Package cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb (v1.7.1)

Version latest

• 1.5.0 (latest)
• 1.4.0

Note: To get more information about this package, such as access to older versions, view this package on pkg.go.dev.

Variables

LevelFormat_name, LevelFormat_value

var (
	LevelFormat_name = map[int32]string{
		0: "LEVEL_FORMAT_UNSPECIFIED",
		1: "AS_DEFINED",
		2: "CEL",
	}
	LevelFormat_value = map[string]int32{
		"LEVEL_FORMAT_UNSPECIFIED": 0,
		"AS_DEFINED":               1,
		"CEL":                      2,
	}
)

Enum value maps for LevelFormat.

BasicLevel_ConditionCombiningFunction_name, BasicLevel_ConditionCombiningFunction_value

var (
	BasicLevel_ConditionCombiningFunction_name = map[int32]string{
		0: "AND",
		1: "OR",
	}
	BasicLevel_ConditionCombiningFunction_value = map[string]int32{
		"AND": 0,
		"OR":  1,
	}
)

Enum value maps for BasicLevel_ConditionCombiningFunction.

ServicePerimeter_PerimeterType_name, ServicePerimeter_PerimeterType_value

var (
	ServicePerimeter_PerimeterType_name = map[int32]string{
		0: "PERIMETER_TYPE_REGULAR",
		1: "PERIMETER_TYPE_BRIDGE",
	}
	ServicePerimeter_PerimeterType_value = map[string]int32{
		"PERIMETER_TYPE_REGULAR": 0,
		"PERIMETER_TYPE_BRIDGE":  1,
	}
)

Enum value maps for ServicePerimeter_PerimeterType.

ServicePerimeterConfig_IdentityType_name, ServicePerimeterConfig_IdentityType_value

var (
	ServicePerimeterConfig_IdentityType_name = map[int32]string{
		0: "IDENTITY_TYPE_UNSPECIFIED",
		1: "ANY_IDENTITY",
		2: "ANY_USER_ACCOUNT",
		3: "ANY_SERVICE_ACCOUNT",
	}
	ServicePerimeterConfig_IdentityType_value = map[string]int32{
		"IDENTITY_TYPE_UNSPECIFIED": 0,
		"ANY_IDENTITY":              1,
		"ANY_USER_ACCOUNT":          2,
		"ANY_SERVICE_ACCOUNT":       3,
	}
)

Enum value maps for ServicePerimeterConfig_IdentityType.

File_google_identity_accesscontextmanager_v1_access_context_manager_proto

var File_google_identity_accesscontextmanager_v1_access_context_manager_proto protoreflect.FileDescriptor

File_google_identity_accesscontextmanager_v1_access_level_proto

var File_google_identity_accesscontextmanager_v1_access_level_proto protoreflect.FileDescriptor

File_google_identity_accesscontextmanager_v1_access_policy_proto

var File_google_identity_accesscontextmanager_v1_access_policy_proto protoreflect.FileDescriptor

File_google_identity_accesscontextmanager_v1_gcp_user_access_binding_proto

var File_google_identity_accesscontextmanager_v1_gcp_user_access_binding_proto protoreflect.FileDescriptor

File_google_identity_accesscontextmanager_v1_service_perimeter_proto

var File_google_identity_accesscontextmanager_v1_service_perimeter_proto protoreflect.FileDescriptor

Functions

func RegisterAccessContextManagerServer

func RegisterAccessContextManagerServer(s *grpc.Server, srv AccessContextManagerServer)

