gcloud iam workforce-pools create

NAME
gcloud iam workforce-pools create - create a new workforce pool under an organization
SYNOPSIS
gcloud iam workforce-pools create(WORKFORCE_POOL :--location=LOCATION)--organization=ORGANIZATION[--allowed-services=[domain=DOMAIN]][--async][--description=DESCRIPTION][--disable-programmatic-signin][--disabled][--display-name=DISPLAY_NAME][--session-duration=SESSION_DURATION][GCLOUD_WIDE_FLAG …]
DESCRIPTION
Creates a workforce pool under an organization given a valid organization ID.
EXAMPLES
The following command creates a workforce pool with IDmy-workforce-pool in the organization12345:
gcloudiamworkforce-poolscreatemy-workforce-pool--organization=12345

The following command creates a workforce pool with IDmy-workforce-pool with explicit values for all required andoptional parameters:

gcloudiamworkforce-poolscreatemy-workforce-pool--organization=12345--location=global--display-name="My Workforce Pool"--description="My workforce pooldescription."--session-duration="7200s"--disabled
POSITIONAL ARGUMENTS
Workforce pool resource - The workforce pool to create. The arguments in thisgroup can be used to specify the attributes of this resource.

This must be specified.

WORKFORCE_POOL
ID of the workforce pool or fully qualified identifier for the workforce pool.

To set theworkforce_pool attribute:

  • provide the argumentworkforce_pool on the command line.

This positional argument must be specified if any of the other arguments in thisgroup are specified.

--location=LOCATION
The location for the workforce pool.

To set thelocation attribute:

  • provide the argumentworkforce_pool on the command line with afully specified name;
  • provide the argument--location on the command line.
REQUIRED FLAGS
--organization=ORGANIZATION
The parent organization of the workforce pool to create.
OPTIONAL FLAGS
--allowed-services=[domain=DOMAIN]
Services allowed for web sign-in with the workforce pool. The flag acceptsmultiple values with the key asdomain and value as the domain ofthe service allowed for web sign-in. If not set, by default all the services areallowed.
--async
Return immediately, without waiting for the operation in progress to complete.
--description=DESCRIPTION
A description for the workforce pool. Cannot exceed 256 characters in length.
--disable-programmatic-signin
Disable programmatic sign-in for workforce pool users.
--disabled
Whether or not the workforce pool is disabled.
--display-name=DISPLAY_NAME
A display name for the workforce pool. Cannot exceed 32 characters in length.
--session-duration=SESSION_DURATION
How long the Google Cloud access tokens, console sign-in sessions, and gcloudsign-in sessions from this workforce pool are valid. Must be greater than 15minutes (900s) and less than 12 hours (43200s). If not configured, mintedcredentials will have a default duration of one hour (3600s).
GCLOUD WIDE FLAGS
These flags are available to all commands:--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.

Run$gcloud help for details.

NOTES
These variants are also available:
gcloudalphaiamworkforce-poolscreate
gcloudbetaiamworkforce-poolscreate

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-05-07 UTC.