HEX
Server: Apache/2.4.65 (Ubuntu)
System: Linux ielts-store-v2 6.8.0-1036-gcp #38~22.04.1-Ubuntu SMP Thu Aug 14 01:19:18 UTC 2025 x86_64
User: root (0)
PHP: 7.2.34-54+ubuntu20.04.1+deb.sury.org+1
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: //snap/google-cloud-cli/394/help/man/man1/gcloud_active-directory_domains_create.1
.TH "GCLOUD_ACTIVE\-DIRECTORY_DOMAINS_CREATE" 1



.SH "NAME"
.HP
gcloud active\-directory domains create \- create a Managed Microsoft AD domain



.SH "SYNOPSIS"
.HP
\f5gcloud active\-directory domains create\fR \fIDOMAIN\fR \fB\-\-region\fR=[\fIREGION\fR,...] \fB\-\-reserved\-ip\-range\fR=\fIRESERVED_IP_RANGE\fR [\fB\-\-admin\-name\fR=\fIADMIN_NAME\fR] [\fB\-\-async\fR] [\fB\-\-authorized\-networks\fR=[\fIAUTHORIZED_NETWORKS\fR,...]] [\fB\-\-enable\-audit\-logs\fR] [\fB\-\-labels\fR=[\fIKEY\fR=\fIVALUE\fR,...]] [\fIGCLOUD_WIDE_FLAG\ ...\fR]



.SH "DESCRIPTION"

Create a new Managed Microsoft AD domain with the given name using Google
Cloud's Managed Service for Microsoft Active Directory.

This command can fail for the following reasons:
.RS 2m
.IP "\(bu" 2m
An AD domain with the same name already exists.
.IP "\(bu" 2m
The active account does not have permission to create AD domains.
.IP "\(bu" 2m
There is an overlap between the provided CIDR range and authorized network's
CIDR.
.IP "\(bu" 2m
A valid region was not provided.
.RE
.sp



.SH "EXAMPLES"

The following command creates an AD domain with the name \f5my\-domain.com\fR in
region \f5us\-central1\fR, a network peering to \f5my\-network\fR and consuming
the IP address range \f510.172.0.0/24\fR.

.RS 2m
$ gcloud active\-directory domains create my\-domain.com \e
    \-\-region=us\-central1 \-\-reserved\-ip\-range="10.172.0.0/24" \e
    \-\-authorized\-networks=projects/my\-project/global/networks/\e
my\-network
.RE



.SH "POSITIONAL ARGUMENTS"

.RS 2m
.TP 2m

Domain resource \- Name of the managed Managed Microsoft AD domain you want to
create. This represents a Cloud resource. (NOTE) Some attributes are not given
arguments in this group but can be set in other ways.

To set the \f5project\fR attribute:
.RS 2m
.IP "\(em" 2m
provide the argument \f5domain\fR on the command line with a fully specified
name;
.IP "\(em" 2m
provide the argument \f5\-\-project\fR on the command line;
.IP "\(em" 2m
set the property \f5core/project\fR.
.RE
.sp

This must be specified.


.RS 2m
.TP 2m
\fIDOMAIN\fR

ID of the domain or fully qualified identifier for the domain.

To set the \f5domain\fR attribute:
.RS 2m
.IP "\(bu" 2m
provide the argument \f5domain\fR on the command line.
.RE
.sp


.RE
.RE
.sp

.SH "REQUIRED FLAGS"

.RS 2m
.TP 2m
\fB\-\-region\fR=[\fIREGION\fR,...]

Google Compute Engine region in which to provision domain controllers.

.TP 2m
\fB\-\-reserved\-ip\-range\fR=\fIRESERVED_IP_RANGE\fR

Classless Inter\-Domain Routing range of internal addresses that are reserved
for this domain.


.RE
.sp

.SH "OPTIONAL FLAGS"

.RS 2m
.TP 2m
\fB\-\-admin\-name\fR=\fIADMIN_NAME\fR

Name of the administrator that may be used to perform Active Directory
operations. This is a delegated administrator account provisioned by our
service. If left unspecified \f5MIAdmin\fR will be used. This is different from
both the domain administrator and the Directory Services Restore Mode (DSRM)
administrator.

.TP 2m
\fB\-\-async\fR

Return immediately, without waiting for the operation in progress to complete.

.TP 2m
\fB\-\-authorized\-networks\fR=[\fIAUTHORIZED_NETWORKS\fR,...]

Names of the Google Compute Engine networks to which the domain will be
connected.

.TP 2m
\fB\-\-enable\-audit\-logs\fR

If specified, Active Directory data audit logs are enabled for the domain.

.TP 2m
\fB\-\-labels\fR=[\fIKEY\fR=\fIVALUE\fR,...]

List of label KEY=VALUE pairs to add.


.RE
.sp

.SH "GCLOUD WIDE FLAGS"

These flags are available to all commands: \-\-access\-token\-file, \-\-account,
\-\-billing\-project, \-\-configuration, \-\-flags\-file, \-\-flatten,
\-\-format, \-\-help, \-\-impersonate\-service\-account, \-\-log\-http,
\-\-project, \-\-quiet, \-\-trace\-token, \-\-user\-output\-enabled,
\-\-verbosity.

Run \fB$ gcloud help\fR for details.



.SH "API REFERENCE"

This command uses the \fBmanagedidentities/v1\fR API. The full documentation for
this API can be found at: https://cloud.google.com/managed\-microsoft\-ad/



.SH "NOTES"

These variants are also available:

.RS 2m
$ gcloud alpha active\-directory domains create
.RE

.RS 2m
$ gcloud beta active\-directory domains create
.RE