPHA) Show details of Privileged Access Manager (PAM) settings ona resource.
describe-effective
(ALPHA) Show effective Privileged Access Manager (PAM) settings ona resource.
export
(ALPHA) Export Privileged Access Manager (PAM) settings configuredon a project, folder, or organization to a local YAML file.
update
(ALPHA) Update Privileged Access Manager (PAM) settings configuredon a project, folder, or organization.
NOTES
This command is currently in alpha and might change without notice. If thiscommand fails with API permission errors despite specifying the correct project,you might be trying to access an API with an invitation-only early accessallowlist. This variant is also available:
gcloudbetapamsettings

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-09-30 UTC.