google cloud platform – Can’t create an IAP group – BeyondCorp Enterprise SKU is not enabled

I’m just going through the official doc: cloud.google.com/iap/docs/tcp-by-host#overview

I enabled all the APIs per the CLI’s request, but it keeps saying ERROR: (gcloud.iap.tcp.dest-groups.create) FAILED_PRECONDITION: BeyondCorp Enterprise SKU is not enabled..

This command returns that error:

gcloud iap tcp dest-groups create sdfsdf --region="us-central1" --project "myproj"

And the UI just says:

Failed to create destination group.
The attempted action failed, please try again.

But I confirmed both the IAP and BeyondCorp API are enabled.

Read more here: Source link