NAME
    gcloud alpha pam entitlements - manage Privileged Access Manager
        Entitlements

SYNOPSIS
    gcloud alpha pam entitlements COMMAND [GCLOUD_WIDE_FLAG ...]

DESCRIPTION
    (ALPHA) The gcloud pam entitlements command group lets you manage
    Privileged Access Manager (PAM) Entitlements.

EXAMPLES
    To create a new entitlement with the name sample-entitlement, under a
    project sample-project, location global and the entitlement body present in
    the sample-entitlement.yaml file, run:

        $ gcloud alpha pam entitlements create sample-entitlement \
          --project=sample-project --location=global \
          --entitlement-file=sample-entitlement.yaml

    To create a new entitlement with the name sample-entitlement, under a
    folder sample-folder, location global and the entitlement body present in
    the sample-entitlement.yaml file, run:

        $ gcloud alpha pam entitlements create sample-entitlement \
          --folder=sample-folder --location=global \
          --entitlement-file=sample-entitlement.yaml

    To create a new entitlement with the name sample-entitlement, under an
    organization sample-organization, location global and the entitlement body
    present in the sample-entitlement.yaml file, run:

        $ gcloud alpha pam entitlements create sample-entitlement \
          --organization=sample-organization --location=global \
          --entitlement-file=sample-entitlement.yaml

    To update an entitlement with the full name ENTITLEMENT_NAME and the new
    entitlement body present in the sample-entitlement.yaml file, run:

        $ gcloud alpha pam entitlements update ENTITLEMENT_NAME \
          --entitlement-file=sample-entitlement.yaml

    To describe an entitlement with the full name ENTITLEMENT_NAME, run:

        $ gcloud alpha pam entitlements describe ENTITLEMENT_NAME

    To search and list all entitlements under a project sample-project and
    location global for which you are a requester, run:

        $ gcloud alpha pam entitlements search --project=sample-project \
          --location=global --caller-access-type=grant-requester

    To search and list all entitlements under a project sample-project and
    location global for which you are an approver, run:

        $ gcloud alpha pam entitlements search --project=sample-project \
          --location=global --caller-access-type=grant-approver

    To search and list all entitlements under a folder sample-folder and
    location global for which you are a requester, run:

        $ gcloud alpha pam entitlements search --folder=sample-folder \
          --location=global --caller-access-type=grant-requester

    To search and list all entitlements under a folder sample-folder and
    location global for which you are an approver, run:

        $ gcloud alpha pam entitlements search --folder=sample-folder \
          --location=global --caller-access-type=grant-approver

    To search and list all entitlements under an organization
    sample-organization and location global for which you are a requester, run:

        $ gcloud alpha pam entitlements search \
          --organization=sample-organization --location=global \
          --caller-access-type=grant-requester

    To search and list all entitlements under an organization
    sample-organization and location global for which you are an approver, run:

        $ gcloud alpha pam entitlements search \
          --organization=sample-organization --location=global \
          --caller-access-type=grant-approver

    To list all entitlement under a project sample-project and location global,
    run:

        $ gcloud alpha pam entitlements list --project=sample-project \
          --location=global

    To list all entitlement under a folder sample-folder and location global,
    run:

        $ gcloud alpha pam entitlements list --folder=sample-folder \
          --location=global

    To list all entitlement under an organization sample-organization and
    location global, run:

        $ gcloud alpha pam entitlements list \
          --organization=sample-organization --location=global

    To delete an entitlement with the full name ENTITLEMENT_NAME along with all
    grants under it, run:

        $ gcloud alpha pam entitlements delete ENTITLEMENT_NAME

    To export an entitlement with the full name ENTITLEMENT_NAME to a local
    YAML file entitlement-file.yaml, run:

        $ gcloud alpha pam entitlements export ENTITLEMENT_NAME \
          --destination=entitlement-file.yaml

GCLOUD WIDE FLAGS
    These flags are available to all commands: --help.

    Run $ gcloud help for details.

COMMANDS
    COMMAND is one of the following:

     create
        (ALPHA) Create a new Privileged Access Manager (PAM) entitlement.

     delete
        (ALPHA) Delete a Privileged Access Manager (PAM) entitlement.

     describe
        (ALPHA) Show details of a Privileged Access Manager (PAM) entitlement.

     export
        (ALPHA) Export a Privileged Access Manager (PAM) entitlement into a
        local YAML file.

     list
        (ALPHA) List all Privileged Access Manager (PAM) entitlements under a
        parent.

     search
        (ALPHA) Search and list all Privileged Access Manager (PAM)
        entitlements under a parent for which you are either a requester or an
        approver.

     update
        (ALPHA) Update an existing Privileged Access Manager (PAM) entitlement.

NOTES
    This command is currently in alpha and might change without notice. If this
    command fails with API permission errors despite specifying the correct
    project, you might be trying to access an API with an invitation-only early
    access allowlist. This variant is also available:

        $ gcloud beta pam entitlements

