http4s-grpc-google-iam-v1
1.14.0+0.0.5
API
Generated with
http4s-grpc-google-iam-v1/com.google.iam.v1.policy

com.google.iam.v1.policy

package com.google.iam.v1.policy

Members list

Concise view

Type members

Classlikes

final case class AuditConfigDelta(action: Action, service: String, exemptedMember: String, logType: String, unknownFields: UnknownFieldSet) extends GeneratedMessage with Updatable[AuditConfigDelta]

One delta entry for AuditConfig. Each individual change (only one exempted_member in each entry) to a AuditConfig will be a separate entry.

One delta entry for AuditConfig. Each individual change (only one exempted_member in each entry) to a AuditConfig will be a separate entry.

Attributes

action

The action that was performed on an audit configuration in a policy. Required

exemptedMember

A single identity that is exempted from "data access" audit logging for the service specified above. Follows the same format of Binding.members.

logType

Specifies the log_type that was be enabled. ADMIN_ACTIVITY is always enabled, and cannot be configured. Required

service

Specifies a service that was configured for Cloud Audit Logging. For example, storage.googleapis.com, cloudsql.googleapis.com. allServices is a special value that covers all services. Required

Companion:
object
Source:
AuditConfigDelta.scala
Graph
Supertypes
trait Updatable[AuditConfigDelta]
trait GeneratedMessage
trait Serializable
trait Product
trait Equals
class Object
trait Matchable
class Any
object AuditConfigDelta extends GeneratedMessageCompanion[AuditConfigDelta]

Attributes

Companion:
class
Source:
AuditConfigDelta.scala
Graph
Supertypes
trait Product
trait Mirror
trait GeneratedMessageCompanion[AuditConfigDelta]
trait Serializable
class Object
trait Matchable
class Any
Self type
final case class Binding(role: String, members: Seq[String], condition: Option[Expr], unknownFields: UnknownFieldSet) extends GeneratedMessage with Updatable[Binding]

Associates members with a role.

Associates members with a role.

Attributes

condition

The condition that is associated with this binding. NOTE: An unsatisfied condition will not allow user access via current binding. Different bindings, including their conditions, are examined independently.

members

Specifies the identities requesting access for a Cloud Platform resource. members can have the following values:

  • allUsers: A special identifier that represents anyone who is on the internet; with or without a Google account.
  • allAuthenticatedUsers: A special identifier that represents anyone who is authenticated with a Google account or a service account.
  • user:{emailid}: An email address that represents a specific Google account. For example, alice@example.com .
  • serviceAccount:{emailid}: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
  • group:{emailid}: An email address that represents a Google group. For example, admins@example.com.
  • domain:{domain}: The G Suite domain (primary) that represents all the users of that domain. For example, google.com or example.com.
role

Role that is assigned to members. For example, roles/viewer, roles/editor, or roles/owner.

Companion:
object
Source:
Binding.scala
Graph
Supertypes
trait Updatable[Binding]
trait GeneratedMessage
trait Serializable
trait Product
trait Equals
class Object
trait Matchable
class Any
object Binding extends GeneratedMessageCompanion[Binding]

Attributes

Companion:
class
Source:
Binding.scala
Graph
Supertypes
trait Product
trait Mirror
trait GeneratedMessageCompanion[Binding]
trait Serializable
class Object
trait Matchable
class Any
Self type
Binding.type
final case class BindingDelta(action: Action, role: String, member: String, condition: Option[Expr], unknownFields: UnknownFieldSet) extends GeneratedMessage with Updatable[BindingDelta]

One delta entry for Binding. Each individual change (only one member in each entry) to a binding will be a separate entry.

One delta entry for Binding. Each individual change (only one member in each entry) to a binding will be a separate entry.

Attributes

action

The action that was performed on a Binding. Required

condition

The condition that is associated with this binding.

member

A single identity requesting access for a Cloud Platform resource. Follows the same format of Binding.members. Required

role

Role that is assigned to members. For example, roles/viewer, roles/editor, or roles/owner. Required

Companion:
object
Source:
BindingDelta.scala
Graph
Supertypes
trait Updatable[BindingDelta]
trait GeneratedMessage
trait Serializable
trait Product
trait Equals
class Object
trait Matchable
class Any
object BindingDelta extends GeneratedMessageCompanion[BindingDelta]

Attributes

Companion:
class
Source:
BindingDelta.scala
Graph
Supertypes
trait Product
trait Mirror
trait GeneratedMessageCompanion[BindingDelta]
trait Serializable
class Object
trait Matchable
class Any
Self type
final case class Policy(version: Int, bindings: Seq[Binding], etag: ByteString, unknownFields: UnknownFieldSet) extends GeneratedMessage with Updatable[Policy]

Defines an Identity and Access Management (IAM) policy. It is used to specify access control policies for Cloud Platform resources.

