gcloud alpha active-directory domains migration enable - enable domain migration permissions on a Managed Microsoft AD domain
gcloud alpha active-directory domains migration enable DOMAIN --onprem-domains=[ONPREM_DOMAINS,...] [--async] [--disable-sid-filtering-domains=[DISABLE_SID_FILTERING_DOMAINS,...]] [GCLOUD_WIDE_FLAG ...]
(ALPHA) Enable domain migration permissions on a Managed Microsoft AD domain.
This command can fail for the following reasons:
The specified domain doesn't exist.
The specified domain is either being created or updated.
The active account doesn't have permission to enable migration permissions on the specified domain.
The following command enables migration permissions on the domain my-domain.com in project my-project for two on-premises domains onprem-domain-1.com and onprem-domain-2.com, with SID Filtering disabled for onprem-domain-1.com.
$ gcloud alpha active-directory domains migration enable \ my-domain.com \ --onprem-domains=onprem-domain-1.com,onprem-domain-2.com \ --disable-sid-filtering-domains=onprem-domain-1.com \ --project=my-project --async
- Domain resource - Name of the Managed Microsoft AD domain on which you want to
enable migration permissions. This represents a Cloud resource. (NOTE) Some attributes are not given arguments in this group but can be set in other ways. To set the project attribute:
- —
provide the argument domain on the command line with a fully specified name;
- —
set the property core/project;
- —
provide the argument --project on the command line.
This must be specified.
- DOMAIN
ID of the domain or fully qualified identifier for the domain. To set the domain attribute:
provide the argument domain on the command line.
- --onprem-domains=[ONPREM_DOMAINS,...]
List of trusted domains that are being migrated.
- --async
Return immediately, without waiting for the operation in progress to complete.
- --disable-sid-filtering-domains=[DISABLE_SID_FILTERING_DOMAINS,...]
List of migrating domains on which SID Filtering must be disabled. The list is empty by default.
These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
This command uses the managedidentities/v1alpha1 API. The full documentation for this API can be found at: https://cloud.google.com/managed-microsoft-ad/
This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early access allowlist. This variant is also available:
$ gcloud beta active-directory domains migration enable