- NAME
-
- gcloud alpha network-security security-profile-groups update - update a Security Profile Group
- SYNOPSIS
-
-
gcloud alpha network-security security-profile-groups update(SECURITY_PROFILE_GROUP:--location=LOCATION--organization=ORGANIZATION) [--async] [--description=DESCRIPTION] [--update-labels=[KEY=VALUE,…]] [--clear-labels|--remove-labels=[KEY,…]] [--clear-threat-prevention-profile| [--threat-prevention-profile=THREAT_PREVENTION_PROFILE:--threat-prevention-profile-location=THREAT_PREVENTION_PROFILE_LOCATION--threat-prevention-profile-organization=THREAT_PREVENTION_PROFILE_ORGANIZATION--threat-prevention-profile-project=THREAT_PREVENTION_PROFILE_PROJECT]] [--clear-url-filtering-profile| [--url-filtering-profile=URL_FILTERING_PROFILE:--url-filtering-profile-location=URL_FILTERING_PROFILE_LOCATION--url-filtering-profile-organization=URL_FILTERING_PROFILE_ORGANIZATION--url-filtering-profile-project=URL_FILTERING_PROFILE_PROJECT]] [--clear-wildfire-analysis-profile| [--wildfire-analysis-profile=WILDFIRE_ANALYSIS_PROFILE:--wildfire-analysis-profile-location=WILDFIRE_ANALYSIS_PROFILE_LOCATION--wildfire-analysis-profile-organization=WILDFIRE_ANALYSIS_PROFILE_ORGANIZATION]] [GCLOUD_WIDE_FLAG …]
-
- DESCRIPTION
-
(ALPHA)Update details of a Security Profile Group. - EXAMPLES
-
To update a Security Profile Group with new threat prevention profile
my-new-security-profile, run:gcloud alpha network-security security-profile-groups update my-security-profile-group --organization=1234 --location=global --threat-prevention-profile=`organizations/1234/locations/global/securityProfiles/my-new-security-profile` --description='New Security Profile of type threat prevention' - POSITIONAL ARGUMENTS
-
-
Security profile group resource - Security Profile Group Name. The arguments in
this group can be used to specify the attributes of this resource. (NOTE) Some
attributes are not given arguments in this group but can be set in other ways.
To set the
projectattribute:-
provide the argument
security_profile_groupon the command line with a fully specified name; -
set the property
core/project. This resource can be one of the following types: [networksecurity.organizations.locations.securityProfileGroups, networksecurity.projects.locations.securityProfileGroups].
This must be specified.
SECURITY_PROFILE_GROUP-
ID of the security_profile_group or fully qualified identifier for the
security_profile_group.
To set the
security_profile_groupattribute:-
provide the argument
security_profile_groupon the command line.
This positional argument must be specified if any of the other arguments in this group are specified.
-
provide the argument
--location=LOCATION-
location of the security_profile_group - Global.
To set the
locationattribute:-
provide the argument
security_profile_groupon the command line with a fully specified name; -
provide the argument
--locationon the command line.
-
provide the argument
--organization=ORGANIZATION-
Organization ID of Security Profile Group
To set the
organizationattribute:-
provide the argument
security_profile_groupon the command line with a fully specified name; -
provide the argument
--organizationon the command line. Must be specified for resource of type [networksecurity.organizations.locations.securityProfileGroups].
-
provide the argument
-
provide the argument
-
Security profile group resource - Security Profile Group Name. The arguments in
this group can be used to specify the attributes of this resource. (NOTE) Some
attributes are not given arguments in this group but can be set in other ways.
- FLAGS
-
--async-
Return immediately, without waiting for the operation in progress to complete.
The default is
False. --description=DESCRIPTION- Brief description of the security profile group
--update-labels=[KEY=VALUE,…]-
List of label KEY=VALUE pairs to update. If a label exists, its value is
modified. Otherwise, a new label is created.
Keys must start with a lowercase character and contain only hyphens (
-), underscores (_), lowercase characters, and numbers. Values must contain only hyphens (-), underscores (_), lowercase characters, and numbers. -
At most one of these can be specified:
--clear-labels-
Remove all labels. If
--update-labelsis also specified then--clear-labelsis applied first.For example, to remove all labels:
gcloud alpha network-security security-profile-groups update --clear-labelsTo remove all existing labels and create two new labels,
andfoo:bazgcloud alpha network-security security-profile-groups update --clear-labels --update-labels foo=bar,baz=qux --remove-labels=[KEY,…]-
List of label keys to remove. If a label does not exist it is silently ignored.
If
--update-labelsis also specified then--update-labelsis applied first.
-
At most one of these can be specified:
--clear-threat-prevention-profile- Clear the threat-prevention-profile field.
-
Or at least one of these can be specified:
- Threat prevention profile resource - Path to Threat Prevention Profile resource. The arguments in this group can be used to specify the attributes of this resource. This resource can be one of the following types: [networksecurity.organizations.locations.securityProfiles, networksecurity.projects.locations.securityProfiles].
--threat-prevention-profile=THREAT_PREVENTION_PROFILE-
ID of the threat_prevention_profile or fully qualified identifier for the
threat_prevention_profile.
To set the
nameattribute:-
provide the argument
--threat-prevention-profileon the command line.
This flag argument must be specified if any of the other arguments in this group are specified.
-
provide the argument
--threat-prevention-profile-location=THREAT_PREVENTION_PROFILE_LOCATION-
Location of the threat_prevention_profile. NOTE: Only
globalsecurity profiles are supported. To set thelocationattribute:-
provide the argument
--threat-prevention-profileon the command line with a fully specified name; -
provide the argument
--threat-prevention-profile-locationon the command line; -
provide the argument
--security-profile-locationon the command line; -
provide the argument
--locationon the command line; -
provide the argument
security_profile_groupon the command line with a fully specified name.
