Delete realms and attachments

This document explains how to delete realms and attachments. After you create a realm, you can't edit it. If you want to make changes to the realm, you must delete it and create a new realm.

Required roles

• For all SSE providers:
  

  To get the permissions that you need to delete realms and attachments, ask your administrator to grant you the Compute Network Admin (roles/compute.networkAdmin) IAM role on the project. For more information about granting roles, see Manage access to projects, folders, and organizations.

  You might also be able to get the required permissions through custom roles or other predefined roles.

• For Symantec Cloud SWG (Public preview):
  

  To ensure that Network Security Service Account has the necessary permissions to delete attachments and their corresponding Symantec locations, ask your administrator to grant the Secret Manager Secret Accessor (roles/secretmanager.secretAccessor) IAM role to Network Security Service Account on the project.

  Important: You must grant this role to Network Security Service Account, not to your user account. Failure to grant the role to the correct principal might result in permission errors.
  For more information about granting roles, see Manage access to projects, folders, and organizations.

  Your administrator might also be able to give Network Security Service Account the required permissions through custom roles or other predefined roles.

  Additionally, make sure that the API credentials you stored in Secret Manager when you created the realm are still valid. If the credentials aren't valid, create and upload a new API key.

Delete attachments

To delete attachments, do the following.

Note: If you use Symantec Cloud SWG (Public preview), deleting an attachment also deletes the Symantec location that is connected to the attachment.

Console

1. In the Google Cloud console, go to the Secure Access Connect Attachments page.

   Go to Secure Access Connect Attachments

2. Select the attachment that you want to delete.

3. Click Delete.

gcloud

Run the gcloud network-security secure-access-connect attachments delete command:

gcloud network-security secure-access-connect attachments delete ATTACHMENT_ID \
    --project=PROJECT_ID \
    --location=REGION

Replace the following:

• ATTACHMENT_ID: the attachment ID
• PROJECT_ID: the project that contains the attachment
• REGION: the region where the attachment is located

API

Use the projects.locations.sacAttachments.delete method

DELETE https://networksecurity.googleapis.com/v1/{name=project/PROJECT_ID/locations/REGION}/sacAttachments/ATTACHMENT_ID

Replace the following:

• PROJECT_ID: the project that contains the attachment
• REGION: the region where the attachment is located
• ATTACHMENT_ID: the attachment ID

Delete realms

You must delete all attachments before you can delete a realm. To delete a realm, do the following.

Console

1. In the Google Cloud console, go to the Secure Access Connect page.

   Go to Secure Access Connect Realms

2. Choose the realm that you want to delete.

3. Click Delete.

gcloud

Run the gcloud network-security secure-access-connect realms delete command:

gcloud network-security secure-access-connect realms delete REALM_ID \
    --project=PROJECT_ID

Replace the following:

• REALM_ID: the realm ID
• PROJECT_ID: the project that contains the realm

API

Use the projects.locations.sacRealms.delete method

DELETE https://networksecurity.googleapis.com/v1/project/PROJECT_ID/locations/global/sacRealms/REALM_ID

Replace the following:

• PROJECT_ID: the project that contains the realm
• REALM_ID: the realm ID