gcloud alpha pam entitlements

NAME
gcloud alpha pam entitlements - manage Privileged Access Manager entitlements
SYNOPSIS
gcloud alpha pam entitlements COMMAND [GCLOUD_WIDE_FLAG …]
DESCRIPTION
(ALPHA) The gcloud pam entitlements command group lets you manage Privileged Access Manager (PAM) entitlements.
EXAMPLES
To create a new entitlement with a name of sample-entitlement, in a project named sample-project, in location global, and the entitlement configuration stored in a file named sample-entitlement.yaml, run: 
gcloudalphapamentitlementscreatesample-entitlement--project=sample-project--location=global--entitlement-file=sample-entitlement.yaml

To create a new entitlement with a name of sample-entitlement, in a folder with ID FOLDER_ID, in location global, and the entitlement configuration stored in a file named sample-entitlement.yaml, run: 

gcloudalphapamentitlementscreatesample-entitlement--folder=FOLDER_ID--location=global--entitlement-file=sample-entitlement.yaml

To create a new entitlement with a name of sample-entitlement, in an organization with ID ORGANIZATION_ID, in location global, and the entitlement configuration stored in a file named sample-entitlement.yaml, run: 

gcloudalphapamentitlementscreatesample-entitlement--organization=ORGANIZATION_ID--location=global--entitlement-file=sample-entitlement.yaml

To update an entitlement with a name of sample-entitlement, in a project named sample-project, in location global, and the new entitlement configuration stored in a file named sample-entitlement.yaml, run: 

gcloudalphapamentitlementsupdatesample-entitlement--project=sample-project--location=global--entitlement-file=sample-entitlement.yaml

To update an entitlement with a name of sample-entitlement, in a folder with ID FOLDER_ID, in location global, and the new entitlement configuration stored in a file named sample-entitlement.yaml, run: 

gcloudalphapamentitlementsupdatesample-entitlement--folder=FOLDER_ID--location=global--entitlement-file=sample-entitlement.yaml

To update an entitlement with a name of sample-entitlement, in an organization with ID ORGANIZATION_ID, in location global, and the new entitlement configuration stored in a file named sample-entitlement.yaml, run: 

gcloudalphapamentitlementsupdatesample-entitlement--organization=ORGANIZATION_ID--location=global--entitlement-file=sample-entitlement.yaml

To describe an entitlement with a name of sample-entitlement, in a project named sample-project, and in location global, run: 

gcloudalphapamentitlementsdescribesample-entitlement--project=sample-project--location=global

To describe an entitlement with a name of sample-entitlement, in a folder with ID FOLDER_ID, and in location global, run: 

gcloudalphapamentitlementsdescribesample-entitlement--folder=FOLDER_ID--location=global

To describe an entitlement with a name of sample-entitlement, in an organization with ID ORGANIZATION_ID, and in location global, run: 

gcloudalphapamentitlementsdescribesample-entitlement--organization=ORGANIZATION_ID--location=global

To search for and list all entitlements for which you are a requester, in a project named sample-project, and in location global, run: 

gcloudalphapamentitlementssearch --project=sample-project--location=global--caller-access-type=grant-requester

To search for and list all entitlements for which you are an approver, in a project named sample-project, and in location global, run: 

gcloudalphapamentitlementssearch --project=sample-project--location=global--caller-access-type=grant-approver

To search for and list all entitlements for which you are a requester, in a folder with ID FOLDER_ID, and in location global, run: 

gcloudalphapamentitlementssearch --folder=FOLDER_ID--location=global--caller-access-type=grant-requester

To search for and list all entitlements for which you are an approver, in a folder with ID FOLDER_ID, and in location global, run: 

gcloudalphapamentitlementssearch --folder=FOLDER_ID--location=global--caller-access-type=grant-approver

To search for and list all entitlements for which you are a requester, in an organization with ID ORGANIZATION_ID, and in location global, run: 

gcloudalphapamentitlementssearch --organization=ORGANIZATION_ID--location=global--caller-access-type=grant-requester

To search for and list all entitlements for which you are an approver, in an organization with ID ORGANIZATION_ID, and in location global, run: 

gcloudalphapamentitlementssearch --organization=ORGANIZATION_ID--location=global--caller-access-type=grant-approver

To list all entitlements in a project named sample-project and in location global, run: 

gcloudalphapamentitlementslist --project=sample-project--location=global

To list all entitlements in a folder with ID FOLDER_ID and in location global, run: 

gcloudalphapamentitlementslist --folder=FOLDER_ID--location=global

To list all entitlements in an organization with ID ORGANIZATION_ID and in location global, run: 

gcloudalphapamentitlementslist --organization=ORGANIZATION_ID--location=global

To delete an entitlement with a name of sample-entitlement, in a project named sample-project, and in location global, run: 

gcloudalphapamentitlementsdeletesample-entitlement--project=sample-project--location=global

To delete an entitlement with a name of sample-entitlement, in a folder with ID FOLDER_ID, and in location global, run: 

gcloudalphapamentitlementsdeletesample-entitlement--folder=FOLDER_ID--location=global

To delete an entitlement with a name of sample-entitlement, in an organization with ID ORGANIZATION_ID, and in location global, run: 

gcloudalphapamentitlementsdeletesample-entitlement--organization=ORGANIZATION_ID--location=global

To export an entitlement with a name of sample-entitlement, in a project named sample-project, and in location global to a local YAML file named sample-entitlement.yaml, run: 

gcloudalphapamentitlementsexportsample-entitlement--project=sample-project--location=global--destination=sample-entitlement.yaml

To export an entitlement with a name of sample-entitlement, in a folder with ID FOLDER_ID, and in location global to a local YAML file named sample-entitlement.yaml, run: 

gcloudalphapamentitlementsexportsample-entitlement--folder=FOLDER_ID--location=global--destination=sample-entitlement.yaml

To export an entitlement with a name of sample-entitlement, in an organization with ID ORGANIZATION_ID, and in location global to a local YAML file named sample-entitlement.yaml, run: 

gcloudalphapamentitlementsexportsample-entitlement--organization=ORGANIZATION_ID--location=global--destination=sample-entitlement.yaml
GCLOUD WIDE FLAGS
These flags are available to all commands: --help .

Run $ gcloud help for details.

COMMANDS
COMMAND is one of the following:
create
(ALPHA) Create a new Privileged Access Manager (PAM) entitlement.
delete
(ALPHA) Delete a Privileged Access Manager (PAM) entitlement.
describe
(ALPHA) Show details of a Privileged Access Manager (PAM) entitlement.
export
(ALPHA) Export a Privileged Access Manager (PAM) entitlement into a local YAML file.
list
(ALPHA) List all Privileged Access Manager (PAM) entitlements under a parent.
(ALPHA) Search and list all Privileged Access Manager (PAM) entitlements in a parent for which you are a requester/approver.
update
(ALPHA) Update an existing Privileged Access Manager (PAM) entitlement.
NOTES
This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early access allowlist. These variants are also available: 
gcloudpamentitlements 
gcloudbetapamentitlements

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026年05月27日 UTC.