Create an organization policy in dry-run mode | Resource Manager Documentation

<!doctype html> <html lang="en" dir="ltr"> <head> <meta name="google-signin-client-id" content="721724668570-nbkv1cfusk7kk4eni4pjvepaus73b13t.apps.googleusercontent.com"> <meta name="google-signin-scope" content="profile email https://www.googleapis.com/auth/developerprofiles https://www.googleapis.com/auth/developerprofiles.award https://www.googleapis.com/auth/cloud-platform https://www.googleapis.com/auth/webhistory"> <meta property="og:site_name" content="Google Cloud"> <meta property="og:type" content="website"><meta name="theme-color" content="#039be5"><meta charset="utf-8"> <meta content="IE=Edge" http-equiv="X-UA-Compatible"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="manifest" href="/_pwa/cloud/manifest.json" crossorigin="use-credentials"> <link rel="preconnect" href="//www.gstatic.com" crossorigin> <link rel="preconnect" href="//fonts.gstatic.com" crossorigin> <link rel="preconnect" href="//fonts.googleapis.com" crossorigin> <link rel="preconnect" href="//apis.google.com" crossorigin> <link rel="preconnect" href="//www.google-analytics.com" crossorigin><link rel="stylesheet" href="//fonts.googleapis.com/css?family=Google+Sans:400,500,700|Google+Sans+Text:400,400italic,500,500italic,700,700italic|Roboto:400,400italic,500,500italic,700,700italic|Roboto+Mono:400,500,700&display=swap"> <link rel="stylesheet" href="//fonts.googleapis.com/css2?family=Material+Icons&family=Material+Symbols+Outlined&display=block"><link rel="stylesheet" href="https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/css/app.css"> <link rel="shortcut icon" href="https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/images/favicons/onecloud/favicon.ico"> <link rel="apple-touch-icon" href="https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/images/favicons/onecloud/super_cloud.png"><link rel="canonical" href="https://cloud.google.com/resource-manager/docs/organization-policy/dry-run-policy"><link rel="search" type="application/opensearchdescription+xml" title="Google Cloud" href="https://cloud.google.com/s/opensearch.xml"> <link rel="alternate" hreflang="en" href="https://cloud.google.com/resource-manager/docs/organization-policy/dry-run-policy" /><link rel="alternate" hreflang="x-default" href="https://cloud.google.com/resource-manager/docs/organization-policy/dry-run-policy" /><link rel="alternate" hreflang="zh-Hans" href="https://cloud.google.com/resource-manager/docs/organization-policy/dry-run-policy?hl=zh-cn" /><link rel="alternate" hreflang="fr" href="https://cloud.google.com/resource-manager/docs/organization-policy/dry-run-policy?hl=fr" /><link rel="alternate" hreflang="de" href="https://cloud.google.com/resource-manager/docs/organization-policy/dry-run-policy?hl=de" /><link rel="alternate" hreflang="id" href="https://cloud.google.com/resource-manager/docs/organization-policy/dry-run-policy?hl=id" /><link rel="alternate" hreflang="it" href="https://cloud.google.com/resource-manager/docs/organization-policy/dry-run-policy?hl=it" /><link rel="alternate" hreflang="ja" href="https://cloud.google.com/resource-manager/docs/organization-policy/dry-run-policy?hl=ja" /><link rel="alternate" hreflang="ko" href="https://cloud.google.com/resource-manager/docs/organization-policy/dry-run-policy?hl=ko" /><link rel="alternate" hreflang="pt-BR" href="https://cloud.google.com/resource-manager/docs/organization-policy/dry-run-policy?hl=pt-br" /><link rel="alternate" hreflang="es-419" href="https://cloud.google.com/resource-manager/docs/organization-policy/dry-run-policy?hl=es-419" /><title>Create an organization policy in dry-run mode  |  Resource Manager Documentation  |  Google Cloud</title> <meta property="og:title" content="Create an organization policy in dry-run mode  |  Resource Manager Documentation  |  Google Cloud"><meta property="og:url" content="https://cloud.google.com/resource-manager/docs/organization-policy/dry-run-policy"><meta property="og:image" content="https://cloud.google.com/_static/cloud/images/social-icon-google-cloud-1200-630.png"> <meta property="og:image:width" content="1200"> <meta property="og:image:height" content="630"><meta property="og:locale" content="en"><meta name="twitter:card" content="summary_large_image"><script type="application/ld+json"> { "@context": "https://schema.org", "@type": "Article", "headline": "Create an organization policy in dry-run mode" } </script><script type="application/ld+json"> { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [{ "@type": "ListItem", "position": 1, "name": "Resource Manager", "item": "https://cloud.google.com/resource-manager" },{ "@type": "ListItem", "position": 2, "name": "Documentation", "item": "https://cloud.google.com/resource-manager/docs" },{ "@type": "ListItem", "position": 3, "name": "Create an organization policy in dry-run mode", "item": "https://cloud.google.com/resource-manager/docs/organization-policy/dry-run-policy" }] } </script> <link rel="stylesheet" href="/extras.css"></head> <body class="" template="page" theme="cloud-theme" type="article" layout="docs" free-trial display-toc pending> <devsite-progress type="indeterminate" id="app-progress"></devsite-progress> <a href="#main-content" class="skip-link button"> Skip to main content </a> <section class="devsite-wrapper"> <devsite-cookie-notification-bar></devsite-cookie-notification-bar><cloudx-track userCountry="SG"></cloudx-track> <cloudx-utils-init></cloudx-utils-init> <devsite-header keep-tabs-visible> <div class="devsite-header--inner nocontent"> <div class="devsite-top-logo-row-wrapper-wrapper"> <div class="devsite-top-logo-row-wrapper"> <div class="devsite-top-logo-row"> <button type="button" id="devsite-hamburger-menu" class="devsite-header-icon-button button-flat material-icons gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Navigation menu button" visually-hidden aria-label="Open menu"> </button> <div class="devsite-product-name-wrapper"> <a href="/" class="devsite-site-logo-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Site logo" track-type="globalNav" track-name="googleCloud" track-metadata-position="nav" track-metadata-eventDetail="nav"> <picture> <img src="https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/images/cloud-logo.svg" class="devsite-site-logo" alt="Google Cloud"> </picture> </a> <span class="devsite-product-name"> <ul class="devsite-breadcrumb-list" > <li class="devsite-breadcrumb-item devsite-has-google-wordmark"> </li> </ul> </span> </div> <div class="devsite-top-logo-row-middle"> <div class="devsite-header-upper-tabs"> <cloudx-tabs-nav class="upper-tabs"> <nav class="devsite-tabs-wrapper" aria-label="Upper tabs"> <tab class="devsite-active"> <a href="https://cloud.google.com/docs" class="devsite-tabs-content gc-analytics-event " track-metadata-eventdetail="https://cloud.google.com/docs" track-type="nav" track-metadata-position="nav - docs-home" track-metadata-module="primary nav" aria-label="Documentation, selected" data-category="Site-Wide Custom Events" data-label="Tab: Documentation" track-name="docs-home" track-link-column-type="single-column" > Documentation </a> </tab> <tab class="devsite-dropdown devsite-clickable "> <a href="https://cloud.google.com/docs/tech-area-overviews" class="devsite-tabs-content gc-analytics-event " track-metadata-eventdetail="https://cloud.google.com/docs/tech-area-overviews" track-type="nav" track-metadata-position="nav - technology-areas" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Technology areas" track-name="technology-areas" track-link-column-type="single-column" > Technology areas </a> <button aria-haspopup="menu" aria-expanded="false" aria-label="Dropdown menu for Technology areas" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/tech-area-overviews" track-metadata-position="nav - technology-areas" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Technology areas" track-name="technology-areas" track-link-column-type="single-column" class="devsite-tabs-dropdown-toggle devsite-icon devsite-icon-arrow-drop-down"></button> <div class="devsite-tabs-dropdown" role="menu" aria-label="submenu" hidden> <button class="devsite-tabs-close-button material-icons button-flat gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Close dropdown menu" aria-label="Close dropdown menu" track-type="nav" track-name="close" track-metadata-eventdetail="#" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav">close</button> <div class="devsite-tabs-dropdown-content"> <div class="devsite-tabs-dropdown-column "> <ul class="devsite-tabs-dropdown-section "> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/ai-ml" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/ai-ml" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> AI and ML </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/application-development" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/application-development" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Application development </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/application-hosting" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/application-hosting" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Application hosting </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/compute-area" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/compute-area" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Compute </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/data" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/data" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Data analytics and pipelines </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/databases" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/databases" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Databases </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/dhm-cloud" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/dhm-cloud" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Distributed, hybrid, and multicloud </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/generative-ai" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/generative-ai" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Generative AI </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/industry" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/industry" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Industry solutions </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/networking" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/networking" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Networking </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/observability" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/observability" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Observability and monitoring </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/security" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/security" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Security </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/storage" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/storage" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Storage </div> </a> </li> </ul> </div> </div> </div> </tab> <tab class="devsite-dropdown devsite-clickable "> <a href="https://cloud.google.com/docs/cross-product-overviews" class="devsite-tabs-content gc-analytics-event " track-metadata-eventdetail="https://cloud.google.com/docs/cross-product-overviews" track-type="nav" track-metadata-position="nav - crossproduct" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Cross-product tools" track-name="crossproduct" track-link-column-type="single-column" > Cross-product tools </a> <button aria-haspopup="menu" aria-expanded="false" aria-label="Dropdown menu for Cross-product tools" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/cross-product-overviews" track-metadata-position="nav - crossproduct" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Cross-product tools" track-name="crossproduct" track-link-column-type="single-column" class="devsite-tabs-dropdown-toggle devsite-icon devsite-icon-arrow-drop-down"></button> <div class="devsite-tabs-dropdown" role="menu" aria-label="submenu" hidden> <button class="devsite-tabs-close-button material-icons button-flat gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Close dropdown menu" aria-label="Close dropdown menu" track-type="nav" track-name="close" track-metadata-eventdetail="#" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav">close</button> <div class="devsite-tabs-dropdown-content"> <div class="devsite-tabs-dropdown-column "> <ul class="devsite-tabs-dropdown-section "> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/access-resources" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/access-resources" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Access and resources management </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/costs-usage" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/costs-usage" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Costs and usage management </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/devtools" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/devtools" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud SDK, languages, frameworks, and tools </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/iac" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/iac" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Infrastructure as code </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/migration" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/migration" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Migration </div> </a> </li> </ul> </div> </div> </div> </tab> <tab class="devsite-dropdown devsite-clickable "> <a href="https://cloud.google.com/" class="devsite-tabs-content gc-analytics-event " track-metadata-eventdetail="https://cloud.google.com/" track-type="nav" track-metadata-position="nav - related-sites" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Related sites" track-name="related-sites" track-link-column-type="single-column" > Related sites </a> <button aria-haspopup="menu" aria-expanded="false" aria-label="Dropdown menu for Related sites" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/" track-metadata-position="nav - related-sites" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Related sites" track-name="related-sites" track-link-column-type="single-column" class="devsite-tabs-dropdown-toggle devsite-icon devsite-icon-arrow-drop-down"></button> <div class="devsite-tabs-dropdown" role="menu" aria-label="submenu" hidden> <button class="devsite-tabs-close-button material-icons button-flat gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Close dropdown menu" aria-label="Close dropdown menu" track-type="nav" track-name="close" track-metadata-eventdetail="#" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav">close</button> <div class="devsite-tabs-dropdown-content"> <div class="devsite-tabs-dropdown-column "> <ul class="devsite-tabs-dropdown-section "> <li class="devsite-nav-item"> <a href="https://cloud.google.com/" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Home </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/free" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/free" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Free Trial and Free Tier </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/architecture" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/architecture" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Architecture Center </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/blog" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/blog" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Blog </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/contact" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/contact" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Contact Sales </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/developers" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/developers" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Developer Center </div> </a> </li> <li class="devsite-nav-item"> <a href="https://developers.google.com/" track-type="nav" track-metadata-eventdetail="https://developers.google.com/" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Developer Center </div> </a> </li> <li class="devsite-nav-item"> <a href="https://console.cloud.google.com/marketplace" track-type="nav" track-metadata-eventdetail="https://console.cloud.google.com/marketplace" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Marketplace </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/marketplace/docs" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/marketplace/docs" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Marketplace Documentation </div> </a> </li> <li class="devsite-nav-item"> <a href="https://www.cloudskillsboost.google/paths" track-type="nav" track-metadata-eventdetail="https://www.cloudskillsboost.google/paths" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Skills Boost </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/solutions" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/solutions" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Solution Center </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/support-hub" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/support-hub" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Support </div> </a> </li> <li class="devsite-nav-item"> <a href="https://www.youtube.com/@googlecloudtech" track-type="nav" track-metadata-eventdetail="https://www.youtube.com/@googlecloudtech" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Tech Youtube Channel </div> </a> </li> </ul> </div> </div> </div> </tab> </nav> </cloudx-tabs-nav> </div> <devsite-search enable-signin enable-search enable-suggestions project-name="Resource Manager Documentation" tenant-name="Google Cloud" project-scope="/resource-manager/docs" url-scoped="https://cloud.google.com/s/results/resource-manager/docs" > <form class="devsite-search-form" action="https://cloud.google.com/s/results" method="GET"> <div class="devsite-search-container"> <button type="button" search-open class="devsite-search-button devsite-header-icon-button button-flat material-icons" aria-label="Open search"></button> <div class="devsite-searchbox"> <input aria-activedescendant="" aria-autocomplete="list" aria-label="Search" aria-expanded="false" aria-haspopup="listbox" autocomplete="off" class="devsite-search-field devsite-search-query" name="q" placeholder="Search" role="combobox" type="text" value="" > <div class="devsite-search-image material-icons" aria-hidden="true"> </div> <div class="devsite-search-shortcut-icon-container" aria-hidden="true"> <kbd