.TH "GCLOUD_ACCESS\-CONTEXT\-MANAGER_LEVELS_CREATE" 1



.SH "NAME"
.HP
gcloud access\-context\-manager levels create \- create a new access level



.SH "SYNOPSIS"
.HP
\f5gcloud access\-context\-manager levels create\fR (\fILEVEL\fR\ :\ \fB\-\-policy\fR=\fIPOLICY\fR) \fB\-\-title\fR=\fITITLE\fR (\fB\-\-custom\-level\-spec\fR=\fICUSTOM_LEVEL_SPEC\fR\ |\ [\fB\-\-basic\-level\-spec\fR=\fIBASIC_LEVEL_SPEC\fR\ :\ \fB\-\-combine\-function\fR=\fICOMBINE_FUNCTION\fR;\ default="and"]) [\fB\-\-async\fR] [\fB\-\-description\fR=\fIDESCRIPTION\fR] [\fIGCLOUD_WIDE_FLAG\ ...\fR]



.SH "DESCRIPTION"

Create a new access level in a given access policy.



.SH "POSITIONAL ARGUMENTS"

.RS 2m
.TP 2m

Level resource \- The access level to create. The arguments in this group can be
used to specify the attributes of this resource.

This must be specified.


.RS 2m
.TP 2m
\fILEVEL\fR

ID of the level or fully qualified identifier for the level.

To set the \f5level\fR attribute:
.RS 2m
.IP "\(bu" 2m
provide the argument \f5level\fR on the command line.
.RE
.sp

This positional argument must be specified if any of the other arguments in this
group are specified.

.TP 2m
\fB\-\-policy\fR=\fIPOLICY\fR

The ID of the access policy.


To set the \f5policy\fR attribute:
.RS 2m
.IP "\(bu" 2m
provide the argument \f5level\fR on the command line with a fully specified
name;
.IP "\(bu" 2m
provide the argument \f5\-\-policy\fR on the command line;
.IP "\(bu" 2m
set the property \f5access_context_manager/policy\fR;
.IP "\(bu" 2m
automatically, if the current account belongs to an organization with exactly
one access policy..
.RE
.sp


.RE
.RE
.sp

.SH "REQUIRED FLAGS"

.RS 2m
.TP 2m
\fB\-\-title\fR=\fITITLE\fR

Short human\-readable title of the access level.

.TP 2m

Level specification.

Exactly one of these must be specified:


.RS 2m
.TP 2m

Custom level specification.


.RS 2m
.TP 2m
\fB\-\-custom\-level\-spec\fR=\fICUSTOM_LEVEL_SPEC\fR

Path to a file representing an expression that represents an access level.

The expression is in the Common Expression Language (CEL) format. For example:

.RS 2m
  expression: "origin.region_code in ['US', 'CA']"
.RE

.RE
.sp
.TP 2m

Basic level specification.


.RS 2m
.TP 2m
\fB\-\-basic\-level\-spec\fR=\fIBASIC_LEVEL_SPEC\fR

Path to a file containing a list of basic access level conditions.

An access level condition file is a YAML\-formatted list of conditions, which
are YAML objects representing a Condition as described in the API reference. For
example:

.RS 2m
 \- ipSubnetworks:
   \- 162.222.181.197/24
   \- 2001:db8::/48
 \- members:
   \- user:user@example.com
.RE

This flag argument must be specified if any of the other arguments in this group
are specified.

.TP 2m
\fB\-\-combine\-function\fR=\fICOMBINE_FUNCTION\fR; default="and"

For a basic level, determines how conditions are combined.
\fICOMBINE_FUNCTION\fR must be one of: \fBand\fR, \fBor\fR.


.RE
.RE
.RE
.sp

.SH "OPTIONAL FLAGS"

.RS 2m
.TP 2m
\fB\-\-async\fR

Return immediately, without waiting for the operation in progress to complete.

.TP 2m
\fB\-\-description\fR=\fIDESCRIPTION\fR

Long\-form description of access level.


.RE
.sp

.SH "GCLOUD WIDE FLAGS"

These flags are available to all commands: \-\-access\-token\-file, \-\-account,
\-\-billing\-project, \-\-configuration, \-\-flags\-file, \-\-flatten,
\-\-format, \-\-help, \-\-impersonate\-service\-account, \-\-log\-http,
\-\-project, \-\-quiet, \-\-trace\-token, \-\-user\-output\-enabled,
\-\-verbosity.

Run \fB$ gcloud help\fR for details.



.SH "API REFERENCE"

This command uses the \fBaccesscontextmanager/v1\fR API. The full documentation
for this API can be found at:
https://cloud.google.com/access\-context\-manager/docs/reference/rest/



.SH "NOTES"

These variants are also available:

.RS 2m
$ gcloud alpha access\-context\-manager levels create
.RE

.RS 2m
$ gcloud beta access\-context\-manager levels create
.RE