AccessContextManagerClient

type AccessContextManagerClient interface {
	// Lists all [access policies]
	// [google.identity.accesscontextmanager.v1.AccessPolicy] in an
	// organization.
	ListAccessPolicies(ctx context.Context, in *ListAccessPoliciesRequest, opts ...grpc.CallOption) (*ListAccessPoliciesResponse, error)
	// Returns an [access policy]
	// [google.identity.accesscontextmanager.v1.AccessPolicy] based on the name.
	GetAccessPolicy(ctx context.Context, in *GetAccessPolicyRequest, opts ...grpc.CallOption) (*AccessPolicy, error)
	// Creates an access policy. This method fails if the organization already has
	// an access policy. The long-running operation has a successful status
	// after the access policy propagates to long-lasting storage.
	// Syntactic and basic semantic errors are returned in `metadata` as a
	// BadRequest proto.
	CreateAccessPolicy(ctx context.Context, in *AccessPolicy, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Updates an [access policy]
	// [google.identity.accesscontextmanager.v1.AccessPolicy]. The
	// long-running operation from this RPC has a successful status after the
	// changes to the [access policy]
	// [google.identity.accesscontextmanager.v1.AccessPolicy] propagate
	// to long-lasting storage.
	UpdateAccessPolicy(ctx context.Context, in *UpdateAccessPolicyRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Deletes an [access policy]
	// [google.identity.accesscontextmanager.v1.AccessPolicy] based on the
	// resource name. The long-running operation has a successful status after the
	// [access policy] [google.identity.accesscontextmanager.v1.AccessPolicy]
	// is removed from long-lasting storage.
	DeleteAccessPolicy(ctx context.Context, in *DeleteAccessPolicyRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Lists all [access levels]
	// [google.identity.accesscontextmanager.v1.AccessLevel] for an access
	// policy.
	ListAccessLevels(ctx context.Context, in *ListAccessLevelsRequest, opts ...grpc.CallOption) (*ListAccessLevelsResponse, error)
	// Gets an [access level]
	// [google.identity.accesscontextmanager.v1.AccessLevel] based on the resource
	// name.
	GetAccessLevel(ctx context.Context, in *GetAccessLevelRequest, opts ...grpc.CallOption) (*AccessLevel, error)
	// Creates an [access level]
	// [google.identity.accesscontextmanager.v1.AccessLevel]. The long-running
	// operation from this RPC has a successful status after the [access
	// level] [google.identity.accesscontextmanager.v1.AccessLevel]
	// propagates to long-lasting storage. If [access levels]
	// [google.identity.accesscontextmanager.v1.AccessLevel] contain
	// errors, an error response is returned for the first error encountered.
	CreateAccessLevel(ctx context.Context, in *CreateAccessLevelRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Updates an [access level]
	// [google.identity.accesscontextmanager.v1.AccessLevel]. The long-running
	// operation from this RPC has a successful status after the changes to
	// the [access level]
	// [google.identity.accesscontextmanager.v1.AccessLevel] propagate
	// to long-lasting storage. If [access levels]
	// [google.identity.accesscontextmanager.v1.AccessLevel] contain
	// errors, an error response is returned for the first error encountered.
	UpdateAccessLevel(ctx context.Context, in *UpdateAccessLevelRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Deletes an [access level]
	// [google.identity.accesscontextmanager.v1.AccessLevel] based on the resource
	// name. The long-running operation from this RPC has a successful status
	// after the [access level]
	// [google.identity.accesscontextmanager.v1.AccessLevel] has been removed
	// from long-lasting storage.
	DeleteAccessLevel(ctx context.Context, in *DeleteAccessLevelRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Replaces all existing [access levels]
	// [google.identity.accesscontextmanager.v1.AccessLevel] in an [access
	// policy] [google.identity.accesscontextmanager.v1.AccessPolicy] with
	// the [access levels]
	// [google.identity.accesscontextmanager.v1.AccessLevel] provided. This
	// is done atomically. The long-running operation from this RPC has a