class="devsite-search-shortcut-icon">/</kbd> </div> </div> </div> </form> <button type="button" search-close class="devsite-search-button devsite-header-icon-button button-flat material-icons" aria-label="Close search"></button> </devsite-search> </div> <devsite-language-selector> <ul role="presentation"> <li role="presentation"> <a role="menuitem" lang="en" >English</a> </li> <li role="presentation"> <a role="menuitem" lang="de" >Deutsch</a> </li> <li role="presentation"> <a role="menuitem" lang="es_419" >Español – América Latina</a> </li> <li role="presentation"> <a role="menuitem" lang="fr" >Français</a> </li> <li role="presentation"> <a role="menuitem" lang="id" >Indonesia</a> </li> <li role="presentation"> <a role="menuitem" lang="it" >Italiano</a> </li> <li role="presentation"> <a role="menuitem" lang="pt_br" >Português – Brasil</a> </li> <li role="presentation"> <a role="menuitem" lang="zh_cn" >中文 – 简体</a> </li> <li role="presentation"> <a role="menuitem" lang="ja" >日本語</a> </li> <li role="presentation"> <a role="menuitem" lang="ko" >한국어</a> </li> </ul> </devsite-language-selector> <devsite-user enable-profiles fp-auth id="devsite-user"> <span class="button devsite-top-button" aria-hidden="true" visually-hidden>Sign in</span> </devsite-user> </div> </div> </div> <div class="devsite-collapsible-section "> <div class="devsite-header-background"> <div class="devsite-product-id-row" hidden> <div class="devsite-product-description-row"> </div> </div> <div class="devsite-doc-set-nav-row"> <ul class="devsite-breadcrumb-list" > <li class="devsite-breadcrumb-item "> <a href="https://cloud.google.com/resource-manager" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Lower Header" data-value="1" track-type="globalNav" track-name="breadcrumb" track-metadata-position="1" track-metadata-eventdetail="Resource Manager" > Resource Manager </a> </li> </ul> <cloudx-tabs-nav class="lower-tabs"> <nav class="devsite-tabs-wrapper" aria-label="Lower tabs"> <tab class="devsite-active"> <a href="https://cloud.google.com/resource-manager/docs/manage-google-cloud-resources" class="devsite-tabs-content gc-analytics-event " track-metadata-eventdetail="https://cloud.google.com/resource-manager/docs/manage-google-cloud-resources" track-type="nav" track-metadata-position="nav - guides" track-metadata-module="primary nav" aria-label="Guides, selected" data-category="Site-Wide Custom Events" data-label="Tab: Guides" track-name="guides" > Guides </a> </tab> <tab > <a href="https://cloud.google.com/resource-manager/docs/apis" class="devsite-tabs-content gc-analytics-event " track-metadata-eventdetail="https://cloud.google.com/resource-manager/docs/apis" track-type="nav" track-metadata-position="nav - reference" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Reference" track-name="reference" > Reference </a> </tab> <tab > <a href="https://cloud.google.com/resource-manager/docs/support" class="devsite-tabs-content gc-analytics-event " track-metadata-eventdetail="https://cloud.google.com/resource-manager/docs/support" track-type="nav" track-metadata-position="nav - support" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Support" track-name="support" > Support </a> </tab> <tab > <a href="https://cloud.google.com/resource-manager/docs/resources" class="devsite-tabs-content gc-analytics-event " track-metadata-eventdetail="https://cloud.google.com/resource-manager/docs/resources" track-type="nav" track-metadata-position="nav - resources" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Resources" track-name="resources" > Resources </a> </tab> </nav> </cloudx-tabs-nav> <div class="devsite-product-button-row"> <a href="https://cloud.google.com/contact" class="cta-button-secondary button " track-type="contact" track-name="sales" data-overflow="devsite-tabs-wrapper" data-overflow-wrapper="tab" track-metadata-eventDetail="nav" track-metadata-position="nav" data-overflow-container="left" >Contact Us</a> <a href="//console.cloud.google.com/freetrial" class="cloud-free-trial-button cta-button-primary button-primary button cloud-button cloud-button--primary " track-metadata-eventDetail="nav" data-overflow="devsite-top-logo-row" data-overflow-class="devsite-header-link devsite-top-button button cloud-free-trial-button cloud-free-trial-enabled cloud-button cloud-button--primary" data-overflow-container="right" track-name="gcpCta" track-type="freeTrial" track-metadata-position="nav" referrerpolicy="no-referrer-when-downgrade" >Start free</a> </div> </div> </div> </div> </div> </devsite-header> <devsite-book-nav scrollbars > <div class="devsite-book-nav-filter" > <span class="filter-list-icon material-icons" aria-hidden="true"></span> <input type="text" placeholder="Filter" aria-label="Type to filter" role="searchbox"> <span class="filter-clear-button hidden" data-title="Clear filter" aria-label="Clear filter" role="button" tabindex="0"></span> </div> <nav class="devsite-book-nav devsite-nav nocontent" aria-label="Side menu"> <div class="devsite-mobile-header"> <button type="button" id="devsite-close-nav" class="devsite-header-icon-button button-flat material-icons gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Close navigation" aria-label="Close navigation"> </button> <div class="devsite-product-name-wrapper"> <a href="/" class="devsite-site-logo-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Site logo" track-type="globalNav" track-name="googleCloud" track-metadata-position="nav" track-metadata-eventDetail="nav"> <picture> <img src="https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/images/cloud-logo.svg" class="devsite-site-logo" alt="Google Cloud"> </picture> </a> <span class="devsite-product-name"> <ul class="devsite-breadcrumb-list" > <li class="devsite-breadcrumb-item devsite-has-google-wordmark"> </li> </ul> </span> </div> </div> <div class="devsite-book-nav-wrapper"> <div class="devsite-mobile-nav-top"> <ul class="devsite-nav-list"> <li class="devsite-nav-item"> <a href="/docs" class="devsite-nav-title gc-analytics-event devsite-nav-active" data-category="Site-Wide Custom Events" data-label="Tab: Documentation" track-name="docs-home" track-link-column-type="single-column" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Documentation" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Documentation </span> </a> <ul class="devsite-nav-responsive-tabs"> <li class="devsite-nav-item"> <a href="/resource-manager/docs/manage-google-cloud-resources" class="devsite-nav-title gc-analytics-event devsite-nav-has-children devsite-nav-active" data-category="Site-Wide Custom Events" data-label="Tab: Guides" track-name="guides" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Guides" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip menu="_book"> Guides </span> <span class="devsite-nav-icon material-icons" data-icon="forward" menu="_book"> </span> </a> </li> <li class="devsite-nav-item"> <a href="/resource-manager/docs/apis" class="devsite-nav-title gc-analytics-event devsite-nav-has-children " data-category="Site-Wide Custom Events" data-label="Tab: Reference" track-name="reference" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Reference" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Reference </span> <span class="devsite-nav-icon material-icons" data-icon="forward" > </span> </a> </li> <li class="devsite-nav-item"> <a href="/resource-manager/docs/support" class="devsite-nav-title gc-analytics-event devsite-nav-has-children " data-category="Site-Wide Custom Events" data-label="Tab: Support" track-name="support" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Support" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Support </span> <span class="devsite-nav-icon material-icons" data-icon="forward" > </span> </a> </li> <li class="devsite-nav-item"> <a href="/resource-manager/docs/resources" class="devsite-nav-title gc-analytics-event devsite-nav-has-children " data-category="Site-Wide Custom Events" data-label="Tab: Resources" track-name="resources" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Resources" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Resources </span> <span class="devsite-nav-icon material-icons" data-icon="forward" > </span> </a> </li> </ul> </li> <li class="devsite-nav-item"> <a href="/docs/tech-area-overviews" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Tab: Technology areas" track-name="technology-areas" track-link-column-type="single-column" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Technology areas" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Technology areas </span> </a> <ul class="devsite-nav-responsive-tabs devsite-nav-has-menu "> <li class="devsite-nav-item"> <span class="devsite-nav-title" tooltip data-category="Site-Wide Custom Events" data-label="Tab: Technology areas" track-name="technology-areas" track-link-column-type="single-column" > <span class="devsite-nav-text" tooltip menu="Technology areas"> More </span> <span class="devsite-nav-icon material-icons" data-icon="forward" menu="Technology areas"> </span> </span> </li> </ul> </li> <li class="devsite-nav-item"> <a href="/docs/cross-product-overviews" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Tab: Cross-product tools" track-name="crossproduct" track-link-column-type="single-column" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Cross-product tools" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Cross-product tools </span> </a> <ul class="devsite-nav-responsive-tabs devsite-nav-has-menu "> <li class="devsite-nav-item"> <span class="devsite-nav-title" tooltip data-category="Site-Wide Custom Events" data-label="Tab: Cross-product tools" track-name="crossproduct" track-link-column-type="single-column" > <span class="devsite-nav-text" tooltip menu="Cross-product tools"> More </span> <span class="devsite-nav-icon material-icons" data-icon="forward" menu="Cross-product tools"> </span> </span> </li> </ul> </li> <li class="devsite-nav-item"> <a href="/" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Tab: Related sites" track-name="related-sites" track-link-column-type="single-column" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Related sites" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Related sites </span> </a> <ul class="devsite-nav-responsive-tabs devsite-nav-has-menu "> <li class="devsite-nav-item"> <span class="devsite-nav-title" tooltip data-category="Site-Wide Custom Events" data-label="Tab: Related sites" track-name="related-sites" track-link-column-type="single-column" > <span class="devsite-nav-text" tooltip menu="Related sites"> More </span> <span class="devsite-nav-icon material-icons" data-icon="forward" menu="Related sites"> </span> </span> </li> </ul> </li> <li class="devsite-nav-item"> <a href="//console.cloud.google.com/" class="devsite-nav-title gc-analytics-event " track-name="console" referrerpolicy="no-referrer-when-downgrade" track-metadata-eventDetail="nav" track-type="globalNav" track-metadata-position="nav" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Console" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Console </span> </a> </li> <li class="devsite-nav-item"> <a href="/contact" class="cta-button-secondary button" track-type="contact" track-name="sales" data-overflow="devsite-tabs-wrapper" data-overflow-wrapper="tab" track-metadata-eventDetail="nav" track-metadata-position="nav" data-overflow-container="left" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Contact Us" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Contact Us </span> </a> </li> <li class="devsite-nav-item"> <a href="//console.cloud.google.com/freetrial" class="cloud-free-trial-button cta-button-primary button-primary button cloud-button cloud-button--primary" track-metadata-eventDetail="nav" data-overflow="devsite-top-logo-row" data-overflow-class="devsite-header-link devsite-top-button button cloud-free-trial-button cloud-free-trial-enabled cloud-button cloud-button--primary" data-overflow-container="right" track-name="gcpCta" track-type="freeTrial" track-metadata-position="nav" referrerpolicy="no-referrer-when-downgrade" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Start free" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Start free </span> </a> </li> </ul> </div> <div class="devsite-mobile-nav-bottom"> <ul class="devsite-nav-list" menu="_book"> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Resource Manager</span> </div></li> <li class="devsite-nav-item"><a href="/resource-manager" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager" ><span class="devsite-nav-text" tooltip>Product overview</span></a></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Quickstarts</span> </div></li> <li class="devsite-nav-item"><a href="/resource-manager/docs/quickstarts" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/quickstarts" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/quickstarts" ><span class="devsite-nav-text" tooltip>All quickstarts</span></a></li> <li class="devsite-nav-item"><a href="/resource-manager/docs/manage-google-cloud-resources" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/manage-google-cloud-resources" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/manage-google-cloud-resources" ><span class="devsite-nav-text" tooltip>Quickstart using organization resources</span></a></li> <li class="devsite-nav-item"><a href="/resource-manager/docs/organization-policy/enforce-organization-policy" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/organization-policy/enforce-organization-policy" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/organization-policy/enforce-organization-policy" ><span class="devsite-nav-text" tooltip>Quickstart enforcing constraints</span></a></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>How-to guides</span> </div></li> <li class="devsite-nav-item"><a href="/resource-manager/docs/how-to" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/how-to" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/how-to" ><span class="devsite-nav-text" tooltip>All how-to guides</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Resource Manager</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Managing projects</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/resource-manager/docs/creating-managing-projects" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/creating-managing-projects" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/creating-managing-projects" ><span class="devsite-nav-text" tooltip>Creating and managing projects</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/access-control-proj" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/access-control-proj" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/access-control-proj" ><span class="devsite-nav-text" tooltip>Access control for projects with IAM</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/project-liens" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/project-liens" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/project-liens" ><span class="devsite-nav-text" tooltip>Protecting projects with liens</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/troubleshooting-project-deletion" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/troubleshooting-project-deletion" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/troubleshooting-project-deletion" ><span class="devsite-nav-text" tooltip>Troubleshooting project deletion</span></a></li></ul></div></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Moving projects</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/resource-manager/docs/moving-projects-folders" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/moving-projects-folders" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/moving-projects-folders" ><span class="devsite-nav-text" tooltip>Moving a project</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/analyze-move" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/analyze-move" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/analyze-move" ><span class="devsite-nav-text" tooltip>Analyze project move</span></a></li></ul></div></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Migrating projects</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/resource-manager/docs/project-migration" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/project-migration" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/project-migration" ><span class="devsite-nav-text" tooltip>Overview</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/project-migration-checklist" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/project-migration-checklist" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/project-migration-checklist" ><span class="devsite-nav-text" tooltip>Project migration checklist</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/create-migration-plan" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/create-migration-plan" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/create-migration-plan" ><span class="devsite-nav-text" tooltip>Create a migration plan</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/assign-iam-roles" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/assign-iam-roles" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/assign-iam-roles" ><span class="devsite-nav-text" tooltip>Assign IAM permissions</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/configure-org-policy" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/configure-org-policy" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/configure-org-policy" ><span class="devsite-nav-text" tooltip>Configure organization policies</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/handle-special-cases" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/handle-special-cases" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/handle-special-cases" ><span class="devsite-nav-text" tooltip>Handle special cases</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/perform-migration" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/perform-migration" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/perform-migration" ><span class="devsite-nav-text" tooltip>Perform the migration</span></a></li></ul></div></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Managing folders</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/resource-manager/docs/creating-managing-folders" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/creating-managing-folders" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/creating-managing-folders" ><span class="devsite-nav-text" tooltip>Creating and managing folders</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/access-control-folders" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/access-control-folders" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/access-control-folders" ><span class="devsite-nav-text" tooltip>Access control for folders with