gcloud-help/gcloud/access-context-manager/levels/create

NAME
    gcloud access-context-manager levels create - create a new access level

SYNOPSIS
    gcloud access-context-manager levels create (LEVEL : --policy=POLICY)
        --title=TITLE
        (--custom-level-spec=CUSTOM_LEVEL_SPEC
          | [--basic-level-spec=BASIC_LEVEL_SPEC
          : --combine-function=COMBINE_FUNCTION; default="and"]) [--async]
        [--description=DESCRIPTION] [GCLOUD_WIDE_FLAG ...]

DESCRIPTION
    Create a new access level in a given access policy.

POSITIONAL ARGUMENTS
     Level resource - The access level to create. The arguments in this group
     can be used to specify the attributes of this resource.

     This must be specified.

       LEVEL
          ID of the level or fully qualified identifier for the level.

          To set the level attribute:
          ▸ provide the argument level on the command line.

          This positional argument must be specified if any of the other
          arguments in this group are specified.

       --policy=POLICY
          The ID of the access policy.

          To set the policy attribute:
          ▸ provide the argument level on the command line with a fully
            specified name;
          ▸ provide the argument --policy on the command line;
          ▸ set the property access_context_manager/policy;
          ▸ automatically, if the current account belongs to an organization
            with exactly one access policy..

REQUIRED FLAGS
     --title=TITLE
        Short human-readable title of the access level.

     Level specification.

     Exactly one of these must be specified:

       Custom level specification.

         --custom-level-spec=CUSTOM_LEVEL_SPEC
            Path to a file representing an expression that represents an access
            level.

            The expression is in the Common Expression Language (CEL) format.
            For example:

                  expression: "origin.region_code in ['US', 'CA']"

       Basic level specification.

         --basic-level-spec=BASIC_LEVEL_SPEC
            Path to a file containing a list of basic access level conditions.

            An access level condition file is a YAML-formatted list of
            conditions, which are YAML objects representing a Condition as
            described in the API reference. For example:

                 - ipSubnetworks:
                   - 162.222.181.197/24
                   - 2001:db8::/48
                 - members:
                   - user:user@example.com

            This flag argument must be specified if any of the other arguments
            in this group are specified.

         --combine-function=COMBINE_FUNCTION; default="and"
            For a basic level, determines how conditions are combined.
            COMBINE_FUNCTION must be one of: and, or.

OPTIONAL FLAGS
     --async
        Return immediately, without waiting for the operation in progress to
        complete.

     --description=DESCRIPTION
        Long-form description of access level.

GCLOUD WIDE FLAGS
    These flags are available to all commands: --access-token-file, --account,
    --billing-project, --configuration, --flags-file, --flatten, --format,
    --help, --impersonate-service-account, --log-http, --project, --quiet,
    --trace-token, --user-output-enabled, --verbosity.

    Run $ gcloud help for details.

API REFERENCE
    This command uses the accesscontextmanager/v1 API. The full documentation
    for this API can be found at:
    https://cloud.google.com/access-context-manager/docs/reference/rest/

NOTES
    These variants are also available:

        $ gcloud alpha access-context-manager levels create

        $ gcloud beta access-context-manager levels create