	// successful status after all replacements propagate to long-lasting
	// storage. If the replacement contains errors, an error response is returned
	// for the first error encountered.  Upon error, the replacement is cancelled,
	// and existing [access levels]
	// [google.identity.accesscontextmanager.v1.AccessLevel] are not
	// affected. The Operation.response field contains
	// ReplaceAccessLevelsResponse. Removing [access levels]
	// [google.identity.accesscontextmanager.v1.AccessLevel] contained in existing
	// [service perimeters]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] result in an
	// error.
	ReplaceAccessLevels(ctx context.Context, in *ReplaceAccessLevelsRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Lists all [service perimeters]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] for an
	// access policy.
	ListServicePerimeters(ctx context.Context, in *ListServicePerimetersRequest, opts ...grpc.CallOption) (*ListServicePerimetersResponse, error)
	// Gets a [service perimeter]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] based on the
	// resource name.
	GetServicePerimeter(ctx context.Context, in *GetServicePerimeterRequest, opts ...grpc.CallOption) (*ServicePerimeter, error)
	// Creates a [service perimeter]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter]. The
	// long-running operation from this RPC has a successful status after the
	// [service perimeter]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter]
	// propagates to long-lasting storage. If a [service perimeter]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] contains
	// errors, an error response is returned for the first error encountered.
	CreateServicePerimeter(ctx context.Context, in *CreateServicePerimeterRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Updates a [service perimeter]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter]. The
	// long-running operation from this RPC has a successful status after the
	// [service perimeter]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter]
	// propagates to long-lasting storage. If a [service perimeter]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] contains
	// errors, an error response is returned for the first error encountered.
	UpdateServicePerimeter(ctx context.Context, in *UpdateServicePerimeterRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Deletes a [service perimeter]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] based on the
	// resource name. The long-running operation from this RPC has a successful
	// status after the [service perimeter]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] is removed from
	// long-lasting storage.
	DeleteServicePerimeter(ctx context.Context, in *DeleteServicePerimeterRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Replace all existing [service perimeters]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] in an [access
	// policy] [google.identity.accesscontextmanager.v1.AccessPolicy] with the
	// [service perimeters]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] provided. This
	// is done atomically. The long-running operation from this RPC has a
	// successful status after all replacements propagate to long-lasting storage.
	// Replacements containing errors result in an error response for the first
	// error encountered. Upon an error, replacement are cancelled and existing
	// [service perimeters]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] are not
	// affected. The Operation.response field contains
	// ReplaceServicePerimetersResponse.
	ReplaceServicePerimeters(ctx context.Context, in *ReplaceServicePerimetersRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Commits the dry-run specification for all the [service perimeters]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] in an
	// [access policy][google.identity.accesscontextmanager.v1.AccessPolicy].
	// A commit operation on a service perimeter involves copying its `spec` field
	// to the `status` field of the service perimeter. Only [service perimeters]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] with