IAM</span></a></li></ul></div></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Managing organization resources</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/resource-manager/docs/creating-managing-organization" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/creating-managing-organization" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/creating-managing-organization" ><span class="devsite-nav-text" tooltip>Creating and managing organization resources</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/secure-by-default-organizations" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/secure-by-default-organizations" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/secure-by-default-organizations" ><span class="devsite-nav-text" tooltip>Managing secure-by-default organization resources</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/organization-resource-management" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/organization-resource-management" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/organization-resource-management" ><span class="devsite-nav-text" tooltip>Viewing and managing organization resources</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/managing-multiple-orgs" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/managing-multiple-orgs" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/managing-multiple-orgs" ><span class="devsite-nav-text" tooltip>Managing multiple organization resources</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/default-access-control" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/default-access-control" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/default-access-control" ><span class="devsite-nav-text" tooltip>Managing default organization roles</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/access-control-org" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/access-control-org" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/access-control-org" ><span class="devsite-nav-text" tooltip>Access control for organizations with IAM</span></a></li><li class="devsite-nav-item devsite-nav-beta"><a href="/resource-manager/docs/organization-setup" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/organization-setup" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/organization-setup" ><span class="devsite-nav-text" tooltip>Organization resource setup wizard</span><span class="devsite-nav-icon material-icons" data-icon="beta" data-title="Beta" aria-hidden="true"></span></a></li><li class="devsite-nav-item devsite-nav-beta"><a href="/resource-manager/docs/delete-standalone-org" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/delete-standalone-org" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/delete-standalone-org" ><span class="devsite-nav-text" tooltip>Delete a standalone organization</span><span class="devsite-nav-icon material-icons" data-icon="beta" data-title="Beta" aria-hidden="true"></span></a></li></ul></div></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Add context to your resources with labels</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/resource-manager/docs/labels-overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/labels-overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/labels-overview" ><span class="devsite-nav-text" tooltip>Overview</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/creating-managing-labels" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/creating-managing-labels" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/creating-managing-labels" ><span class="devsite-nav-text" tooltip>Create and manage labels</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/labels-supported-services" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/labels-supported-services" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/labels-supported-services" ><span class="devsite-nav-text" tooltip>Supported services for labels</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/best-practices-labels" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/best-practices-labels" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/best-practices-labels" ><span class="devsite-nav-text" tooltip>Best practices for labels</span></a></li></ul></div></li><li class="devsite-nav-item"><a href="/resource-manager/docs/audit-logging" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/audit-logging" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/audit-logging" ><span class="devsite-nav-text" tooltip>Audit logging</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/managing-notifications" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/managing-notifications" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/managing-notifications" ><span class="devsite-nav-text" tooltip>Managing notifications</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/managing-notification-contacts" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/managing-notification-contacts" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/managing-notification-contacts" ><span class="devsite-nav-text" tooltip>Managing contacts for notifications</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/super-admin-best-practices" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/super-admin-best-practices" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/super-admin-best-practices" ><span class="devsite-nav-text" tooltip>Super administrator best practices</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/listing-all-resources" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/listing-all-resources" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/listing-all-resources" ><span class="devsite-nav-text" tooltip>Listing all projects and folders in your hierarchy</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Tags</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/resource-manager/docs/tags/tags-creating-and-managing" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/tags/tags-creating-and-managing" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/tags/tags-creating-and-managing" ><span class="devsite-nav-text" tooltip>Creating and managing tags</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Organization policy service</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/resource-manager/docs/organization-policy/using-constraints" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/organization-policy/using-constraints" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/organization-policy/using-constraints" ><span class="devsite-nav-text" tooltip>Using constraints</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/organization-policy/creating-managing-policies" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/organization-policy/creating-managing-policies" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/organization-policy/creating-managing-policies" ><span class="devsite-nav-text" tooltip>Creating and managing organization policies</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/organization-policy/tags-organization-policy" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/organization-policy/tags-organization-policy" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/organization-policy/tags-organization-policy" ><span class="devsite-nav-text" tooltip>Setting an organization policy with tags</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/organization-policy/creating-managing-custom-constraints" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/organization-policy/creating-managing-custom-constraints" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/organization-policy/creating-managing-custom-constraints" ><span class="devsite-nav-text" tooltip>Creating and managing custom constraints</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/organization-policy/custom-constraint-supported-services" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/organization-policy/custom-constraint-supported-services" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/organization-policy/custom-constraint-supported-services" ><span class="devsite-nav-text" tooltip>Custom constraint supported services</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/organization-policy/dry-run-policy" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/organization-policy/dry-run-policy" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/organization-policy/dry-run-policy" ><span class="devsite-nav-text" tooltip>Create a dry-run organization policy</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/organization-policy/restricting-domains" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/organization-policy/restricting-domains" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/organization-policy/restricting-domains" ><span class="devsite-nav-text" tooltip>Restricting identities by domain</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/organization-policy/restricting-service-accounts" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/organization-policy/restricting-service-accounts" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/organization-policy/restricting-service-accounts" ><span class="devsite-nav-text" tooltip>Restricting IAM service account usage</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/organization-policy/defining-locations" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/organization-policy/defining-locations" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/organization-policy/defining-locations" ><span class="devsite-nav-text" tooltip>Restricting resource locations</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/organization-policy/defining-locations-supported-services" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/organization-policy/defining-locations-supported-services" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/organization-policy/defining-locations-supported-services" ><span class="devsite-nav-text" tooltip>Resource locations supported services</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/organization-policy/restricting-resources" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/organization-policy/restricting-resources" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/organization-policy/restricting-resources" ><span class="devsite-nav-text" tooltip>Restricting resource usage</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/organization-policy/restricting-resources-supported-services" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/organization-policy/restricting-resources-supported-services" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/organization-policy/restricting-resources-supported-services" ><span class="devsite-nav-text" tooltip>Restricting resource usage supported services</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/organization-policy/audit-logging" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/organization-policy/audit-logging" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/organization-policy/audit-logging" ><span class="devsite-nav-text" tooltip>Cloud Audit Logging</span></a></li><li class="devsite-nav-item devsite-nav-preview"><a href="/resource-manager/docs/organization-policy/disabling-cloud-logging" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/organization-policy/disabling-cloud-logging" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/organization-policy/disabling-cloud-logging" ><span class="devsite-nav-text" tooltip>Disable Cloud Logging for the Cloud Healthcare API</span><span class="devsite-nav-icon material-icons" data-icon="preview" data-title="Preview" aria-hidden="true"></span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/organization-policy/develop-apps-constrained-environment" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/organization-policy/develop-apps-constrained-environment" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/organization-policy/develop-apps-constrained-environment" ><span class="devsite-nav-text" tooltip>Develop applications in a constrained environment</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Manage organization restrictions</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/resource-manager/docs/organization-restrictions/configure-organization-restrictions" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/organization-restrictions/configure-organization-restrictions" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/organization-restrictions/configure-organization-restrictions" ><span class="devsite-nav-text" tooltip>Configure organization restrictions</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/organization-restrictions/test-org-restrictions" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/organization-restrictions/test-org-restrictions" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/organization-restrictions/test-org-restrictions" ><span class="devsite-nav-text" tooltip>Test organization restrictions</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/organization-restrictions/examples-org-restrictions" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/organization-restrictions/examples-org-restrictions" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/organization-restrictions/examples-org-restrictions" ><span class="devsite-nav-text" tooltip>Examples of using organization restrictions</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/organization-restrictions/error-messages" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/organization-restrictions/error-messages" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/organization-restrictions/error-messages" ><span class="devsite-nav-text" tooltip>Error messages</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable devsite-nav-deprecated"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Resource settings service</span><span class="devsite-nav-icon material-icons" data-icon="deprecated" data-title="Deprecated" aria-hidden="true"></span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item devsite-nav-deprecated"><a href="/resource-manager/docs/resource-settings/manage-resource-settings" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/resource-settings/manage-resource-settings" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/resource-settings/manage-resource-settings" ><span class="devsite-nav-text" tooltip>Manage resource settings</span><span class="devsite-nav-icon material-icons" data-icon="deprecated" data-title="Deprecated" aria-hidden="true"></span></a></li><li class="devsite-nav-item devsite-nav-deprecated"><a href="/resource-manager/docs/resource-settings/audit-logging" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/resource-settings/audit-logging" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/resource-settings/audit-logging" ><span class="devsite-nav-text" tooltip>Audit logging</span><span class="devsite-nav-icon material-icons" data-icon="deprecated" data-title="Deprecated" aria-hidden="true"></span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Concepts</span> </div></li> <li class="devsite-nav-item"><a href="/resource-manager/docs/concepts" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/concepts" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/concepts" ><span class="devsite-nav-text" tooltip>All concepts</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Resource Manager</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/resource-manager/docs/cloud-platform-resource-hierarchy" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/cloud-platform-resource-hierarchy" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/cloud-platform-resource-hierarchy" ><span class="devsite-nav-text" tooltip>Resource hierarchy</span></a></li><li class="devsite-nav-item devsite-nav-beta"><a href="/resource-manager/docs/standalone-organization-overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/standalone-organization-overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/standalone-organization-overview" ><span class="devsite-nav-text" tooltip>Standalone organization overview</span><span class="devsite-nav-icon material-icons" data-icon="beta" data-title="Beta" aria-hidden="true"></span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Tags</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/resource-manager/docs/tags/tags-overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/tags/tags-overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/tags/tags-overview" ><span class="devsite-nav-text" tooltip>Overview</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Organization policy service</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/resource-manager/docs/organization-policy/overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/organization-policy/overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/organization-policy/overview" ><span class="devsite-nav-text" tooltip>Overview</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/organization-policy/understanding-hierarchy" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/organization-policy/understanding-hierarchy" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/organization-policy/understanding-hierarchy" ><span class="devsite-nav-text" tooltip>Understanding hierarchy evaluation</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/organization-policy/domain-restricted-sharing" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/organization-policy/domain-restricted-sharing" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/organization-policy/domain-restricted-sharing" ><span class="devsite-nav-text" tooltip>Domain restricted sharing</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Organization restrictions</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/resource-manager/docs/organization-restrictions/overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/organization-restrictions/overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/organization-restrictions/overview" ><span class="devsite-nav-text" tooltip>Overview</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/organization-restrictions/supported-services" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/organization-restrictions/supported-services" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/organization-restrictions/supported-services" ><span class="devsite-nav-text" tooltip>Supported services</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/organization-restrictions/additional-considerations" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/organization-restrictions/additional-considerations" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/organization-restrictions/additional-considerations" ><span class="devsite-nav-text" tooltip>Additional