iam.allowedPolicyMemberDomains

gcloud org-policies describe iam.allowedPolicyMemberDomains --organization=1234567890
API [orgpolicy.googleapis.com] not enabled on project
[YOUR_PROYECT]. Would you like to enable and retry (this will take a few minutes)? (y/N)? 

• Restrict identities with domain-restricted sharing

gcloud organizations describe

gcloud organizations [ add-iam-policy-binding | list | describe ], gcloud org-policies