Privileged Access Manager v1 API - Class PrivilegedAccessManager (1.0.0-beta01)

public static class PrivilegedAccessManager

Reference documentation and code samples for the Privileged Access Manager v1 API class PrivilegedAccessManager.

This API allows customers to manage temporary, request based privileged access to their resources.

It defines the following resource model:

  • A collection of Entitlement resources. An entitlement allows configuring (among other things):

    • Some kind of privileged access that users can request.
    • A set of users called requesters who can request this access.
    • A maximum duration for which the access can be requested.
    • An optional approval workflow which must be satisfied before access is granted.
  • A collection of Grant resources. A grant is a request by a requester to get the privileged access specified in an entitlement for some duration.

    After the approval workflow as specified in the entitlement is satisfied, the specified access is given to the requester. The access is automatically taken back after the requested duration is over.

Inheritance

object > PrivilegedAccessManager

Namespace

Google.Cloud.PrivilegedAccessManager.V1

Assembly

Google.Cloud.PrivilegedAccessManager.V1.dll

Methods

BindService(PrivilegedAccessManagerBase)

public static ServerServiceDefinition BindService(PrivilegedAccessManager.PrivilegedAccessManagerBase serviceImpl)

Creates service definition that can be registered with a server

Parameter
Name Description
serviceImpl PrivilegedAccessManagerPrivilegedAccessManagerBase

An object implementing the server-side handling logic.

Returns
Type Description
ServerServiceDefinition

BindService(ServiceBinderBase, PrivilegedAccessManagerBase)

public static void BindService(ServiceBinderBase serviceBinder, PrivilegedAccessManager.PrivilegedAccessManagerBase serviceImpl)

Register service method with a service binder with or without implementation. Useful when customizing the service binding logic. Note: this method is part of an experimental API that can change or be removed without any prior notice.

Parameters
Name Description
serviceBinder ServiceBinderBase

Service methods will be bound by calling AddMethod on this object.

serviceImpl PrivilegedAccessManagerPrivilegedAccessManagerBase

An object implementing the server-side handling logic.