considerations</span></a></li><li class="devsite-nav-item"><a href="/resource-manager/docs/organization-restrictions/known-limitations" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/organization-restrictions/known-limitations" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/organization-restrictions/known-limitations" ><span class="devsite-nav-text" tooltip>Known limitations</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable devsite-nav-deprecated"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Resource settings service</span><span class="devsite-nav-icon material-icons" data-icon="deprecated" data-title="Deprecated" aria-hidden="true"></span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item devsite-nav-deprecated"><a href="/resource-manager/docs/resource-settings/overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /resource-manager/docs/resource-settings/overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/resource-manager/docs/resource-settings/overview" ><span class="devsite-nav-text" tooltip>Overview of Resource Settings</span><span class="devsite-nav-icon material-icons" data-icon="deprecated" data-title="Deprecated" aria-hidden="true"></span></a></li></ul></div></li> </ul> <ul class="devsite-nav-list" menu="Technology areas" aria-label="Side menu" hidden> <li class="devsite-nav-item"> <a href="/docs/ai-ml" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: AI and ML" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > AI and ML </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/application-development" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Application development" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Application development </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/application-hosting" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Application hosting" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Application hosting </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/compute-area" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Compute" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Compute </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/data" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Data analytics and pipelines" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Data analytics and pipelines </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/databases" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Databases" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Databases </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/dhm-cloud" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Distributed, hybrid, and multicloud" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Distributed, hybrid, and multicloud </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/generative-ai" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Generative AI" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Generative AI </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/industry" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Industry solutions" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Industry solutions </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/networking" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Networking" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Networking </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/observability" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Observability and monitoring" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Observability and monitoring </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/security" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Security" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Security </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/storage" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Storage" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Storage </span> </a> </li> </ul> <ul class="devsite-nav-list" menu="Cross-product tools" aria-label="Side menu" hidden> <li class="devsite-nav-item"> <a href="/docs/access-resources" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Access and resources management" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Access and resources management </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/costs-usage" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Costs and usage management" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Costs and usage management </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/devtools" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud SDK, languages, frameworks, and tools" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud SDK, languages, frameworks, and tools </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/iac" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Infrastructure as code" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Infrastructure as code </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/migration" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Migration" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Migration </span> </a> </li> </ul> <ul class="devsite-nav-list" menu="Related sites" aria-label="Side menu" hidden> <li class="devsite-nav-item"> <a href="/" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Home" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Home </span> </a> </li> <li class="devsite-nav-item"> <a href="/free" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Free Trial and Free Tier" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Free Trial and Free Tier </span> </a> </li> <li class="devsite-nav-item"> <a href="/architecture" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Architecture Center" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Architecture Center </span> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/blog" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Blog" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Blog </span> </a> </li> <li class="devsite-nav-item"> <a href="/contact" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Contact Sales" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Contact Sales </span> </a> </li> <li class="devsite-nav-item"> <a href="/developers" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Developer Center" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Developer Center </span> </a> </li> <li class="devsite-nav-item"> <a href="https://developers.google.com/" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Developer Center" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Developer Center </span> </a> </li> <li class="devsite-nav-item"> <a href="https://console.cloud.google.com/marketplace" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Marketplace" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Marketplace </span> </a> </li> <li class="devsite-nav-item"> <a href="/marketplace/docs" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Marketplace Documentation" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Marketplace Documentation </span> </a> </li> <li class="devsite-nav-item"> <a href="https://www.cloudskillsboost.google/paths" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Skills Boost" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Skills Boost </span> </a> </li> <li class="devsite-nav-item"> <a href="/solutions" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Solution Center" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Solution Center </span> </a> </li> <li class="devsite-nav-item"> <a href="/support-hub" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Support" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Support </span> </a> </li> <li class="devsite-nav-item"> <a href="https://www.youtube.com/@googlecloudtech" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Tech Youtube Channel" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Tech Youtube Channel </span> </a> </li> </ul> </div> </div> </nav> </devsite-book-nav> <section id="gc-wrapper"> <main role="main" id="main-content" class="devsite-main-content" has-book-nav has-sidebar > <div class="devsite-sidebar"> <div class="devsite-sidebar-content"> <devsite-toc class="devsite-nav" role="navigation" aria-label="On this page" depth="2" scrollbars ></devsite-toc> <devsite-recommendations-sidebar class="nocontent devsite-nav"> </devsite-recommendations-sidebar> </div> </div> <devsite-content> <article class="devsite-article"> <div class="devsite-article-meta nocontent" role="navigation"> <ul class="devsite-breadcrumb-list" aria-label="Breadcrumb"> <li class="devsite-breadcrumb-item "> <a href="https://cloud.google.com/" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Breadcrumbs" data-value="1" track-type="globalNav" track-name="breadcrumb" track-metadata-position="1" track-metadata-eventdetail="Google Cloud" > Home </a> </li> <li class="devsite-breadcrumb-item "> <div class="devsite-breadcrumb-guillemet material-icons" aria-hidden="true"></div> <a href="https://cloud.google.com/resource-manager" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Breadcrumbs" data-value="2" track-type="globalNav" track-name="breadcrumb" track-metadata-position="2" track-metadata-eventdetail="Resource Manager" > Resource Manager </a> </li> <li class="devsite-breadcrumb-item "> <div class="devsite-breadcrumb-guillemet material-icons" aria-hidden="true"></div> <a href="https://cloud.google.com/resource-manager/docs" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Breadcrumbs" data-value="3" track-type="globalNav" track-name="breadcrumb" track-metadata-position="3" track-metadata-eventdetail="Resource Manager Documentation" > Documentation </a> </li> <li class="devsite-breadcrumb-item "> <div class="devsite-breadcrumb-guillemet material-icons" aria-hidden="true"></div> <a href="https://cloud.google.com/resource-manager/docs/manage-google-cloud-resources" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Breadcrumbs" data-value="4" track-type="globalNav" track-name="breadcrumb" track-metadata-position="4" track-metadata-eventdetail="" > Guides </a> </li> </ul> <devsite-thumb-rating position="header"> </devsite-thumb-rating> </div> <devsite-feedback position="header" project-name="Resource Manager Documentation" product-id="5152837" bucket="documentation" context="" version="t-devsite-webserver-20250211-r00-rc00.466928320959134316" data-label="Send Feedback Button" track-type="feedback" track-name="sendFeedbackLink" track-metadata-position="header" class="nocontent" project-icon="https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/images/favicons/onecloud/super_cloud.png" > <button> Send feedback </button> </devsite-feedback> <h1 class="devsite-page-title" tabindex="-1"> Create an organization policy in dry-run mode </h1> <devsite-feature-tooltip ack-key="AckCollectionsBookmarkTooltipDismiss" analytics-category="Site-Wide Custom Events" analytics-action-show="Callout Profile displayed" analytics-action-close="Callout Profile dismissed" analytics-label="Create Collection Callout" class="devsite-page-bookmark-tooltip nocontent" dismiss-button="true" id="devsite-collections-dropdown" dismiss-button-text="Dismiss" close-button-text="Got it"> <devsite-bookmark></devsite-bookmark> <span slot="popout-heading"> Stay organized with collections </span> <span slot="popout-contents"> Save and categorize content based on your preferences. </span> </devsite-feature-tooltip> <div class="devsite-page-title-meta"><devsite-view-release-notes></devsite-view-release-notes></div> <devsite-toc class="devsite-nav" depth="2" devsite-toc-embedded > </devsite-toc> <div class="devsite-article-body clearfix "> <p>This page shows how to use a an organization policy in dry-run mode to monitor how a policy change would impact your workflows before it is enforced.</p> <p>An organization policy in dry-run mode is created and enforced similarly to other organization policies, and violations of the policy are audit logged, but the violating actions aren't denied.</p> <h2 id="before_you_begin" data-text="Before you begin" tabindex="-1">Before you begin</h2> <p>To use an organization policy in dry-run mode, you must have billing enabled for your Google Cloud project. For information about checking if billing is enabled for a project, see <a href="/billing/docs/how-to/verify-billing-enabled">Verify the billing status of your projects</a>.</p> <p>For more information about what organization policies and constraints are and how they work, see <a href="/resource-manager/docs/organization-policy/overview">Introduction to the Organization Policy Service</a>.</p> <h3 id="required-roles" data-text="Required roles" tabindex="-1">Required roles</h3> <p> To get the permissions that you need to manage organization policies, ask your administrator to grant you the <a href="https://cloud.google.com/iam/docs/understanding-roles#orgpolicy.policyAdmin">Organization policy administrator </a> (<code translate="no" dir="ltr">roles/orgpolicy.policyAdmin</code>) IAM role on the organization. For more information about granting roles, see <a href="/iam/docs/granting-changing-revoking-access">Manage access to projects, folders, and organizations</a>. </p> <p> This predefined role contains the permissions required to manage organization policies. To see the exact permissions that are required, expand the <strong>Required permissions</strong> section: </p> <devsite-expandable> <h4 class="showalways" id="required-permissions" data-text="Required permissions" tabindex="-1">Required permissions</h4> <p>The following permissions are required to manage organization policies:</p> <ul> <li> <code translate="no" dir="ltr"> orgpolicy.constraints.list </code> </li> <li> <code translate="no" dir="ltr"> orgpolicy.policies.create </code> </li> <li> <code translate="no" dir="ltr"> orgpolicy.policies.delete </code> </li> <li> <code translate="no" dir="ltr"> orgpolicy.policies.list </code> </li> <li> <code translate="no" dir="ltr"> orgpolicy.policies.update </code> </li> <li> <code translate="no" dir="ltr"> orgpolicy.policy.get </code> </li> <li> <code translate="no" dir="ltr"> orgpolicy.policy.set</code> </li> </ul> </devsite-expandable> <p> You might also be able to get these permissions with <a href="/iam/docs/creating-custom-roles">custom roles</a> or other <a href="/iam/docs/understanding-roles">predefined roles</a>. </p> <h2 id="limitations" data-text="Limitations" tabindex="-1">Limitations</h2> <p>The only organization policy constraints available to be used in dry-run organization policies are:</p> <ul> <li><a href="/resource-manager/docs/organization-policy/restricting-resources">Restrict resource usage</a></li> <li><a href="/assured-workloads/docs/restrict-tls-versions">Restrict TLS versions</a></li> <li><a href="/resource-manager/docs/organization-policy/creating-managing-custom-constraints">Custom constraints</a></li> <li><a href="/resource-manager/docs/organization-policy/using-constraints#managed-constraints">Managed constraints</a></li> </ul> <p>Attempting to create an organization policy in dry-run mode using any other constraint results in an error.</p> <h2 id="create_an_organization_policy_in_dry-run_mode" data-text="Create an organization policy in dry-run mode" tabindex="-1">Create an organization policy in dry-run mode</h2> <h3 id="create_dry_run_list_policy" data-text="List constraints" tabindex="-1">List constraints</h3> <p>You can create an organization policy in dry-run mode for a list constraint using the Google Cloud console or Google Cloud CLI. The following examples demonstrate how to create an organization policy in dry-run mode that audits the effect of the <code translate="no" dir="ltr">gcp.restrictServiceUsage</code> list constraint.</p> <div class="ds-selector-tabs" data-ds-scope="code-sample"> <section><h3 id="console" data-text=" Console " tabindex="-1"> Console </h3><ol> <li><p>In the Google Cloud console, go to the <strong>Organization policies</strong> page.</p> <p><a href="https://console.cloud.google.com/iam-admin/orgpolicies" target="console" track-name="consoleLink" track-type="tutorial" track-metadata-position="body" class="button button-primary">Go to Organization policies</a> </p></li> <li><p>From the project picker, select the resource for which you want to set the organization policy.</p></li> <li><p>Select the <strong>Restrict Resource Service Usage</strong> constraint from the list on the <strong>Organization policies</strong> page.</p></li> <li><p>Select the <strong>Dry run</strong> tab.</p></li> <li><p>Click <strong>Manage dry run policy</strong>.</p></li> <li><p>On the <strong>Edit dry run policy</strong> page, select <strong>Override parent's policy</strong>.</p></li> <li><p>Under <strong>Policy enforcement</strong>, click <strong>Replace</strong>.</p></li> <li><p>Click <strong>Add rule</strong>.</p></li> <li><p>From <strong>Policy values</strong>, select <strong>Custom</strong>.</p></li> <li><p>From <strong>Policy type</strong>, select <strong>Deny</strong>.</p></li> <li><p>In the <strong>Custom values</strong> box, enter <code translate="no" dir="ltr">compute.googleapis.com</code>, and then click <strong>Done</strong>.</p></li> <li><p>If this is a custom constraint, you can click <strong>Test changes</strong> to simulate the effect of this organization policy. For more information, see <a href="/policy-intelligence/docs/test-organization-policies">Test organization policy changes with Policy Simulator</a>.</p></li> <li><p>To enforce the organization policy in dry-run mode, click <strong>Set dry run policy</strong>. You can also set the live policy by clicking <strong>Set policy</strong>.</p></li> </ol> <p>You can verify the status of your organization policy in dry-run mode by going to the <strong>Dry run</strong> tab of an organization policy constraint.</p> <p>For projects that have an organization policy in dry-run mode applied to them, you can see the audit logs by clicking <strong>View rejection logs</strong>. For this organization policy, the audit logs display violations as if the <strong>Restrict Resource Service Usage</strong> constraint is enforced to deny <code translate="no" dir="ltr">compute.googleapis.com</code>.