NAME

gcloud access-context-manager levels update - update an existing access level

SYNOPSIS

gcloud access-context-manager levels update (LEVEL : --policy=POLICY) [--description=DESCRIPTION] [--title=TITLE] [--custom-level-spec=CUSTOM_LEVEL_SPEC | --basic-level-spec=BASIC_LEVEL_SPEC --combine-function=COMBINE_FUNCTION] [GCLOUD_WIDE_FLAG ...]

DESCRIPTION

Update an existing access level.

POSITIONAL ARGUMENTS

Level resource - The access level to update. The arguments in this group can be

used to specify the attributes of this resource.

This must be specified.

LEVEL

ID of the level or fully qualified identifier for the level. To set the level attribute:

  • provide the argument level on the command line.

This positional argument must be specified if any of the other arguments in this group are specified.

--policy=POLICY

The ID of the access policy. To set the policy attribute:

  • provide the argument level on the command line with a fully specified name;

  • provide the argument --policy on the command line;

  • set the property access_context_manager/policy.

FLAGS

--description=DESCRIPTION

Long-form description of access level.

--title=TITLE

Short human-readable title of the access level.

Level specification.

At most one of these can be specified:

Custom level specification.
--custom-level-spec=CUSTOM_LEVEL_SPEC

Path to a file representing an expression for an access level.

The expression is in the Common Expression Langague (CEL) format.For example:

expression: "origin.region_code in ['US', 'CA']"

Basic level specification.
--basic-level-spec=BASIC_LEVEL_SPEC

Path to a file containing a list of basic access level conditions.

An access level condition file is a YAML-formatted list of conditions,which are YAML objects representing a Condition as described in the API reference. For example:

- ipSubnetworks: - 162.222.181.197/24 - 2001:db8::/48 - members: - user:user@example.com

--combine-function=COMBINE_FUNCTION

For a basic level, determines how conditions are combined. COMBINE_FUNCTION must be one of: and, or.

GCLOUD WIDE FLAGS

These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.

NOTES

These variants are also available:

$ gcloud alpha access-context-manager levels update

$ gcloud beta access-context-manager levels update