NAME
    gcloud access-context-manager cloud-bindings create - create cloud access
        bindings for a specific group

SYNOPSIS
    gcloud access-context-manager cloud-bindings create --group-key=GROUP_KEY
        [--binding-file=YAML_FILE] [--dry-run-level=[DRY_RUN_LEVEL,...]]
        [--level=[LEVEL,...]] [--organization=ORGANIZATION]
        [GCLOUD_WIDE_FLAG ...]

DESCRIPTION
    Create a new cloud access binding. The access level will be globally bound
    with the group.

    Allowlisted Applications can be specified to limit the scope of the cloud
    access binding in the 'binding-file'. In such case, the access level
    specified in the yaml file will be bound with the group and the allowlisted
    applications.

EXAMPLES
    To create a new cloud access binding, run:

        $ gcloud access-context-manager cloud-bindings create \
            --group-key=my-group-key \
            --level=accessPolicies/123/accessLevels/abc

    To create a new cloud access binding for particular applications using a
    yaml file, run:

        $ gcloud access-context-manager cloud-bindings create \
            --group-key=my-group-key --organization='1234567890' \
            --binding-file='binding.yaml'

    To create a new global cloud access binding, and for particular
    applications using a yaml file, run:

        $ gcloud access-context-manager cloud-bindings create \
            --group-key=my-group-key \
            --level=accessPolicies/123/accessLevels/abc \
            --organization='1234567890' --binding-file='binding.yaml'

    To create a new cloud access binding for the dry run access level, run:

        $ gcloud access-context-manager cloud-bindings create \
            --group-key=my-group-key \
            --level=accessPolicies/123/accessLevels/abc \
            --dry-run-level=accessPolicies/123/accessLevels/def

REQUIRED FLAGS
     --group-key=GROUP_KEY
        Google Group id whose members are subject to the restrictions of this
        binding.

OPTIONAL FLAGS
     --binding-file=YAML_FILE
        Path to the file that contains a Google Cloud Platform user access
        binding.

        This file contains a YAML-compliant object representing a
        GcpUserAccessBinding (as described in the API reference) containing
        ScopedAccessSettings only. No other binding fields are allowed.

     --dry-run-level=[DRY_RUN_LEVEL,...]
        The dry run access level that binds to the given group. The dry run
        access level will be evaluated but won't be enforced. Denial on dry run
        access level will be logged. The input must be the full identifier of
        an access level, such as accessPolicies/123/accessLevels/new-def.

     --level=[LEVEL,...]
        The access level that binds to the given group. The input must be the
        full identifier of an access level, such as
        accessPolicies/123/accessLevels/abc.

     --organization=ORGANIZATION
        Parent organization for this binding.

GCLOUD WIDE FLAGS
    These flags are available to all commands: --access-token-file, --account,
    --billing-project, --configuration, --flags-file, --flatten, --format,
    --help, --impersonate-service-account, --log-http, --project, --quiet,
    --trace-token, --user-output-enabled, --verbosity.

    Run $ gcloud help for details.

API REFERENCE
    This command uses the accesscontextmanager/v1 API. The full documentation
    for this API can be found at:
    https://cloud.google.com/access-context-manager/docs/reference/rest/

NOTES
    This variant is also available:

        $ gcloud alpha access-context-manager cloud-bindings create