</p></section> <section><h3 id="gcloud" data-text=" gcloud " tabindex="-1"> gcloud </h3><p>To create an organization policy in dry-run mode, create a YAML file that defines the constraint with <code translate="no" dir="ltr">dryRunSpec</code>. For example:</p> <div></div><devsite-code><pre class="devsite-click-to-copy" translate="no" dir="ltr" is-upgraded syntax="YAML"><span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">name</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><var translate="no"><span class="devsite-syntax-l devsite-syntax-l-Scalar devsite-syntax-l-Scalar-Plain">RESOURCE_TYPE</var>/<var translate="no">RESOURCE_ID</var>/policies/gcp.restrictServiceUsage</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">dryRunSpec</span><span class="devsite-syntax-p">:</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">rules</span><span class="devsite-syntax-p">:</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p devsite-syntax-p-Indicator">-</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">values</span><span class="devsite-syntax-p">:</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">deniedValues</span><span class="devsite-syntax-p">:</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p devsite-syntax-p-Indicator">-</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-l devsite-syntax-l-Scalar devsite-syntax-l-Scalar-Plain">compute.googleapis.com</span></pre></devsite-code> <p>Replace the following:</p> <ul> <li><p><code translate="no" dir="ltr"><var translate="no">RESOURCE_TYPE</var></code> with <code translate="no" dir="ltr">organizations</code>, <code translate="no" dir="ltr">folders</code>, or <code translate="no" dir="ltr">projects</code>.</p></li> <li><p><code translate="no" dir="ltr"><var translate="no">RESOURCE_ID</var></code> with your organization ID, folder ID, project ID, or project number, depending on the type of resource specified in <code translate="no" dir="ltr"><var translate="no">RESOURCE_TYPE</var></code>.</p></li> </ul> <p>This organization policy won't enforce the <code translate="no" dir="ltr">gcp.restrictServiceUsage</code> constraint, but the audit logs display violations as if it did.</p> <p>You can set a live organization policy and a dry-run organization policy in the same YAML file, if you define both <code translate="no" dir="ltr">spec</code> and <code translate="no" dir="ltr">dryRunSpec</code>. For example:</p> <div></div><devsite-code><pre class="devsite-click-to-copy" translate="no" dir="ltr" is-upgraded syntax="YAML"><span class="devsite-syntax-nt">name</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><var translate="no"><span class="devsite-syntax-l devsite-syntax-l-Scalar devsite-syntax-l-Scalar-Plain">RESOURCE_TYPE</var>/<var translate="no">RESOURCE_ID</var>/policies/gcp.restrictServiceUsage</span> <span class="devsite-syntax-nt">spec</span><span class="devsite-syntax-p">:</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">rules</span><span class="devsite-syntax-p">:</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p devsite-syntax-p-Indicator">-</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">values</span><span class="devsite-syntax-p">:</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">allowedValues</span><span class="devsite-syntax-p">:</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p devsite-syntax-p-Indicator">-</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-l devsite-syntax-l-Scalar devsite-syntax-l-Scalar-Plain">container.googleapis.com</span> <span class="devsite-syntax-nt">dryRunSpec</span><span class="devsite-syntax-p">:</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">rules</span><span class="devsite-syntax-p">:</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p devsite-syntax-p-Indicator">-</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">values</span><span class="devsite-syntax-p">:</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">allowedValues</span><span class="devsite-syntax-p">:</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p devsite-syntax-p-Indicator">-</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-l devsite-syntax-l-Scalar devsite-syntax-l-Scalar-Plain">compute.googleapis.com</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p devsite-syntax-p-Indicator">-</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-l devsite-syntax-l-Scalar devsite-syntax-l-Scalar-Plain">appengine.googleapis.com</span></pre></devsite-code> <p>To enforce an organization policy in dry-run mode, use the <code translate="no" dir="ltr">org-policies set policy</code> command. To update an existing organization policy in dry-run mode with new constraints, use the <code translate="no" dir="ltr">--update-mask</code> flag. For example:</p> <div></div><devsite-code><pre class="devsite-click-to-copy" translate="no" dir="ltr" is-upgraded syntax="Bash">gcloud<span class="devsite-syntax-w"> </span>org-policies<span class="devsite-syntax-w"> </span>set-policy<span class="devsite-syntax-w"> </span><var translate="no">POLICY_PATH</var><span class="devsite-syntax-w"> </span><span class="devsite-syntax-se">\</span> <span class="devsite-syntax-w"> </span>--update-mask<span class="devsite-syntax-o">=</span><var translate="no">UPDATE_MASK</var></pre></devsite-code> <p>Replace the following:</p> <ul> <li><p><code translate="no" dir="ltr"><var translate="no">POLICY_PATH</var></code> with the full path to your organization policy YAML file.</p></li> <li><p><code translate="no" dir="ltr"><var translate="no">UPDATE_MASK</var></code> with <code translate="no" dir="ltr">spec</code> to only update the live policy, or <code translate="no" dir="ltr">dryRunSpec</code> to only update the organization policy in dry-run mode. You can also use <code translate="no" dir="ltr">*</code> to update both the <code translate="no" dir="ltr">spec</code> and <code translate="no" dir="ltr">dryRunSpec</code> fields. If this field is not set when updating an existing organization policy, this command will result in an error and the organization policy won't update.</p></li> </ul> <p>You can verify that the organization policy in dry-run mode is set by using the <code translate="no" dir="ltr">org-policies describe</code> command. The <code translate="no" dir="ltr">dryRunSpec</code> field appears only if it exists in the organization policy.</p> <p>This organization policy would enforce the <code translate="no" dir="ltr">gcp.restrictServiceUsage</code> constraint such that only <code translate="no" dir="ltr">container.googleapis.com</code> is allowed. However, the audit logs display violations of <code translate="no" dir="ltr">compute.googleapis.com</code> and <code translate="no" dir="ltr">appengine.googleapis.com</code> as well.</p></section> </div> <h3 id="create_dry_run_boolean_policy" data-text="Boolean constraints" tabindex="-1">Boolean constraints</h3> <p>You can create an organization policy in dry-run mode for a boolean constraint using the Google Cloud console or Google Cloud CLI. The following examples demonstrate how to create an organization policy in dry-run mode that audits the effect of a boolean <a href="/resource-manager/docs/organization-policy/creating-managing-custom-constraints">custom organization policy</a>.</p> <div class="ds-selector-tabs" data-ds-scope="code-sample"> <section><h3 id="console_1" data-text=" Console " tabindex="-1"> Console </h3><ol> <li><p>In the Google Cloud console, go to the <strong>Organization policies</strong> page.</p> <p><a href="https://console.cloud.google.com/iam-admin/orgpolicies" target="console" track-name="consoleLink" track-type="tutorial" track-metadata-position="body" class="button button-primary">Go to Organization policies</a> </p></li> <li><p>From the project picker, select the resource for which you want to set the organization policy.</p></li> <li><p>Select the custom organization policy you want to enforce from the list on the <strong>Organization policies</strong> page.</p></li> <li><p>Select the <strong>Dry run</strong> tab.</p></li> <li><p>Click <strong>Manage dry run policy</strong>.</p></li> <li><p>On the <strong>Edit dry run policy</strong> page, select <strong>Override parent's policy</strong>.</p></li> <li><p>Click <strong>Add rule</strong>.</p></li> <li><p>Under <strong>Enforcement</strong>, select <strong>On</strong>, and then click <strong>Done</strong>.</p></li> <li><p>To enforce the organization policy in dry-run mode, click <strong>Set dry run policy</strong>. Once you verify that the organization policy in dry-run mode works as intended, you can set the live policy by clicking <strong>Set policy</strong>.</p></li> </ol> <p>You can verify the status of your organization policy in dry-run mode by going to the <strong>Dry run</strong> tab of an organization policy constraint.</p> <p>For projects that have an organization policy in dry-run mode applied to them, you can see the audit logs by clicking <strong>View rejection logs</strong>. For this organization policy, the audit logs display violations as if the custom organization policy is enforced.</p></section> <section><h3 id="gcloud_1" data-text=" gcloud " tabindex="-1"> gcloud </h3><p>To create an organization policy in dry-run mode, create a YAML file that defines the constraint with <code translate="no" dir="ltr">dryRunSpec</code>. For example:</p> <div></div><devsite-code><pre class="devsite-click-to-copy" translate="no" dir="ltr" is-upgraded syntax="YAML"><span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">name</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><var translate="no"><span class="devsite-syntax-l devsite-syntax-l-Scalar devsite-syntax-l-Scalar-Plain">RESOURCE_TYPE</var>/<var translate="no">RESOURCE_ID</var>/policies/<var translate="no">CONSTRAINT_NAME</span></var> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">dryRunSpec</span><span class="devsite-syntax-p">:</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">rules</span><span class="devsite-syntax-p">:</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p devsite-syntax-p-Indicator">-</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">enforce</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-l devsite-syntax-l-Scalar devsite-syntax-l-Scalar-Plain">true</span></pre></devsite-code> <p>Replace the following:</p> <ul> <li><p><code translate="no" dir="ltr"><var translate="no">RESOURCE_TYPE</var></code> with <code translate="no" dir="ltr">organizations</code>, <code translate="no" dir="ltr">folders</code>, or <code translate="no" dir="ltr">projects</code>.</p></li> <li><p><code translate="no" dir="ltr"><var translate="no">RESOURCE_ID</var></code> with your organization ID, folder ID, project ID, or project number, depending on the type of resource specified in <code translate="no" dir="ltr"><var translate="no">RESOURCE_TYPE</var></code>.</p></li> <li><p><code translate="no" dir="ltr"><var translate="no">CONSTRAINT_NAME</var></code> with the name of your custom constraint. For example, <code translate="no" dir="ltr">custom.disableGkeAutoUpgrade</code>.</p></li> </ul> <p>This organization policy won't enforce the custom constraint, but the audit logs display violations as if it did.</p> <p>You can set a live organization policy and an organization policy in dry-run mode in the same same YAML file, if you define both <code translate="no" dir="ltr">spec</code> and <code translate="no" dir="ltr">dryRunSpec</code>. For example:</p> <div></div><devsite-code><pre class="devsite-click-to-copy" translate="no" dir="ltr" is-upgraded syntax="YAML"><span class="devsite-syntax-nt">name</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><var translate="no"><span class="devsite-syntax-l devsite-syntax-l-Scalar devsite-syntax-l-Scalar-Plain">RESOURCE_TYPE</var>/<var translate="no">RESOURCE_ID</var>/policies/<var translate="no">CONSTRAINT_NAME</span></var> <span class="devsite-syntax-nt">spec</span><span class="devsite-syntax-p">:</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">rules</span><span class="devsite-syntax-p">:</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p devsite-syntax-p-Indicator">-</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">enforce</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-l devsite-syntax-l-Scalar devsite-syntax-l-Scalar-Plain">false</span> <span class="devsite-syntax-nt">dryRunSpec</span><span class="devsite-syntax-p">:</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">rules</span><span class="devsite-syntax-p">:</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p devsite-syntax-p-Indicator">-</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">enforce</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-l devsite-syntax-l-Scalar devsite-syntax-l-Scalar-Plain">true</span></pre></devsite-code> <p>To enforce an organization policy in dry-run mode, use the <code translate="no" dir="ltr">org-policies set policy</code> command. To update an existing organization policy in dry-run mode with new constraints, use the <code translate="no" dir="ltr">--update-mask</code> flag. For example:</p> <div></div><devsite-code><pre class="devsite-click-to-copy" translate="no" dir="ltr" is-upgraded syntax="Bash">gcloud<span class="devsite-syntax-w"> </span>org-policies<span class="devsite-syntax-w"> </span>set-policy<span class="devsite-syntax-w"> </span><var translate="no">POLICY_PATH</var><span class="devsite-syntax-w"> </span><span class="devsite-syntax-se">\</span> <span class="devsite-syntax-w"> </span>--update-mask<span class="devsite-syntax-o">=</span><var translate="no">UPDATE_MASK</var></pre></devsite-code> <p>Replace the following:</p> <ul> <li><p><code translate="no" dir="ltr"><var translate="no">POLICY_PATH</var></code> with the full path to your organization policy YAML file.</p></li> <li><p><code translate="no" dir="ltr"><var translate="no">UPDATE_MASK</var></code> with <code translate="no" dir="ltr">spec</code> to only update the live policy, or <code translate="no" dir="ltr">dryRunSpec</code> to only update the organization policy in dry-run mode. You can also use <code translate="no" dir="ltr">*</code> to update both the <code translate="no" dir="ltr">spec</code> and <code translate="no" dir="ltr">dryRunSpec</code> fields. If this field is not set when updating an existing organization policy, this command will result in an error and the organization policy won't update.</p></li> </ul> <p>You can verify that an organization policy in dry-run mode is set by using the <code translate="no" dir="ltr">org-policies describe</code> command. The <code translate="no" dir="ltr">dryRunSpec</code> field appears only if it exists in the organization policy.</p> <p>This organization policy doesn't enforce the custom constraint. However, the audit logs display violations of the custom constraint.</p></section> </div> <h2 id="create_an_organization_policy_in_dry-run_mode_from_a_live_policy" data-text="Create an organization policy in dry-run mode from a live policy" tabindex="-1">Create an organization policy in dry-run mode from a live policy</h2> <p>You can use an existing organization policy as the starting point for an organization policy in dry-run mode. You may want to do this to see what impacts a change to your existing policy would have on your environment.</p> <p>You can create an organization policy in dry-run mode based on an existing policy using the Google Cloud console or Google Cloud CLI.</p> <div class="ds-selector-tabs" data-ds-scope="code-sample"> <section><h3 id="console_2" data-text=" Console " tabindex="-1"> Console </h3><ol> <li><p>In the Google Cloud console, go to the <strong>Organization policies</strong> page.</p> <p><a href="https://console.cloud.google.com/iam-admin/orgpolicies" target="console" track-name="consoleLink" track-type="tutorial" track-metadata-position="body" class="button button-primary">Go to Organization policies</a> </p></li> <li><p>From the project picker, select a resource that already has the <strong>Restrict Resource Service Usage</strong> constraint configured on it.</p></li> <li><p>Select the <strong>Restrict Resource Service Usage</strong> constraint from the list on the <strong>Organization policies</strong> page.</p></li> <li><p>Select the <strong>Live</strong> tab.</p></li> <li><p>Click <strong>Manage policy</strong>.</p></li> <li><p>Click <strong>Add rule</strong>.</p></li> <li><p>From <strong>Policy values</strong>, select <strong>Custom</strong>.</p></li> <li><p>From <strong>Policy type</strong>, select <strong>Deny</strong>.</p></li> <li><p>In the <strong>Custom values</strong> box, enter <code translate="no" dir="ltr">appengine.googleapis.com</code>.</p></li> <li><p>Click <strong>Done</strong>, and then <strong>Set dry run policy</strong>.</p></li> </ol></section> <section><h3 id="gcloud_2" data-text=" gcloud " tabindex="-1"> gcloud </h3><p>To create an organization policy in dry-run mode based on an existing live organization policy, get the current policy on the resource using the <code translate="no" dir="ltr">org-policies describe</code> command. For example:</p> <div></div><devsite-code><pre class="devsite-click-to-copy" translate="no" dir="ltr" is-upgraded syntax="Bash">gcloud<span class="devsite-syntax-w"> </span>org-policies<span class="devsite-syntax-w"> </span>describe<span class="devsite-syntax-w"> </span>gcp.restrictServiceUsage<span class="devsite-syntax-w"> </span><span class="devsite-syntax-se">\</span> <span class="devsite-syntax-w"> </span>--project<span class="devsite-syntax-o">=</span><var translate="no">PROJECT_ID</var></pre></devsite-code> <p>Replace <code translate="no" dir="ltr"><var translate="no">PROJECT_ID</var></code> with the project ID or project number of the project where this organization policy is configured.</p> <p>The output should look similar to the following:</p> <div></div><devsite-code><pre class="devsite-click-to-copy" translate="no" dir="ltr" is-upgraded syntax="YAML"><span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">name</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-l devsite-syntax-l-Scalar devsite-syntax-l-Scalar-Plain">projects/123456789012/policies/gcp.restrictServiceUsage</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">spec</span><span class="devsite-syntax-p">:</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">etag</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-l devsite-syntax-l-Scalar devsite-syntax-l-Scalar-Plain">CJy93KEGEKCJw/QB</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">rules</span><span class="devsite-syntax-p">:</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p devsite-syntax-p-Indicator">-</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">values</span><span class="devsite-syntax-p">:</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">allowedValues</span><span class="devsite-syntax-p">:</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p devsite-syntax-p-Indicator">-</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-l devsite-syntax-l-Scalar devsite-syntax-l-Scalar-Plain">compute.googleapis.com</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">updateTime</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s">'2023-04-12T21:11:56.512804Z'</span></pre></devsite-code> <p>Copy the output of this command into a temporary file. Edit this file to remove the <code translate="no" dir="ltr">etag</code> and <code translate="no" dir="ltr">updateTime</code> fields, and change the <code translate="no" dir="ltr">spec</code> field to <code translate="no" dir="ltr">dryRunSpec</code>. Make any changes to the constraint configuration that you want to test in your organization policy in dry-run mode.