-
provide the argument
--threat-prevention-profile-organization=THREAT_PREVENTION_PROFILE_ORGANIZATION-
Organization ID of the Security Profile.
To set the
organizationattribute:-
provide the argument
--threat-prevention-profileon the command line with a fully specified name; -
provide the argument
--threat-prevention-profile-organizationon the command line; -
provide the argument
--security-profile-organizationon the command line; -
provide the argument
--organizationon the command line; -
provide the argument
security_profile_groupon the command line with a fully specified name. Must be specified for resource of type [networksecurity.organizations.locations.securityProfiles].
-
provide the argument
--threat-prevention-profile-project=THREAT_PREVENTION_PROFILE_PROJECT-
Project ID of the threat_prevention_profile.
To set the
projectattribute:-
provide the argument
--threat-prevention-profileon the command line with a fully specified name; -
provide the argument
--threat-prevention-profile-projecton the command line; -
set the property
core/project; -
provide the argument
security_profile_groupon the command line with a fully specified name. Must be specified for resource of type [networksecurity.projects.locations.securityProfiles].
-
provide the argument
-
At most one of these can be specified:
--clear-url-filtering-profile- Clear the url-filtering-profile field.
-
Or at least one of these can be specified:
- Url filtering profile resource - Path to URL Filtering Profile resource. The arguments in this group can be used to specify the attributes of this resource. This resource can be one of the following types: [networksecurity.organizations.locations.securityProfiles, networksecurity.projects.locations.securityProfiles].
--url-filtering-profile=URL_FILTERING_PROFILE-
ID of the url_filtering_profile or fully qualified identifier for the
url_filtering_profile.
To set the
nameattribute:-
provide the argument
--url-filtering-profileon the command line.
This flag argument must be specified if any of the other arguments in this group are specified.
-
provide the argument
--url-filtering-profile-location=URL_FILTERING_PROFILE_LOCATION-
Location of the url_filtering_profile. NOTE: Only
globalsecurity profiles are supported. To set thelocationattribute:-
provide the argument
--url-filtering-profileon the command line with a fully specified name; -
provide the argument
--url-filtering-profile-locationon the command line; -
provide the argument
--locationon the command line; -
provide the argument
security_profile_groupon the command line with a fully specified name.
-
provide the argument
--url-filtering-profile-organization=URL_FILTERING_PROFILE_ORGANIZATION-
Organization ID of the Security Profile.
To set the
organizationattribute:-
provide the argument
--url-filtering-profileon the command line with a fully specified name; -
provide the argument
--url-filtering-profile-organizationon the command line; -
provide the argument
--organizationon the command line; -
provide the argument
security_profile_groupon the command line with a fully specified name. Must be specified for resource of type [networksecurity.organizations.locations.securityProfiles].
-
provide the argument
--url-filtering-profile-project=URL_FILTERING_PROFILE_PROJECT-
Project ID of the url_filtering_profile.
To set the
projectattribute:-
provide the argument
--url-filtering-profileon the command line with a fully specified name; -
provide the argument
--url-filtering-profile-projecton the command line; -
set the property
core/project; -
provide the argument
security_profile_groupon the command line with a fully specified name. Must be specified for resource of type [networksecurity.projects.locations.securityProfiles].
-
provide the argument
-
At most one of these can be specified:
--clear-wildfire-analysis-profile- Clear the wildfire-analysis-profile field.
-
Or at least one of these can be specified:
- Wildfire analysis profile resource - Path to Wildfire Analysis Profile resource. The arguments in this group can be used to specify the attributes of this resource. This resource can be one of the following types: [wildfire_analysis_profile].
--wildfire-analysis-profile=WILDFIRE_ANALYSIS_PROFILE-
ID of the wildfire_analysis_profile or fully qualified identifier for the
wildfire_analysis_profile.
To set the
nameattribute:-
provide the argument
--wildfire-analysis-profileon the command line.
This flag argument must be specified if any of the other arguments in this group are specified.
-
provide the argument
--wildfire-analysis-profile-location=WILDFIRE_ANALYSIS_PROFILE_LOCATION-
Location of the wildfire_analysis_profile. NOTE: Only
globalsecurity profiles are supported. To set thelocationattribute:-
provide the argument
--wildfire-analysis-profileon the command line with a fully specified name; -
provide the argument
--wildfire-analysis-profile-locationon the command line; -
provide the argument
--locationon the command line; -
provide the argument
security_profile_groupon the command line with a fully specified name.
-
provide the argument
--wildfire-analysis-profile-organization=WILDFIRE_ANALYSIS_PROFILE_ORGANIZATION-
Organization ID of the Security Profile.
To set the
organizationattribute:-
provide the argument
--wildfire-analysis-profileon the command line with a fully specified name; -
provide the argument
--wildfire-analysis-profile-organizationon the command line; -
provide the argument
--organizationon the command line; -
provide the argument
security_profile_groupon the command line with a fully specified name.
-
provide the argument
- GCLOUD WIDE FLAGS
-
These flags are available to all commands:
--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.Run
$ gcloud helpfor details. - NOTES
-
This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct project,
you might be trying to access an API with an invitation-only early access
allowlist. These variants are also available:
gcloud network-security security-profile-groups updategcloud beta network-security security-profile-groups update
gcloud alpha network-security security-profile-groups update
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-02-10 UTC.