SrSSKJr SSKJr SSKJr SSKJr \R"\RR\RR5\R"SS\R555r \R"\RR5\R"SS \ 555rg ) z)The command group for the PAM Grants CLI.)absolute_import)division)unicode_literals)basec\rSrSrSrSrg)AlphaBetaGrantsaCManage Privileged Access Manager (PAM) grants. The `gcloud pam grants` command group lets you manage Privileged Access Manager (PAM) grants. ## EXAMPLES To create a new grant against an entitlement with the full name ``ENTITLEMENT_NAME'', a requested duration of `1 hour 30 minutes`, a justification of `some justification`, and two additional email recipients `abc@example.com` and `xyz@example.com`, run: $ {command} create --entitlement=ENTITLEMENT_NAME --requested-duration=5400s --justification="some justification" --additional-email-recipients=abc@example.com,xyz@example.com To describe a grant with the full name ``GRANT_NAME'', run: $ {command} describe GRANT_NAME To list all grants associated with an entitlement with the full name ``ENTITLEMENT_NAME'', run: $ {command} list --entitlement=ENTITLEMENT_NAME To deny a grant with the full name ``GRANT_NAME'' and a reason `denial reason`, run: $ {command} deny GRANT_NAME --reason="denial reason" To approve a grant with the full name ``GRANT_NAME'' and a reason `approval reason`, run: $ {command} approve GRANT_NAME --reason="approval reason" To revoke a grant with the full name ``GRANT_NAME'' and a reason `revoke reason`, run: $ {command} revoke GRANT_NAME --reason="revoke reason" To search for and list all grants that you have created that are associated with an entitlement with the full name ``ENTITLEMENT_NAME'', run: $ {command} search --entitlement=ENTITLEMENT_NAME --caller-relationship=had-created To search for and list all grants that you have approved or denied, that are associated with an entitlement with the full name ``ENTITLEMENT_NAME'', run: $ {command} search --entitlement=ENTITLEMENT_NAME --caller-relationship=had-approved To search for and list all grants that you can approve that are associated with an entitlement with the full name ``ENTITLEMENT_NAME'', run: $ {command} search --entitlement=ENTITLEMENT_NAME --caller-relationship=can-approve To withdraw a grant with the full name ``GRANT_NAME'', run: $ {command} withdraw GRANT_NAME N__name__ __module__ __qualname____firstlineno____doc____static_attributes__r "lib/surface/pam/grants/__init__.pyrrs>rrc\rSrSrSrSrg)GAGrants]aManage Privileged Access Manager (PAM) grants. The `gcloud pam grants` command group lets you manage Privileged Access Manager (PAM) grants. ## EXAMPLES To create a new grant against an entitlement with the full name ``ENTITLEMENT_NAME'', a requested duration of `1 hour 30 minutes`, a justification of `some justification`, and two additional email recipients `abc@example.com` and `xyz@example.com`, run: $ {command} create --entitlement=ENTITLEMENT_NAME --requested-duration=5400s --justification="some justification" --additional-email-recipients=abc@example.com,xyz@example.com To describe a grant with the full name ``GRANT_NAME'', run: $ {command} describe GRANT_NAME To list all grants associated with an entitlement with the full name ``ENTITLEMENT_NAME'', run: $ {command} list --entitlement=ENTITLEMENT_NAME To deny a grant with the full name ``GRANT_NAME'' and a reason `denial reason`, run: $ {command} deny GRANT_NAME --reason="denial reason" To approve a grant with the full name ``GRANT_NAME'' and a reason `approval reason`, run: $ {command} approve GRANT_NAME --reason="approval reason" To revoke a grant with the full name ``GRANT_NAME'' and a reason `revoke reason`, run: $ {command} revoke GRANT_NAME --reason="revoke reason" To search for and list all grants that you have created that are associated with an entitlement with the full name ``ENTITLEMENT_NAME'', run: $ {command} search --entitlement=ENTITLEMENT_NAME --caller-relationship=had-created To search for and list all grants that you have approved or denied, that are associated with an entitlement with the full name ``ENTITLEMENT_NAME'', run: $ {command} search --entitlement=ENTITLEMENT_NAME --caller-relationship=had-approved To search for and list all grants that you can approve that are associated with an entitlement with the full name ``ENTITLEMENT_NAME'', run: $ {command} search --entitlement=ENTITLEMENT_NAME --caller-relationship=can-approve r Nr r rrrr]s;rrN)r __future__rrrgooglecloudsdk.callioper ReleaseTracks ReleaseTrackALPHABETAUniverseCompatibleGrouprGArr rrr s 0&'(D%%++T->->-C-CD?djj?E?DD%%(()<<*<r