</p> <p>The finished YAML file should look similar to the following:</p> <div></div><devsite-code><pre class="devsite-click-to-copy" translate="no" dir="ltr" is-upgraded syntax="YAML"><span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">name</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-l devsite-syntax-l-Scalar devsite-syntax-l-Scalar-Plain">projects/123456789012/policies/gcp.restrictServiceUsage</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">dryRunSpec</span><span class="devsite-syntax-p">:</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">rules</span><span class="devsite-syntax-p">:</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p devsite-syntax-p-Indicator">-</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">values</span><span class="devsite-syntax-p">:</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">allowedValues</span><span class="devsite-syntax-p">:</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p devsite-syntax-p-Indicator">-</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-l devsite-syntax-l-Scalar devsite-syntax-l-Scalar-Plain">compute.googleapis.com</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p devsite-syntax-p-Indicator">-</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-l devsite-syntax-l-Scalar devsite-syntax-l-Scalar-Plain">appengine.googleapis.com</span></pre></devsite-code> <p>To enforce the organization policy in dry-run mode, use the <code translate="no" dir="ltr">org-policies set policy</code> with the <code translate="no" dir="ltr">--update-mask</code> flag. For example:</p> <div></div><devsite-code><pre class="devsite-click-to-copy" translate="no" dir="ltr" is-upgraded syntax="Bash">gcloud<span class="devsite-syntax-w"> </span>org-policies<span class="devsite-syntax-w"> </span>set-policy<span class="devsite-syntax-w"> </span><var translate="no">POLICY_PATH</var><span class="devsite-syntax-w"> </span><span class="devsite-syntax-se">\</span> <span class="devsite-syntax-w"> </span>--update-mask<span class="devsite-syntax-o">=</span>dryRunSpec</pre></devsite-code> <p>Replace <code translate="no" dir="ltr"><var translate="no">POLICY_PATH</var></code> with the full path to your temporary organization policy YAML file.</p></section> </div> <h2 id="delete_an_organization_policy_in_dry-run_mode" data-text="Delete an organization policy in dry-run mode" tabindex="-1">Delete an organization policy in dry-run mode</h2> <p>You can delete an organization policy in dry-run mode using the Google Cloud console or Google Cloud CLI.</p> <div class="ds-selector-tabs" data-ds-scope="code-sample"> <section><h3 id="console_3" data-text=" Console " tabindex="-1"> Console </h3><ol> <li><p>In the Google Cloud console, go to the <strong>Organization policies</strong> page.</p> <p><a href="https://console.cloud.google.com/iam-admin/orgpolicies" target="console" track-name="consoleLink" track-type="tutorial" track-metadata-position="body" class="button button-primary">Go to Organization policies</a> </p></li> <li><p>From the project picker, select the resource for which you want to set the organization policy.</p></li> <li><p>Select the <strong>Restrict Resource Service Usage</strong> constraint from the list on the <strong>Organization policies</strong> page.</p></li> <li><p>Select the <strong>Dry run</strong> tab.</p></li> <li><p>Click <strong>Delete dry run policy</strong>.</p></li> </ol></section> <section><h3 id="gcloud_3" data-text=" gcloud " tabindex="-1"> gcloud </h3><p>To delete an organization policy in dry-run mode, create a YAML file that defines the organization policy without a dry-run specification. For example:</p> <div></div><devsite-code><pre class="devsite-click-to-copy" translate="no" dir="ltr" is-upgraded syntax="YAML"><span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">name</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><var translate="no"><span class="devsite-syntax-l devsite-syntax-l-Scalar devsite-syntax-l-Scalar-Plain">RESOURCE_TYPE</var>/<var translate="no">RESOURCE_ID</var>/policies/gcp.restrictServiceUsage</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">spec</span><span class="devsite-syntax-p">:</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">rules</span><span class="devsite-syntax-p">:</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p devsite-syntax-p-Indicator">-</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">values</span><span class="devsite-syntax-p">:</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-nt">allowedValues</span><span class="devsite-syntax-p">:</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p devsite-syntax-p-Indicator">-</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-l devsite-syntax-l-Scalar devsite-syntax-l-Scalar-Plain">container.googleapis.com</span></pre></devsite-code> <p>Replace the following:</p> <ul> <li><p><code translate="no" dir="ltr"><var translate="no">RESOURCE_TYPE</var></code> with <code translate="no" dir="ltr">organizations</code>, <code translate="no" dir="ltr">folders</code> or <code translate="no" dir="ltr">projects</code>.</p></li> <li><p><code translate="no" dir="ltr"><var translate="no">RESOURCE_ID</var></code> with your organization ID, folder ID, project ID, or project number, depending on the type of resource specified in <code translate="no" dir="ltr"><var translate="no">RESOURCE_TYPE</var></code>.</p></li> </ul> <p>Then, use the <code translate="no" dir="ltr">org-policies set policy</code> command with the <code translate="no" dir="ltr">--update-mask</code> flag set to <code translate="no" dir="ltr">dryRunSpec</code>. For example:</p> <div></div><devsite-code><pre class="devsite-click-to-copy" translate="no" dir="ltr" is-upgraded syntax="Bash">gcloud<span class="devsite-syntax-w"> </span>org-policies<span class="devsite-syntax-w"> </span>set-policy<span class="devsite-syntax-w"> </span><var translate="no">POLICY_PATH</var><span class="devsite-syntax-w"> </span><span class="devsite-syntax-se">\</span> <span class="devsite-syntax-w"> </span>--update-mask<span class="devsite-syntax-o">=</span>dryRunSpec</pre></devsite-code> <p>This updates the existing organization policy to remove the dry-run specification and ignores the live part of the specification.</p> <p>To delete both live organization policies and organization policies in dry-run mode at the same time, use the <code translate="no" dir="ltr">org-policies delete</code> command. For example:</p> <div></div><devsite-code><pre class="devsite-click-to-copy" translate="no" dir="ltr" is-upgraded syntax="Bash">gcloud<span class="devsite-syntax-w"> </span>org-policies<span class="devsite-syntax-w"> </span>delete<span class="devsite-syntax-w"> </span><var translate="no">CONSTRAINT_NAME</var><span class="devsite-syntax-w"> </span><span class="devsite-syntax-se">\</span> <span class="devsite-syntax-w"> </span>--<var translate="no">RESOURCE_TYPE</var><span class="devsite-syntax-o">=</span><var translate="no">RESOURCE_ID</var></pre></devsite-code> <p>Replace the following:</p> <ul> <li><p><code translate="no" dir="ltr"><var translate="no">CONSTRAINT_NAME</var></code> with the name of the constraint you want to delete. For example, <code translate="no" dir="ltr">gcp.restrictServiceUsage</code>.</p></li> <li><p><code translate="no" dir="ltr"><var translate="no">RESOURCE_TYPE</var></code> with <code translate="no" dir="ltr">organizations</code>, <code translate="no" dir="ltr">folders</code> or <code translate="no" dir="ltr">projects</code>.</p></li> <li><p><code translate="no" dir="ltr"><var translate="no">RESOURCE_ID</var></code> with your organization ID, folder ID, project ID, or project number, depending on the type of resource specified in <code translate="no" dir="ltr"><var translate="no">RESOURCE_TYPE</var></code>.</p></li> </ul></section> </div> <h2 id="effective_evaluation_of_organization_policies_in_dry-run_mode" data-text="Effective evaluation of organization policies in dry-run mode" tabindex="-1">Effective evaluation of organization policies in dry-run mode</h2> <p>Organization policies in dry-run mode are inherited similarly to other organization policies. If an organization policy in dry-run mode is set on an organization resource, it is inherited by all descendant resources, unless it is overridden at a lower level in the hierarchy.</p> <p>Effective policy evaluation shows the result of the organization policies that are merged on that resource. Therefore, adjustments to the live organization policy are reflected in the effective organization policy in dry-run mode, if the dry-run mode policy is inherited rather than set locally.</p> <p><img src="/static/resource-manager/img/effective-dry-run-organization-policy.svg" alt="Modifying a project's live organization policy also modifies its effective organization policy in dry-run mode."></p> <p>For example, consider an organization resource, <code translate="no" dir="ltr">Organization A</code>, with a live organization policy set to <code translate="no" dir="ltr">enforced: false</code>, and an organization policy in dry-run mode set to <code translate="no" dir="ltr">enforced: true</code>. A child resource, <code translate="no" dir="ltr">Folder B</code>, also sets the live organization policy to <code translate="no" dir="ltr">enforced: false</code>, and inherits the organization policy in dry-run mode. On <code translate="no" dir="ltr">Folder B</code>, the set live policy means the effective policy evaluation of the organization policy in dry-run mode is also <code translate="no" dir="ltr">enforce: false</code>, overriding the organization policy in dry-run mode set in its parent organization.</p> <p>A child resource of <code translate="no" dir="ltr">Folder B</code>, <code translate="no" dir="ltr">Project X</code>, sets the live policy to <code translate="no" dir="ltr">enforced: true</code>. Similar to the behavior on <code translate="no" dir="ltr">Folder B</code>, the effective evaluation of the organization policy in dry-run mode for <code translate="no" dir="ltr">Project X</code> is <code translate="no" dir="ltr">enforced: true</code>, because the live policy is set.</p> <p>Another child resource of <code translate="no" dir="ltr">Folder B</code>, <code translate="no" dir="ltr">Project Y</code>, sets the organization policy in dry-run mode to <code translate="no" dir="ltr">enforced: true</code>. It inherits the organization policy from its parent resource, and so the effective evaluation is <code translate="no" dir="ltr">enforced: false</code> for the live policy, and <code translate="no" dir="ltr">enforced: true</code> for the organization policy in dry-run mode.</p> <table> <thead> <tr> <th>Resource</th> <th>Set live organization policy</th> <th>Effective live organization policy</th> <th>Set organization policy in dry-run mode</th> <th>Effective organization policy in dry-run mode</th> </tr> </thead> <tbody> <tr> <td>Organization A</td> <td><code translate="no" dir="ltr">enforced: false</code></td> <td><code translate="no" dir="ltr">enforced: false</code></td> <td><code translate="no" dir="ltr">enforced: true</code></td> <td><code translate="no" dir="ltr">enforced: true</code></td> </tr> <tr> <td>Folder B</td> <td><code translate="no" dir="ltr">enforced: false</code></td> <td><code translate="no" dir="ltr">enforced: false</code></td> <td>None</td> <td><code translate="no" dir="ltr">enforced: false</code></td> </tr> <tr> <td>Folder C</td> <td>None</td> <td><code translate="no" dir="ltr">enforced: false</code></td> <td>None</td> <td><code translate="no" dir="ltr">enforced: true</code></td> </tr> <tr> <td>Project X</td> <td><code translate="no" dir="ltr">enforced: true</code></td> <td><code translate="no" dir="ltr">enforced: true</code></td> <td>None</td> <td><code translate="no" dir="ltr">enforced: true</code></td> </tr> <tr> <td>Project Y</td> <td>None</td> <td><code translate="no" dir="ltr">enforced: false</code></td> <td><code translate="no" dir="ltr">enforced: true</code></td> <td><code translate="no" dir="ltr">enforced: true</code></td> </tr> </tbody> </table> <h2 id="analyze_the_effects_of_an_organization_policy_in_dry-run_mode" data-text="Analyze the effects of an organization policy in dry-run mode" tabindex="-1">Analyze the effects of an organization policy in dry-run mode</h2> <p>An organization policy in dry-run mode does not block any operations when enforced. To see the effect your organization policy would have, you can check the <a href="/resource-manager/docs/organization-policy/audit-logging">organization policy audit logs</a>.</p> <p>Organization policy audit logs for live organization policies and organization policies in dry-run mode are generated based on whether the operation is allowed or denied by the policies enforced on given resource. The following table describes the situations in which an organization policy audit log is generated:</p> <table> <thead> <tr> <th>Live organization policy</th> <th>Organization policy in dry-run mode</th> <th>Audit log generated</th> </tr> </thead> <tbody> <tr> <td>Allow</td> <td>Allow</td> <td>No</td> </tr> <tr> <td>Allow</td> <td>Deny</td> <td>Audit log in dry-run mode only</td> </tr> <tr> <td>Deny</td> <td>Allow</td> <td>Audit log in live and dry-run mode</td> </tr> <tr> <td>Deny</td> <td>Deny</td> <td>Audit log in live and dry-run mode</td> </tr> </tbody> </table> <p>Organization policy in dry-run mode violations appear alongside violations in live mode in the audit logs. For example:</p> <div></div><devsite-code><pre class="devsite-click-to-copy" translate="no" dir="ltr" is-upgraded syntax="GDScript"><code translate="no" dir="ltr"><span class="devsite-syntax-p">{</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"protoPayload"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">{</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"@type"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"type.googleapis.com/google.cloud.audit.AuditLog"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"status"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">{</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"code"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-mi">7</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"message"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"PERMISSION_DENIED"</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">},</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"authenticationInfo"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">{},</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"requestMetadata"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">{</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"callerIp"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"1.2.3.4"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"requestAttributes"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">{},</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"destinationAttributes"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">{}</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">},</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"serviceName"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"appengine.googleapis.com"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"methodName"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"google.api.appengine.v1.appengine.apps.services.get"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"resourceName"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"projects/sur-project-test-3"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"metadata"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">{</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"constraint"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"constraints/gcp.restrictServiceUsage"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"checkedValue"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"appengine.googleapis.com"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"liveResult"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"ALLOWED"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"@type"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"type.googleapis.com/google.cloud.audit.OrgPolicyDryRunAuditMetadata"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"dryRunResult"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"DENIED"</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">}</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">},</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"insertId"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"1f2bvoxcmg1"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"resource"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">{</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"type"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"audited_resource"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"labels"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">{</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"project_id"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"sur-project-test-3"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"service"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"appengine.googleapis.com"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"method"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"google.api.appengine.v1.appengine.apps.services.get"</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">}</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-p">},</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"timestamp"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"2022-06-16T19:42:58.244990928Z"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"severity"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"WARNING"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"logName"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"projects/sur-project-test-3/logs/cloudaudit.googleapis.com</span><span class="devsite-syntax-si">%2F</span><span class="devsite-syntax-s2">policy"</span><span class="devsite-syntax-p">,</span> <span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"receiveTimestamp"</span><span class="devsite-syntax-p">:</span><span class="devsite-syntax-w"> </span><span class="devsite-syntax-s2">"2022-06-16T19:42:59.572025716Z"</span> <span class="devsite-syntax-p">}</span> </code></pre></devsite-code> <p>You can use the Logs Explorer to query only organization policy in dry-run mode violations.</p> <div class="ds-selector-tabs" data-ds-scope="code-sample"> <section><h3 id="console_4" data-text="Console" tabindex="-1">Console</h3><p>In the Google Cloud console, you can use the Logs Explorer to retrieve your audit log entries for your Google Cloud project, folder, or organization:</p> <ol> <li><p>In the Google Cloud console, go to the <strong>Logging<span aria-label="and then">></span> Logs Explorer</strong> page.