# Ccloud\> kafka acl create - invalid operational value **URL:** \ **Category:** Command Line tools\ **Created:** [19 February 2021 04:34 UTC](https://forum.confluent.io/t/ccloud-kafka-acl-create-invalid-operational-value/952 "2021-02-19T04:34:05Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![solaris007](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.confluent.io/solaris007/32/510_2.png) [@solaris007](https://forum.confluent.io/u/solaris007)\ **Post date:** [19 February 2021 04:34 UTC](https://forum.confluent.io/t/ccloud-kafka-acl-create-invalid-operational-value/952/1 "2021-02-19T04:34:05Z")
Hi community! has anyone ever tried to create ACLs with ccloud ? I am consistently getting `Error: invalid operation value: []`no matter the command arguments. lets check the help first (after login): ```auto ccloud > kafka acl create -h Create a Kafka ACL. Usage: ccloud kafka acl create [flags] Examples: You can only specify one of these flags per command invocation: ``cluster``, ``consumer-group``, ``topic``, or ``transactional-id``. For example, if you want to specify both ``consumer-group`` and ``topic``, you must specify this as two separate commands: :: ccloud kafka acl create --allow --service-account 1522 --operation READ --consumer-group java_example_group_1 ccloud kafka acl create --allow --service-account 1522 --operation READ --topic '*' ``` paste the given example: ```auto ccloud > kafka acl create --allow --service-account 1522 --operation READ --topic '*' Error: invalid operation value: [] ``` ok, maybe the error is because the service-account ID doesn’t exist. lets list the accounts: ```auto ccloud > service-account list Id | Name | Description +--------+------------------+-------------+ 1 **416 | dev-*** | 1 **417 | stage-*** | 1 **418 | dev-*** | 1 **419 | stage-*** | 1 **420 | dev-*** | 1 **421 | stage-*** | ``` lets try again with existing service-account: ```auto ccloud > kafka acl create --allow --service-account 1**416 --operation READ --topic '*' Error: invalid operation value: [] ``` happens on latest client: ```auto ccloud > version ccloud - Confluent Cloud CLI Version: v1.22.0 Git Ref: a1da818c Build Date: 2021-01-20T21:32:56Z Go Version: go1.15.5 (darwin/amd64) Development: false ``` ---
**Author:** ![jamie](https://avatars.discourse-cdn.com/v4/letter/j/aca169/32.png) [@jamie](https://forum.confluent.io/u/jamie)\ **Post date:** [25 February 2021 16:50 UTC](https://forum.confluent.io/t/ccloud-kafka-acl-create-invalid-operational-value/952/2 "2021-02-25T16:50:01Z")
I was able to repro this using v1.22.1. A workaround is to declare the environment and cluster IDs: `ccloud > kafka acl create --allow --service-account --operation READ --topic '*' --environment --cluster ` ---
**Author:** ![DABH](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.confluent.io/dabh/32/596_2.png) [@DABH](https://forum.confluent.io/u/DABH)\ **Post date:** [8 March 2021 06:48 UTC](https://forum.confluent.io/t/ccloud-kafka-acl-create-invalid-operational-value/952/3 "2021-03-08T06:48:58Z")
Hi @solaris007 @jamie ! Just a heads up that the underlying issue has been fixed to the best of my knowledge, and the next CLI version (which will be v1.24.0) should include the fix. Please keep an eye out for that update, and please feel free to follow up if you still encounter the issue afterwards. Thanks again for reporting the bug! ---
**Author:** ![solaris007](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.confluent.io/solaris007/32/510_2.png) [@solaris007](https://forum.confluent.io/u/solaris007)\ **Post date:** [8 March 2021 07:18 UTC](https://forum.confluent.io/t/ccloud-kafka-acl-create-invalid-operational-value/952/4 "2021-03-08T07:18:18Z")
@DABH thanks for the fix! we’ll test it and report back if any issues are found.