Classes
AccessTuple
Information about the principal, resource, and permission to check.
AllowBindingExplanation
Details about how a role binding in an allow policy affects a principal's ability to use a permission.
AllowBindingExplanation.Types
Container for nested types declared in the AllowBindingExplanation message type.
AllowBindingExplanation.Types.AnnotatedAllowMembership
Details about whether the role binding includes the principal.
AllowPolicyExplanation
Details about how the relevant IAM allow policies affect the final access state.
ConditionContext
Additional context for troubleshooting conditional role bindings and deny rules.
ConditionContext.Types
Container for nested types declared in the ConditionContext message type.
ConditionContext.Types.EffectiveTag
A tag that applies to a resource during policy evaluation. Tags can be
either directly bound to a resource or inherited from its ancestor.
EffectiveTag contains the name and namespaced_name of the tag value
and tag key, with additional fields of inherited to indicate the
inheritance status of the effective tag.
ConditionContext.Types.Peer
This message defines attributes for a node that handles a network request.
The node can be either a service or an application that sends, forwards,
or receives the request. Service peers should fill in
principal and labels as appropriate.
ConditionContext.Types.Request
This message defines attributes for an HTTP request. If the actual request is not an HTTP request, the runtime system should try to map the actual request to an equivalent HTTP request.
ConditionContext.Types.Resource
Core attributes for a resource. A resource is an addressable (named) entity provided by the destination service. For example, a Compute Engine instance.
ConditionExplanation
Explanation for how a condition affects a principal's access
ConditionExplanation.Types
Container for nested types declared in the ConditionExplanation message type.
ConditionExplanation.Types.EvaluationState
Evaluated state of a condition expression.
DenyPolicyExplanation
Details about how the relevant IAM deny policies affect the final access state.
DenyRuleExplanation
Details about how a deny rule in a deny policy affects a principal's ability to use a permission.
DenyRuleExplanation.Types
Container for nested types declared in the DenyRuleExplanation message type.
DenyRuleExplanation.Types.AnnotatedDenyPrincipalMatching
Details about whether the principal in the request is listed as a denied principal in the deny rule, either directly or through membership in a principal set.
DenyRuleExplanation.Types.AnnotatedPermissionMatching
Details about whether the permission in the request is denied by the deny rule.
ExplainedAllowPolicy
Details about how a specific IAM allow policy contributed to the final access state.
ExplainedDenyPolicy
Details about how a specific IAM deny policy [Policy][google.iam.v2.Policy] contributed to the access check.
ExplainedDenyResource
Details about how a specific resource contributed to the deny policy evaluation.
PolicyTroubleshooter
IAM Policy Troubleshooter service.
This service helps you troubleshoot access issues for Google Cloud resources.
PolicyTroubleshooter.PolicyTroubleshooterBase
Base class for server-side implementations of PolicyTroubleshooter
PolicyTroubleshooter.PolicyTroubleshooterClient
Client for PolicyTroubleshooter
PolicyTroubleshooterClient
PolicyTroubleshooter client wrapper, for convenient use.
PolicyTroubleshooterClientBuilder
Builder class for PolicyTroubleshooterClient to provide simple configuration of credentials, endpoint etc.
PolicyTroubleshooterClientImpl
PolicyTroubleshooter client wrapper implementation, for convenient use.
PolicyTroubleshooterSettings
Settings for PolicyTroubleshooterClient instances.
TroubleshootIamPolicyRequest
Request for [TroubleshootIamPolicy][google.cloud.policytroubleshooter.iam.v3.PolicyTroubleshooter.TroubleshootIamPolicy].
TroubleshootIamPolicyResponse
Response for [TroubleshootIamPolicy][google.cloud.policytroubleshooter.iam.v3.PolicyTroubleshooter.TroubleshootIamPolicy].
TroubleshootIamPolicyResponse.Types
Container for nested types declared in the TroubleshootIamPolicyResponse message type.
Enums
AllowAccessState
Whether IAM allow policies gives the principal the permission.
DenyAccessState
Whether IAM deny policies deny the principal the permission.
HeuristicRelevance
The extent to which a single data point contributes to an overall determination.
MembershipMatchingState
Whether the principal in the request matches the principal in the policy.
PermissionPatternMatchingState
Whether the permission in the request matches the permission in the policy.
RolePermissionInclusionState
Whether a role includes a specific permission.
TroubleshootIamPolicyResponse.Types.OverallAccessState
Whether the principal has the permission on the resource.