</p> <p><a href="https://console.cloud.google.com/logs/query" target="console" class="button button-primary">Go to Logs Explorer</a> </p></li> <li><p>Select an existing Google Cloud project, folder, or organization.</p></li> <li><p>In the <strong>Query builder</strong> pane, do the following:</p> <ul> <li><p>In <strong>Resource type</strong>, select the Google Cloud resource whose audit logs you want to see.</p></li> <li><p>In <strong>Log name</strong>, select the <strong>policy</strong> audit log type.</p></li> <li><p>In the <strong>Query</strong> pane, enter the following: <code translate="no" dir="ltr">protoPayload.metadata.dryRunResult = "DENIED" AND \ protoPayload.metadata.liveResult = "ALLOWED"</code></p></li> </ul> <p>If you're experiencing issues when trying to view logs in the Logs Explorer, see the <a href="/logging/docs/view/logs-explorer-interface#troubleshooting">troubleshooting</a> information.</p> <p>For more information about querying by using the Logs Explorer, see <a href="/logging/docs/view/building-queries">Build queries in the Logs Explorer</a>.</p></li> </ol></section> <section><h3 id="gcloud_4" data-text="gcloud" tabindex="-1">gcloud</h3><p>The Google Cloud CLI provides a command-line interface to the Logging API. Supply a valid resource identifier in each of the log names. For example, if your query includes a project ID, then the project identifier you supply must refer to the currently selected project name.</p> <p>To read audit log entries for organization policy in dry-run mode violations, run the following command:</p> <div></div><devsite-code><pre class="devsite-click-to-copy" translate="no" dir="ltr" is-upgraded> gcloud logging read protoPayload.metadata.dryRunResult = "DENIED" AND \ protoPayload.metadata.liveResult = "ALLOWED" \ --RESOURCE_TYPE=<var translate="no">RESOURCE_ID</var> \ </pre></devsite-code> <p>Replace the following:</p> <ul> <li><p><code translate="no" dir="ltr"><var translate="no">RESOURCE_TYPE</var></code> with <code translate="no" dir="ltr">organization</code>, <code translate="no" dir="ltr">folder</code> or <code translate="no" dir="ltr">project</code>.</p></li> <li><p><code translate="no" dir="ltr"><var translate="no">RESOURCE_ID</var></code> with your organization ID, folder ID, project ID, or project number, depending on the type of resource specified in <code translate="no" dir="ltr"><var translate="no">RESOURCE_TYPE</var></code>.</p></li> </ul> <p>Add the<a href="/sdk/gcloud/reference/logging/read#--freshness"><code translate="no" dir="ltr">--freshness</code> flag</a> to your command to read logs that are more than 1 day old.</p> <p>For more information about using the gcloud CLI, see <a href="/sdk/gcloud/reference/logging/read"><code translate="no" dir="ltr">gcloud logging read</code></a>.</p></section> </div> <p>If you have many projects under your organization, you can use aggregated sinks to aggregate and route the audit log entries from all projects under your organization to a BigQuery table. For more information about creating aggregated sinks, see <a href="/logging/docs/export/aggregated_sinks">Collate and route organization-level logs to supported destinations</a>.</p> <h2 id="whats_next" data-text="What's next" tabindex="-1">What's next</h2> <p>For more information about how to create and manage organization policy constraints, see <a href="/resource-manager/docs/organization-policy/using-constraints">Using constraints</a>.</p> <devsite-hats-survey class="nocontent" hats-id="Nd7nTix2o0eU5NUYprb0ThtUc5jf" listnr-id="83405"></devsite-hats-survey> </div> <devsite-thumb-rating position="footer"> </devsite-thumb-rating> <devsite-feedback position="footer" project-name="Resource Manager Documentation" product-id="5152837" bucket="documentation" context="" version="t-devsite-webserver-20250211-r00-rc00.466928320959134316" data-label="Send Feedback Button" track-type="feedback" track-name="sendFeedbackLink" track-metadata-position="footer" class="nocontent" project-icon="https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/images/favicons/onecloud/super_cloud.png" > <button> Send feedback </button> </devsite-feedback> <div class="devsite-floating-action-buttons"> </div> </article> <devsite-content-footer class="nocontent"> <p>Except as otherwise noted, the content of this page is licensed under the <a href="https://creativecommons.org/licenses/by/4.0/">Creative Commons Attribution 4.0 License</a>, and code samples are licensed under the <a href="https://www.apache.org/licenses/LICENSE-2.0">Apache 2.0 License</a>. For details, see the <a href="https://developers.google.com/site-policies">Google Developers Site Policies</a>. Java is a registered trademark of Oracle and/or its affiliates.</p> <p>Last updated 2025-02-14 UTC.</p> </devsite-content-footer> <devsite-notification > </devsite-notification> <div class="devsite-content-data"> <template class="devsite-thumb-rating-feedback"> <devsite-feedback position="thumb-rating" project-name="Resource Manager Documentation" product-id="5152837" bucket="documentation" context="" version="t-devsite-webserver-20250211-r00-rc00.466928320959134316" data-label="Send Feedback Button" track-type="feedback" track-name="sendFeedbackLink" track-metadata-position="thumb-rating" class="nocontent" project-icon="https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/images/favicons/onecloud/super_cloud.png" > <button> Need to tell us more? </button> </devsite-feedback> </template> <template class="devsite-content-data-template"> [[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-02-14 UTC."],[],[]] </template> </div> </devsite-content> </main> <devsite-footer-promos class="devsite-footer"> </devsite-footer-promos> <devsite-footer-linkboxes class="devsite-footer"> <nav class="devsite-footer-linkboxes nocontent" aria-label="Footer links"> <ul class="devsite-footer-linkboxes-list"> <li class="devsite-footer-linkbox "> <h3 class="devsite-footer-linkbox-heading no-link">Why Google</h3> <ul class="devsite-footer-linkbox-list"> <li class="devsite-footer-linkbox-item"> <a href="/why-google-cloud/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)" track-name="choosing google cloud"track-type="footer link"track-metadata-position="footer"track-metadata-eventDetail="cloud.google.com/why-google-cloud/"track-metadata-child_headline="why google"track-metadata-module="footer"> Choosing Google Cloud </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/trust-center/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)" track-metadata-eventDetail="cloud.google.com/security/"track-metadata-child_headline="why google"track-type="footer link"track-metadata-module="footer"track-name="trust and security"track-metadata-position="footer"> Trust and security </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/modern-infrastructure/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)" track-type="footer link"track-metadata-child_headline="why google"track-metadata-module="footer"track-metadata-position="footer"track-metadata-eventDetail="cloud.google.com/solutions/modern-infrastructure/"track-name="modern infrastructure cloud"> Modern Infrastructure Cloud </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/multicloud/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 4)" track-name="multicloud"track-metadata-position="footer"track-type="footer link"track-metadata-child_headline="why google"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/multicloud/"> Multicloud </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/infrastructure/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 5)" track-type="footer link"track-metadata-position="footer"track-metadata-child_headline="why google"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/infrastructure/"track-name="global infrastructure"> Global infrastructure </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/customers/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 6)" track-metadata-eventDetail="cloud.google.com/customers/"track-metadata-child_headline="why google"track-type="footer link"track-metadata-position="footer"track-metadata-module="footer"track-name="customers and case studies"> Customers and case studies </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/analyst-reports/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 7)" track-metadata-position="footer"track-name="analyst reports"track-metadata-eventDetail="cloud.google.com/analyst-reports/"track-metadata-module="footer"track-type="footer link"track-metadata-child_headline="why google"> Analyst reports </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/whitepapers/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 8)" track-name="whitepapers"track-metadata-eventDetail="cloud.google.com/whitepapers/"track-metadata-child_headline="why google"track-type="footer link"track-metadata-position="footer"track-metadata-module="footer"> Whitepapers </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//cloud.google.com/blog/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 9)" track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/blog/"track-name="blog"track-metadata-position="footer"track-type="footer link"track-metadata-child_headline="engage"> Blog </a> </li> </ul> </li> <li class="devsite-footer-linkbox "> <h3 class="devsite-footer-linkbox-heading no-link">Products and pricing</h3> <ul class="devsite-footer-linkbox-list"> <li class="devsite-footer-linkbox-item"> <a href="/pricing/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)" track-metadata-module="footer"track-name="google cloud pricing"track-type="footer link"track-metadata-eventDetail="cloud.google.com/pricing/"track-metadata-position="footer"track-metadata-child_headline="products and pricing"> Google Cloud pricing </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//workspace.google.com/pricing.html" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)" track-metadata-child_headline="products and pricing"target="_blank"track-type="footer link"track-metadata-eventDetail="workspace.google.com/pricing.html"track-metadata-position="footer"track-metadata-module="footer"track-name="google workspace pricing"> Google Workspace pricing </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/products/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)" track-name="see all products"track-metadata-eventDetail="cloud.google.com/products/"track-metadata-position="footer"track-metadata-child_headline="products and pricing"track-metadata-module="footer"track-type="footer link"> See all products </a> </li> </ul> </li> <li class="devsite-footer-linkbox "> <h3 class="devsite-footer-linkbox-heading no-link">Solutions</h3> <ul class="devsite-footer-linkbox-list"> <li class="devsite-footer-linkbox-item"> <a href="/solutions/infrastructure-modernization/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)" track-name="infrastructure modernization"track-metadata-position="footer"track-metadata-eventDetail="cloud.google.com/solutions/infrastructure-modernization/"track-metadata-child_headline="solutions"track-type="footer link"track-metadata-module="footer"> Infrastructure modernization </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/databases/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)" track-metadata-eventDetail="cloud.google.com/solutions/databases"track-metadata-position="footer"track-metadata-module="footer"track-type="footer link"track-name="databases"track-metadata-child_headline="solutions"> Databases </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/application-modernization/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)" track-metadata-eventDetail="cloud.google.com/solutions/application-modernization/"track-metadata-child_headline="solutions"track-type="footer link"track-metadata-module="footer"track-name="application development"track-metadata-position="footer"> Application modernization </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/smart-analytics/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 4)" track-metadata-child_headline="solutions"track-metadata-eventDetail="cloud.google.com/solutions/smart-analytics/"track-metadata-position="footer"track-metadata-module="footer"track-name="smart analytics"track-type="footer link"> Smart analytics </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/ai/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 5)" track-metadata-position="footer"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/solutions/ai/"track-type="footer link"track-name="artificial intelligence"track-metadata-child_headline="solutions"> Artificial Intelligence </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/security/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 6)" track-type="footer link"track-metadata-eventDetail="cloud.google.com/solutions/security/"track-metadata-module="footer"track-name="security"track-metadata-position="footer"track-metadata-child_headline="solutions"> Security </a> </li> <li class="devsite-footer-linkbox-item"> <a href="https://workspace.google.com/enterprise/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 7)" track-type="footer link"track-name="productivity and work transformation"target="_blank"track-metadata-child_headline="solutions"track-metadata-position="footer"track-metadata-eventDetail="workspace.google.com/enterprise/"track-metadata-module="footer"> Productivity & work transformation </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/#industry-solutions" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 8)" track-metadata-child_headline="solutions"track-metadata-position="footer"track-metadata-module="footer"track-type="footer link"track-name="industry solutions"track-metadata-eventDetail="cloud.google.com/solutions/#industry-solutions"> Industry solutions </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/devops/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 9)" track-metadata-child_headline="solutions"track-metadata-eventDetail="cloud.google.com/solutions/devops/"track-metadata-module="footer"track-name="devops solutions"track-type="footer link"track-metadata-position="footer"> DevOps solutions </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/#section-14" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 10)" track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/solutions/#section-14"track-name="small business solutions"track-type="footer link"track-metadata-position="footer"track-metadata-child_headline="solutions"> Small business solutions </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 11)" track-metadata-child_headline="solutions"track-type="footer link"track-metadata-module="footer"track-metadata-position="footer"track-metadata-eventDetail="cloud.google.com/solutions/"track-name="see all solutions"> See all solutions </a> </li> </ul> </li> <li class="devsite-footer-linkbox "> <h3 class="devsite-footer-linkbox-heading no-link">Resources</h3> <ul class="devsite-footer-linkbox-list"> <li class="devsite-footer-linkbox-item"> <a href="/affiliate-program/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)" track-metadata-eventDetail="cloud.google.com/affiliate-program/"track-type="footer link"track-metadata-child_headline="resources"track-metadata-module="footer"track-metadata-position="footer"track-name="google cloud affiliate program"> Google Cloud Affiliate Program </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/docs/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)" track-type="footer link"track-metadata-position="footer"track-metadata-child_headline="resources"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/docs/"track-name="google cloud documentation"> Google Cloud documentation </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/docs/get-started/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)" track-metadata-position="footer"track-metadata-child_headline="resources"track-metadata-module="footer"track-name="google cloud quickstarts"track-type="footer link"track-metadata-eventDetail="cloud.google.com/docs/get-started/"> Google Cloud quickstarts </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/marketplace/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 4)" track-name="google cloud marketplace"track-type="footer link"track-metadata-child_headline="resources"track-metadata-eventDetail="cloud.google.com/marketplace/"track-metadata-position="footer"track-metadata-module="footer"> Google Cloud Marketplace </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/discover/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 5)" track-metadata-module="footer"track-name="learn about cloud computing"track-metadata-eventDetail="learn/"track-metadata-child_headline="resources"track-type="footer link"track-metadata-position="footer"> Learn about cloud computing </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/support-hub/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 6)" track-name="support"track-metadata-child_headline="resources"track-type="footer link"track-metadata-position="footer"track-metadata-eventDetail="cloud.google.com/support-hub/"track-metadata-module="footer"> Support </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/docs/samples" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 7)" track-metadata-position="footer"track-metadata-child_headline="resources"track-type="footer link"track-metadata-module="footer"track-name="code samples"track-metadata-eventDetail="cloud.google.com/docs/samples"> Code samples </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/architecture/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 8)" track-metadata-eventDetail="cloud.google.com/architecture/"track-metadata-child_headline="resources"track-type="footer link"track-metadata-module="footer"track-name="cloud architecture center"track-metadata-position="footer"> Cloud Architecture Center </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/learn/training/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 9)" track-name="training"track-metadata-child_headline="resources"track-metadata-position="footer"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/training/"track-type="footer link"> Training </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/learn/certification/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 10)" track-metadata-module="footer"track-name="certifications"track-metadata-position="footer"track-metadata-eventDetail="cloud.google.com/certification"track-metadata-child_headline="resources"track-type="footer link"> Certifications </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//developers.google.com" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 11)" track-name="google developers"track-metadata-position="footer"target="_blank"track-metadata-child_headline="resources"track-type="footer