gcloud: Wed May 1 09:26:55 UTC 2024

2026-07-19 07:15:23 +00:00 · 2024-05-01 09:26:55 +00:00 · 2024-05-01 09:26:55 +00:00 · 48fac7efd4
commit 48fac7efd4
parent 3740758467
454 changed files with 11765 additions and 12790 deletions
--- a/gcloud/alpha/pam/grants/help
+++ b/gcloud/alpha/pam/grants/help
@ -0,0 +1,104 @@
+NAME
+    gcloud alpha pam grants - manage Privileged Access Manager Grants
+
+SYNOPSIS
+    gcloud alpha pam grants COMMAND [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) The gcloud pam grants command group lets you manage Privileged
+    Access Manager (PAM) Grants.
+
+EXAMPLES
+    To create a new grant under an entitlement with the full name
+    ENTITLEMENT_NAME, with requested duration 1 hour 30 minutes, a
+    justification some justification and two additional email recipients
+    abc@example.com and xyz@example.com, run:
+
+        $ gcloud alpha pam grants create --entitlement=ENTITLEMENT_NAME \
+          --requested-duration=5400s \
+          --justification="some justification" \
+          --additional-email-recipients=abc@example.com,xyz@example.com
+
+    To describe a grant with the full name GRANT_NAME, run:
+
+        $ gcloud alpha pam grants describe GRANT_NAME
+
+    To list all grants under an entitlement with the full name
+    ENTITLEMENT_NAME, run:
+
+        $ gcloud alpha pam grants list --entitlement=ENTITLEMENT_NAME
+
+    To deny a grant with the full name GRANT_NAME and a reason denial reason,
+    run:
+
+        $ gcloud alpha pam grants deny GRANT_NAME --reason="denial reason"
+
+    To approve a grant with the full name GRANT_NAME and a reason approval
+    reason, run:
+
+        $ gcloud alpha pam grants approve GRANT_NAME \
+          --reason="approval reason"
+
+    To revoke a grant with the full name GRANT_NAME and a reason revoke reason,
+    run:
+
+        $ gcloud alpha pam grants revoke GRANT_NAME --reason="revoke reason"
+
+    To search and list all grants under an entitlement with the full name
+    ENTITLEMENT_NAME, which you had created, run:
+
+        $ gcloud alpha pam grants search --entitlement=ENTITLEMENT_NAME \
+          --caller-relationship=had-created
+
+    To search and list all grants under an entitlement with the full name
+    ENTITLEMENT_NAME, which you had approved or denied, run:
+
+        $ gcloud alpha pam grants search --entitlement=ENTITLEMENT_NAME \
+          --caller-relationship=had-approved
+
+    To search and list all grants under an entitlement with the full name
+    ENTITLEMENT_NAME, which you can approve, run:
+
+        $ gcloud alpha pam grants search --entitlement=ENTITLEMENT_NAME \
+          --caller-relationship=can-approve
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     approve
+        (ALPHA) Approve a Privileged Access Manager (PAM) grant.
+
+     create
+        (ALPHA) Create a new Privileged Access Manager (PAM) grant.
+
+     deny
+        (ALPHA) Deny a Privileged Access Manager (PAM) grant.
+
+     describe
+        (ALPHA) Show details of a Privileged Access Manager (PAM) grant.
+
+     list
+        (ALPHA) List all Privileged Access Manager (PAM) grants under an
+        entitlement.
+
+     revoke
+        (ALPHA) Revoke a Privileged Access Manager (PAM) grant.
+
+     search
+        (ALPHA) Search and list all Privileged Access Manager (PAM) grants
+        under an entitlement which you had created, had approved or can
+        approve.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. This variant is also available:
+
+        $ gcloud beta pam grants
+