Defines an Identity and Access Management (IAM) policy. It is used to specify access control policies for Cloud Platform resources.

A Policy is a collection of bindings. A binding binds one or more members to a single role. Members can be user accounts, service accounts, Google groups, and domains (such as G Suite). A role is a named list of permissions (defined by IAM or configured by users). A binding can optionally specify a condition, which is a logic expression that further constrains the role binding based on attributes about the request and/or target resource.

JSON Example

{ "bindings": [ { "role": "roles/resourcemanager.organizationAdmin", "members": [ "user:[email protected]", "group:[email protected]", "domain:google.com", "serviceAccount:[email protected]" ] }, { "role": "roles/resourcemanager.organizationViewer", "members": ["user:[email protected]"], "condition": { "title": "expirable access", "description": "Does not grant access after Sep 2020", "expression": "request.time < timestamp('2020-10-01T00:00:00.000Z')", } } ] }

YAML Example

bindings:

  • members:
  • members:
    • user:[email protected] role: roles/resourcemanager.organizationViewer condition: title: expirable access description: Does not grant access after Sep 2020 expression: request.time < timestamp('2020-10-01T00:00:00.000Z')

For a description of IAM and its features, see the IAM developer's guide.

Attributes

bindings

Associates a list of members to a role. Optionally may specify a condition that determines when binding is in effect. bindings with no members will result in an error.

etag

etag is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the etag in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An etag is returned in the response to getIamPolicy, and systems are expected to put that etag in the request to setIamPolicy to ensure that their change will be applied to the same version of the policy. If no etag is provided in the call to setIamPolicy, then the existing policy is overwritten. Due to blind-set semantics of an etag-less policy, 'setIamPolicy' will not fail even if either of incoming or stored policy does not meet the version requirements.

version

Specifies the format of the policy. Valid values are 0, 1, and 3. Requests specifying an invalid value will be rejected. Operations affecting conditional bindings must specify version 3. This can be either setting a conditional policy, modifying a conditional binding, or removing a conditional binding from the stored conditional policy. Operations on non-conditional policies may specify any valid value or leave the field unset. If no etag is provided in the call to setIamPolicy, any version compliance checks on the incoming and/or stored policy is skipped.

Companion:
object
Source:
Policy.scala
Graph
Supertypes
trait Updatable[Policy]
trait GeneratedMessage
trait Serializable
trait Product
trait Equals
class Object
trait Matchable
class Any
object Policy extends GeneratedMessageCompanion[Policy]

Attributes

Companion:
class
Source:
Policy.scala
Graph
Supertypes
trait Product
trait Mirror
trait GeneratedMessageCompanion[Policy]
trait Serializable
class Object
trait Matchable
class Any
Self type
Policy.type
final case class PolicyDelta(bindingDeltas: Seq[BindingDelta], auditConfigDeltas: Seq[AuditConfigDelta], unknownFields: UnknownFieldSet) extends GeneratedMessage with Updatable[PolicyDelta]

The difference delta between two policies.

The difference delta between two policies.

Attributes

auditConfigDeltas

The delta for AuditConfigs between two policies.

bindingDeltas

The delta for Bindings between two policies.

Companion:
object
Source:
PolicyDelta.scala
Graph
Supertypes
trait Updatable[PolicyDelta]
trait GeneratedMessage
trait Serializable
trait Product
trait Equals
class Object
trait Matchable
class Any
object PolicyDelta extends GeneratedMessageCompanion[PolicyDelta]

Attributes

Companion:
class
Source:
PolicyDelta.scala
Graph
Supertypes
trait Product
trait Mirror
trait GeneratedMessageCompanion[PolicyDelta]
trait Serializable
class Object
trait Matchable
class Any
Self type
object PolicyProto extends GeneratedFileObject

Attributes

Source:
PolicyProto.scala
Graph
Supertypes
class GeneratedFileObject
class Object
trait Matchable
class Any
Self type
Generated with