	// `use_explicit_dry_run_spec` field set to true are affected by a commit
	// operation. The long-running operation from this RPC has a successful
	// status after the dry-run specifications for all the [service perimeters]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] have been
	// committed. If a commit fails, it causes the long-running operation to
	// return an error response and the entire commit operation is cancelled.
	// When successful, the Operation.response field contains
	// CommitServicePerimetersResponse. The `dry_run` and the `spec` fields are
	// cleared after a successful commit operation.
	CommitServicePerimeters(ctx context.Context, in *CommitServicePerimetersRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Lists all [GcpUserAccessBindings]
	// [google.identity.accesscontextmanager.v1.GcpUserAccessBinding] for a
	// Google Cloud organization.
	ListGcpUserAccessBindings(ctx context.Context, in *ListGcpUserAccessBindingsRequest, opts ...grpc.CallOption) (*ListGcpUserAccessBindingsResponse, error)
	// Gets the [GcpUserAccessBinding]
	// [google.identity.accesscontextmanager.v1.GcpUserAccessBinding] with
	// the given name.
	GetGcpUserAccessBinding(ctx context.Context, in *GetGcpUserAccessBindingRequest, opts ...grpc.CallOption) (*GcpUserAccessBinding, error)
	// Creates a [GcpUserAccessBinding]
	// [google.identity.accesscontextmanager.v1.GcpUserAccessBinding]. If the
	// client specifies a [name]
	// [google.identity.accesscontextmanager.v1.GcpUserAccessBinding.name],
	// the server ignores it. Fails if a resource already exists with the same
	// [group_key]
	// [google.identity.accesscontextmanager.v1.GcpUserAccessBinding.group_key].
	// Completion of this long-running operation does not necessarily signify that
	// the new binding is deployed onto all affected users, which may take more
	// time.
	CreateGcpUserAccessBinding(ctx context.Context, in *CreateGcpUserAccessBindingRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Updates a [GcpUserAccessBinding]
	// [google.identity.accesscontextmanager.v1.GcpUserAccessBinding].
	// Completion of this long-running operation does not necessarily signify that
	// the changed binding is deployed onto all affected users, which may take
	// more time.
	UpdateGcpUserAccessBinding(ctx context.Context, in *UpdateGcpUserAccessBindingRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Deletes a [GcpUserAccessBinding]
	// [google.identity.accesscontextmanager.v1.GcpUserAccessBinding].
	// Completion of this long-running operation does not necessarily signify that
	// the binding deletion is deployed onto all affected users, which may take
	// more time.
	DeleteGcpUserAccessBinding(ctx context.Context, in *DeleteGcpUserAccessBindingRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Sets the IAM policy for the specified Access Context Manager
	// [access policy][google.identity.accesscontextmanager.v1.AccessPolicy].
	// This method replaces the existing IAM policy on the access policy. The IAM
	// policy controls the set of users who can perform specific operations on the
	// Access Context Manager [access
	// policy][google.identity.accesscontextmanager.v1.AccessPolicy].
	SetIamPolicy(ctx context.Context, in *iampb.SetIamPolicyRequest, opts ...grpc.CallOption) (*iampb.Policy, error)
	// Gets the IAM policy for the specified Access Context Manager
	// [access policy][google.identity.accesscontextmanager.v1.AccessPolicy].
	GetIamPolicy(ctx context.Context, in *iampb.GetIamPolicyRequest, opts ...grpc.CallOption) (*iampb.Policy, error)
	// Returns the IAM permissions that the caller has on the specified Access
	// Context Manager resource. The resource can be an
	// [AccessPolicy][google.identity.accesscontextmanager.v1.AccessPolicy],
	// [AccessLevel][google.identity.accesscontextmanager.v1.AccessLevel], or
	// [ServicePerimeter][google.identity.accesscontextmanager.v1.ServicePerimeter
	// ]. This method does not support other resources.
	TestIamPermissions(ctx context.Context, in *iampb.TestIamPermissionsRequest, opts ...grpc.CallOption) (*iampb.TestIamPermissionsResponse, error)
}

