NAME

gcloud resource-manager org-policies deny - add values to an Organization Policy denied_values list policy

SYNOPSIS

gcloud resource-manager org-policies deny ORG_POLICY_ID DENIED_VALUE [DENIED_VALUE ...] (--folder=FOLDER_ID | --organization=ORGANIZATION_ID | --project=PROJECT_ID) [GCLOUD_WIDE_FLAG ...]

DESCRIPTION

Adds one or more values to the specified Organization Policy denied_values list policy associated with the specified resource.

EXAMPLES

The following command adds devEnv and prodEnv to an Organization Policy denied_values list policy for constraint serviceuser.services on project foo-project:

$ gcloud resource-manager org-policies deny serviceuser.services \ --project=foo-project devEnv prodEnv

POSITIONAL ARGUMENTS

ORG_POLICY_ID

The Org Policy constraint name.

DENIED_VALUE [DENIED_VALUE ...]

The values to add to the denied_values list policy.

REQUIRED FLAGS

Resource that is associated with the organization policy.

Exactly one of these must be specified:

--folder=FOLDER_ID

Folder ID.

--organization=ORGANIZATION_ID

Organization ID.

--project=PROJECT_ID

Project ID. Overrides the default core/project property value for this command invocation.

GCLOUD WIDE FLAGS

These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.

NOTES

These variants are also available:

$ gcloud alpha resource-manager org-policies deny

$ gcloud beta resource-manager org-policies deny