link"track-metadata-eventDetail="developers.google.com"track-metadata-module="footer"> Google for Developers </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/startup/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 12)" track-metadata-module="footer"track-name="google cloud for startups"track-metadata-eventDetail="cloud.google.com/startup/"track-metadata-child_headline="resources"track-type="footer link"track-metadata-position="footer"> Google Cloud for Startups </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//status.cloud.google.com" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 13)" track-name="system status"target="_blank"track-metadata-child_headline="resources"track-metadata-position="footer"track-metadata-eventDetail="status.cloud.google.com"track-type="footer link"track-metadata-module="footer"> System status </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/release-notes" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 14)" track-metadata-position="footer"track-metadata-child_headline="resources"track-type="footer link"track-metadata-module="footer"track-name="release notes"track-metadata-eventDetail="cloud.google.com/release-notes/"> Release Notes </a> </li> </ul> </li> <li class="devsite-footer-linkbox "> <h3 class="devsite-footer-linkbox-heading no-link">Engage</h3> <ul class="devsite-footer-linkbox-list"> <li class="devsite-footer-linkbox-item"> <a href="/contact/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)" track-name="contact sales"track-metadata-position="footer"track-metadata-child_headline="engage"track-type="footer link"track-metadata-eventDetail="cloud.google.com/contact/"track-metadata-module="footer"> Contact sales </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//cloud.google.com/find-a-partner" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)" track-metadata-eventDetail="cloud.google.com/find-a-partner"track-metadata-child_headline="engage"track-type="footer link"track-metadata-module="footer"track-name="find a partner"target="_blank"track-metadata-position="footer"> Find a Partner </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/partners/become-a-partner/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)" track-type="footer link"track-name="become a partner"track-metadata-eventDetail="cloud.google.com/partners/become-a-partner/"track-metadata-child_headline="engage"track-metadata-position="footer"track-metadata-module="footer"> Become a Partner </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/events/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 4)" track-metadata-child_headline="engage"track-metadata-position="footer"track-metadata-module="footer"track-metadata-eventDetail="cloud.withgoogle.com/events"track-type="footer link"track-name="events"> Events </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/podcasts/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 5)" track-metadata-module="footer"track-name="podcasts"track-metadata-position="footer"rel="noopener"track-metadata-eventDetail="cloud.google.com/podcasts/"target="_blank"track-metadata-child_headline="engage"track-type="footer link"> Podcasts </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/developers/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 6)" track-metadata-position="footer"track-metadata-eventDetail="cloud.google.com/developers/"track-metadata-module="footer"track-type="footer link"track-name="developer center"track-metadata-child_headline="engage"> Developer Center </a> </li> <li class="devsite-footer-linkbox-item"> <a href="https://www.googlecloudpresscorner.com/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 7)" track-metadata-module="footer"track-type="footer link"track-name="press corner"track-metadata-eventDetail="www.googlecloudpresscorner.com"target="_blank"track-metadata-child_headline="engage"track-metadata-position="footer"rel="noopener"> Press Corner </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//www.youtube.com/googlecloud" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 8)" track-type="footer link"target="_blank"track-metadata-position="footer"rel="noopener"track-metadata-child_headline="engage"track-metadata-module="footer"track-metadata-eventDetail="www.youtube.com/googlecloud"track-name="google cloud on youtube"> Google Cloud on YouTube </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//www.youtube.com/googlecloudplatform" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 9)" track-metadata-module="footer"rel="noopener"track-metadata-eventDetail="www.youtube.com/googlecloudplatform"track-name="google cloud tech on youtube"target="_blank"track-metadata-child_headline="engage"track-type="footer link"track-metadata-position="footer"> Google Cloud Tech on YouTube </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//x.com/googlecloud" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 10)" track-name="follow on x"target="_blank"track-metadata-eventDetail="x.com/googlecloud"rel="noopener"track-metadata-child_headline="engage"track-type="footer link"track-metadata-position="footer"track-metadata-module="footer"> Follow on X </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//userresearch.google.com/?reserved=1&utm_source=website&Q_Language=en&utm_medium=own_srch&utm_campaign=CloudWebFooter&utm_term=0&utm_content=0&productTag=clou&campaignDate=jul19&pType=devel&referral_code=jk212693" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 11)" track-metadata-module="footer"track-metadata-eventDetail="userresearch.google.com/?reserved=1&utm_source=website&Q_Language=en&utm_medium=own_srch&utm_campaign=CloudWebFooter&utm_term=0&utm_content=0&productTag=clou&campaignDate=jul19&pType=devel&referral_code=jk212693"track-name="join user research"track-type="footer link"track-metadata-position="footer"target="_blank"track-metadata-child_headline="engage"> Join User Research </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//careers.google.com/cloud" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 12)" track-metadata-module="footer"track-name="we are hiring join google cloud"track-type="footer link"track-metadata-eventDetail="careers.google.com/cloud"track-metadata-position="footer"target="_blank"track-metadata-child_headline="engage"> We're hiring. Join Google Cloud! </a> </li> <li class="devsite-footer-linkbox-item"> <a href="https://www.googlecloudcommunity.com/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 13)" track-metadata-position="footer"rel="noopener"track-type="footer link"track-metadata-module="footer"track-metadata-eventDetail="www.googlecloudcommunity.com"track-metadata-child_headline="engage"track-name="google cloud community"target="_blank"> Google Cloud Community </a> </li> </ul> </li> </ul> </nav> </devsite-footer-linkboxes> <devsite-footer-utility class="devsite-footer"> <div class="devsite-footer-utility nocontent"> <nav class="devsite-footer-utility-links" aria-label="Utility links"> <ul class="devsite-footer-utility-list"> <li class="devsite-footer-utility-item "> <a class="devsite-footer-utility-link gc-analytics-event" href="//about.google/" data-category="Site-Wide Custom Events" data-label="Footer About Google link" track-metadata-position="footer" track-type="footer link" track-metadata-module="utility footer" track-name="about google" track-metadata-eventDetail="//about.google/" target="_blank" > About Google </a> </li> <li class="devsite-footer-utility-item devsite-footer-privacy-link"> <a class="devsite-footer-utility-link gc-analytics-event" href="//policies.google.com/privacy" data-category="Site-Wide Custom Events" data-label="Footer Privacy link" track-type="footer link" track-metadata-eventDetail="//policies.google.com/privacy" track-metadata-position="footer" track-name="privacy" track-metadata-module="utility footer" target="_blank" > Privacy </a> </li> <li class="devsite-footer-utility-item "> <a class="devsite-footer-utility-link gc-analytics-event" href="//www.google.com/intl/en/policies/terms/regional.html" data-category="Site-Wide Custom Events" data-label="Footer Site terms link" target="_blank" track-type="footer link" track-metadata-position="footer" track-metadata-module="utility footer" track-name="site terms" track-metadata-eventDetail="//www.google.com/intl/en/policies/terms/regional.html" > Site terms </a> </li> <li class="devsite-footer-utility-item "> <a class="devsite-footer-utility-link gc-analytics-event" href="/product-terms/" data-category="Site-Wide Custom Events" data-label="Footer Google Cloud terms link" track-name="google cloud terms" track-metadata-position="footer" track-type="footer link" track-metadata-eventDetail="/product-terms/" track-metadata-module="utility footer" > Google Cloud terms </a> </li> <li class="devsite-footer-utility-item glue-cookie-notification-bar-control"> <a class="devsite-footer-utility-link gc-analytics-event" href="#" data-category="Site-Wide Custom Events" data-label="Footer Manage cookies link" track-metadata-module="utility footer" track-metadata-eventDetail="#" track-type="footer link" track-name="Manage cookies" aria-hidden="true" track-metadata-position="footer" > Manage cookies </a> </li> <li class="devsite-footer-utility-item devsite-footer-carbon-button"> <a class="devsite-footer-utility-link gc-analytics-event" href="/sustainability" data-category="Site-Wide Custom Events" data-label="Footer Our third decade of climate action: join us link" track-metadata-module="utility footer" track-name="Our third decade of climate action: join us" track-type="footer link" track-metadata-eventDetail="/sustainability/" track-metadata-position="footer" > Our third decade of climate action: join us </a> </li> <li class="devsite-footer-utility-item devsite-footer-utility-button"> <span class="devsite-footer-utility-description">Sign up for the Google Cloud newsletter</span> <a class="devsite-footer-utility-link gc-analytics-event" href="/newsletter/" data-category="Site-Wide Custom Events" data-label="Footer Subscribe link" track-type="footer link" track-metadata-position="footer" track-metadata-eventDetail="/newsletter/" track-metadata-module="utility footer" track-name="subscribe" > Subscribe </a> </li> </ul> <devsite-language-selector> <ul role="presentation"> <li role="presentation"> <a role="menuitem" lang="en" >English</a> </li> <li role="presentation"> <a role="menuitem" lang="de" >Deutsch</a> </li> <li role="presentation"> <a role="menuitem" lang="es_419" >Español – América Latina</a> </li> <li role="presentation"> <a role="menuitem" lang="fr" >Français</a> </li> <li role="presentation"> <a role="menuitem" lang="id" >Indonesia</a> </li> <li role="presentation"> <a role="menuitem" lang="it" >Italiano</a> </li> <li role="presentation"> <a role="menuitem" lang="pt_br" >Português – Brasil</a> </li> <li role="presentation"> <a role="menuitem" lang="zh_cn" >中文 – 简体</a> </li> <li role="presentation"> <a role="menuitem" lang="ja" >日本語</a> </li> <li role="presentation"> <a role="menuitem" lang="ko" >한국어</a> </li> </ul> </devsite-language-selector> </nav> </div> </devsite-footer-utility> <devsite-panel></devsite-panel> </section></section> <devsite-sitemask></devsite-sitemask> <devsite-snackbar></devsite-snackbar> <devsite-tooltip ></devsite-tooltip> <devsite-heading-link></devsite-heading-link> <devsite-analytics> <script type="application/json" analytics>[]</script> <script type="application/json" tag-management>{"at": "True", "ga4": [], "ga4p": [], "gtm": [{"id": "GTM-5CVQBG", "purpose": 1}], "parameters": {"internalUser": "False", "language": {"machineTranslated": "False", "requested": "en", "served": "en"}, "pageType": "article", "projectName": "Resource Manager Documentation", "signedIn": "False", "tenant": "cloud", "recommendations": {"sourcePage": "", "sourceType": 0, "sourceRank": 0, "sourceIdenticalDescriptions": 0, "sourceTitleWords": 0, "sourceDescriptionWords": 0, "experiment": ""}, "experiment": {"ids": ""}}}</script> </devsite-analytics> <devsite-badger></devsite-badger> <cloudx-user></cloudx-user> <cloudx-free-trial-eligible-store freeTrialEligible='true'></cloudx-free-trial-eligible-store> <cloudx-pricing-socket></cloudx-pricing-socket> <cloudx-experiments type="TestAACodivertedExperiment" path="/virtual/TestAACodivertedExperiment/configureExperiment" location="SG" variant="variant2" ></cloudx-experiments> <cloudx-experiment-ids userCountry="SG" devsiteExperimentIdList="[39300012, 39300022, 39300118, 39300196, 39300251, 39300319, 39300320, 39300327, 39300345, 39300354, 39300364, 39300374, 39300412, 39300421, 39300436, 39300472, 39300487, 39300496, 39300498, 39300570]"> </cloudx-experiment-ids> <script nonce="1lQG4M9F2gZRgcQwNMxCCNUU7tQUnc"> (function(d,e,v,s,i,t,E){d['GoogleDevelopersObject']=i; t=e.createElement(v);t.async=1;t.src=s;E=e.getElementsByTagName(v)[0]; E.parentNode.insertBefore(t,E);})(window, document, 'script', 'https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/js/app_loader.js', '[2,"en",null,"/js/devsite_app_module.js","https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f","https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud","https://cloud-dot-devsite-v2-prod.appspot.com",null,null,["/_pwa/cloud/manifest.json","https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/images/video-placeholder.svg","https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/images/favicons/onecloud/favicon.ico","https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/images/cloud-logo.svg","https://fonts.googleapis.com/css?family=Google+Sans:400,500,700|Google+Sans+Text:400,400italic,500,500italic,700,700italic|Roboto:400,400italic,500,500italic,700,700italic|Roboto+Mono:400,500,700&display=swap"],1,null,[1,6,8,12,14,17,21,25,50,52,63,70,75,76,80,87,91,92,93,97,98,100,101,102,103,104,105,107,108,109,110,112,113,117,118,120,122,124,125,126,127,129,130,131,132,133,134,135,136,138,140,141,147,148,149,151,152,156,157,158,159,161,163,164,168,169,170,179,180,182,183,186,191,193,196],"AIzaSyAP-jjEJBzmIyKR4F-3XITp8yM9T1gEEI8","AIzaSyB6xiKGDR5O3Ak2okS4rLkauxGUG7XP0hg","cloud.google.com","AIzaSyAQk0fBONSGUqCNznf6Krs82Ap1-NV6J4o","AIzaSyCCxcqdrZ_7QMeLCRY20bh_SXdAYqy70KY",null,null,null,["Cloud__enable_cloud_shell","Profiles__enable_join_program_group_endpoint","MiscFeatureFlags__enable_variable_operator","Search__enable_ai_search_summaries_restricted","MiscFeatureFlags__developers_footer_image","Cloud__enable_free_trial_server_call","DevPro__enable_cloud_innovators_plus","Profiles__enable_complete_playlist_endpoint","Cloud__enable_legacy_calculator_redirect","TpcFeatures__enable_unmirrored_page_left_nav","Profiles__enable_developer_profiles_callout","MiscFeatureFlags__enable_explain_this_code","BookNav__enable_tenant_cache_key","CloudShell__cloud_code_overflow_menu","MiscFeatureFlags__enable_firebase_utm","Cloud__enable_cloudx_ping","Search__enable_page_map","TpcFeatures__enable_mirror_tenant_redirects","Analytics__enable_clearcut_logging","MiscFeatureFlags__enable_project_variables","Cloud__enable_cloud_dlp_service","Profiles__enable_dashboard_curated_recommendations","Profiles__enable_completequiz_endpoint","Profiles__enable_completecodelab_endpoint","Cloud__enable_cloudx_experiment_ids","Profiles__enable_recognition_badges","Search__enable_dynamic_content_confidential_banner","Profiles__enable_stripe_subscription_management","Profiles__enable_release_notes_notifications","Cloud__enable_llm_concierge_chat","Search__enable_suggestions_from_borg","Experiments__reqs_query_experiments","Cloud__enable_cloud_shell_fte_user_flow","CloudShell__cloud_shell_button","Cloud__enable_cloud_facet_chat","Search__scope_to_project_tenant","Concierge__enable_pushui","MiscFeatureFlags__enable_view_transitions","MiscFeatureFlags__developers_footer_dark_image","MiscFeatureFlags__emergency_css","Concierge__enable_concierge_restricted","Profiles__require_profile_eligibility_for_signin","Profiles__enable_page_saving","Search__enable_ai_search_summaries","Search__enable_ai_eligibility_checks","Profiles__enable_profile_collections","EngEduTelemetry__enable_engedu_telemetry","Profiles__enable_awarding_url","DevPro__enable_developer_subscriptions","Profiles__enable_public_developer_profiles"],null,null,"AIzaSyBLEMok-5suZ67qRPzx0qUtbnLmyT_kCVE","https://developerscontentserving-pa.clients6.google.com","AIzaSyCM4QpTRSqP5qI4Dvjt4OAScIN8sOUlO-k","https://developerscontentsearch-pa.clients6.google.com",1,4,1,"https://developerprofiles-pa.clients6.google.com",[2,"cloud","Google Cloud","cloud.google.com",null,"cloud-dot-devsite-v2-prod.appspot.com",null,null,[1,1,null,null,null,null,null,null,null,null,null,[1],null,null,null,null,null,1,[1],[null,null,null,[1,20],"/terms/recommendations"],[1],null,[1],[1,null,1],[1,1,null,null,1,null,["/vertex-ai/"]]],null,[22,null,null,null,null,null,"/images/cloud-logo.svg","/images/favicons/onecloud/apple-icon.png",null,null,null,null,1,1,1,[6,5],[],null,null,[[],[],[],[],[],[],[],[]],null,1,null,null,null,null,[]],[],null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[6,1,14,15,22,23,29,37],null,[[null,null,null,null,null,null,[1,[["docType","Choose a content type",[["ApiReference",null,null,null,null,null,null,null,null,"API reference"],["Sample",null,null,null,null,null,null,null,null,"Code sample"],["ReferenceArchitecture",null,null,null,null,null,null,null,null,"Reference architecture"],["Tutorial",null,null,null,null,null,null,null,null,"Tutorial"]]],["category","Choose a topic",[["AiAndMachineLearning",null,null,null,null,null,null,null,null,"Artificial intelligence and machine learning (AI/ML)"],["ApplicationDevelopment",null,null,null,null,null,null,null,null,"Application development"],["BigDataAndAnalytics",null,null,null,null,null,null,null,null,"Big data and analytics"],["Compute",null,null,null,null,null,null,null,null,"Compute"],["Containers",null,null,null,null,null,null,null,null,"Containers"],["Databases",null,null,null,null,null,null,null,null,"Databases"],["HybridCloud",null,null,null,null,null,null,null,null,"Hybrid and multicloud"],["LoggingAndMonitoring",null,null,null,null,null,null,null,null,"Logging and monitoring"],["Migrations",null,null,null,null,null,null,null,null,"Migrations"],["Networking",null,null,null,null,null,null,null,null,"Networking"],["SecurityAndCompliance",null,null,null,null,null,null,null,null,"Security and compliance"],["Serverless",null,null,null,null,null,null,null,null,"Serverless"],["Storage",null,null,null,null,null,null,null,null,"Storage"]]]]]],[1],null,1],[[null,null,null,null,null,["GTM-5CVQBG"],null,null,null,null,null,[["GTM-5CVQBG",2]],1],null,null,null,null,null,1],"mwETRvWii0eU5NUYprb0Y9z5GVbc",4,null,null,null,null,null,null,null,null,null,null,null,null,null,"cloud.devsite.google"],null,"pk_live_5170syrHvgGVmSx9sBrnWtA5luvk9BwnVcvIi7HizpwauFG96WedXsuXh790rtij9AmGllqPtMLfhe2RSwD6Pn38V00uBCydV4m",1]') </script> <devsite-a11y-announce></devsite-a11y-announce> </body> </html>

CINXE.COM

Create an organization policy in dry-run mode | Resource Manager Documentation | Google Cloud