AccessContextManagerClient is the client API for AccessContextManager service.

For semantics around ctx use and closing/ending streaming RPCs, please refer to https://godoc.org/google.golang.org/grpc#ClientConn.NewStream.

func NewAccessContextManagerClient

func NewAccessContextManagerClient(cc grpc.ClientConnInterface) AccessContextManagerClient

AccessContextManagerOperationMetadata

type AccessContextManagerOperationMetadata struct {
	// contains filtered or unexported fields
}

Metadata of Access Context Manager's Long Running Operations.

func (*AccessContextManagerOperationMetadata) Descriptor

func (*AccessContextManagerOperationMetadata) Descriptor() ([]byte, []int)

Deprecated: Use AccessContextManagerOperationMetadata.ProtoReflect.Descriptor instead.

func (*AccessContextManagerOperationMetadata) ProtoMessage

func (*AccessContextManagerOperationMetadata) ProtoMessage()

func (*AccessContextManagerOperationMetadata) ProtoReflect

func (x *AccessContextManagerOperationMetadata) ProtoReflect() protoreflect.Message

func (*AccessContextManagerOperationMetadata) Reset

func (x *AccessContextManagerOperationMetadata) Reset()

func (*AccessContextManagerOperationMetadata) String

func (x *AccessContextManagerOperationMetadata) String() string

AccessContextManagerServer

type AccessContextManagerServer interface {
	// Lists all [access policies]
	// [google.identity.accesscontextmanager.v1.AccessPolicy] in an
	// organization.
	ListAccessPolicies(context.Context, *ListAccessPoliciesRequest) (*ListAccessPoliciesResponse, error)
	// Returns an [access policy]
	// [google.identity.accesscontextmanager.v1.AccessPolicy] based on the name.
	GetAccessPolicy(context.Context, *GetAccessPolicyRequest) (*AccessPolicy, error)
	// Creates an access policy. This method fails if the organization already has
	// an access policy. The long-running operation has a successful status
	// after the access policy propagates to long-lasting storage.
	// Syntactic and basic semantic errors are returned in `metadata` as a
	// BadRequest proto.
	CreateAccessPolicy(context.Context, *AccessPolicy) (*longrunningpb.Operation, error)
	// Updates an [access policy]
	// [google.identity.accesscontextmanager.v1.AccessPolicy]. The
	// long-running operation from this RPC has a successful status after the
	// changes to the [access policy]
	// [google.identity.accesscontextmanager.v1.AccessPolicy] propagate
	// to long-lasting storage.
	UpdateAccessPolicy(context.Context, *UpdateAccessPolicyRequest) (*longrunningpb.Operation, error)
	// Deletes an [access policy]
	// [google.identity.accesscontextmanager.v1.AccessPolicy] based on the
	// resource name. The long-running operation has a successful status after the
	// [access policy] [google.identity.accesscontextmanager.v1.AccessPolicy]
	// is removed from long-lasting storage.
	DeleteAccessPolicy(context.Context, *DeleteAccessPolicyRequest) (*longrunningpb.Operation, error)
	// Lists all [access levels]
	// [google.identity.accesscontextmanager.v1.AccessLevel] for an access
	// policy.
	ListAccessLevels(context.Context, *ListAccessLevelsRequest) (*ListAccessLevelsResponse, error)
	// Gets an [access level]
	// [google.identity.accesscontextmanager.v1.AccessLevel] based on the resource
	// name.
	GetAccessLevel(context.Context, *GetAccessLevelRequest) (*AccessLevel, error)
	// Creates an [access level]
	// [google.identity.accesscontextmanager.v1.AccessLevel]. The long-running
	// operation from this RPC has a successful status after the [access
	// level] [google.identity.accesscontextmanager.v1.AccessLevel]
	// propagates to long-lasting storage. If [access levels]
	// [google.identity.accesscontextmanager.v1.AccessLevel] contain
	// errors, an error response is returned for the first error encountered.
	CreateAccessLevel(context.Context, *CreateAccessLevelRequest) (*longrunningpb.Operation, error)
	// Updates an [access level]
	// [google.identity.accesscontextmanager.v1.AccessLevel]. The long-running
	// operation from this RPC has a successful status after the changes to
	// the [access level]
	// [google.identity.accesscontextmanager.v1.AccessLevel] propagate
	// to long-lasting storage. If [access levels]
	// [google.identity.accesscontextmanager.v1.AccessLevel] contain
	// errors, an error response is returned for the first error encountered.
	UpdateAccessLevel(context.Context, *UpdateAccessLevelRequest) (*longrunningpb.Operation, error)
	// Deletes an [access level]
	// [google.identity.accesscontextmanager.v1.AccessLevel] based on the resource
	// name. The long-running operation from this RPC has a successful status
	// after the [access level]
	// [google.identity.accesscontextmanager.v1.AccessLevel] has been removed
	// from long-lasting storage.
	DeleteAccessLevel(context.Context, *DeleteAccessLevelRequest) (*longrunningpb.Operation, error)
	// Replaces all existing [access levels]
	// [google.identity.accesscontextmanager.v1.AccessLevel] in an [access
	// policy] [google.identity.accesscontextmanager.v1.AccessPolicy] with
	// the [access levels]
	// [google.identity.accesscontextmanager.v1.AccessLevel] provided. This
	// is done atomically. The long-running operation from this RPC has a
	// successful status after all replacements propagate to long-lasting
	// storage. If the replacement contains errors, an error response is returned
	// for the first error encountered.  Upon error, the replacement is cancelled,
	// and existing [access levels]
	// [google.identity.accesscontextmanager.v1.AccessLevel] are not
	// affected. The Operation.response field contains
	// ReplaceAccessLevelsResponse. Removing [access levels]
	// [google.identity.accesscontextmanager.v1.AccessLevel] contained in existing
	// [service perimeters]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] result in an
	// error.
	ReplaceAccessLevels(context.Context, *ReplaceAccessLevelsRequest) (*longrunningpb.Operation, error)
	// Lists all [service perimeters]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] for an
	// access policy.
	ListServicePerimeters(context.Context, *ListServicePerimetersRequest) (*ListServicePerimetersResponse, error)
	// Gets a [service perimeter]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] based on the
	// resource name.
	GetServicePerimeter(context.Context, *GetServicePerimeterRequest) (*ServicePerimeter, error)
	// Creates a [service perimeter]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter]. The
	// long-running operation from this RPC has a successful status after the
	// [service perimeter]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter]
	// propagates to long-lasting storage. If a [service perimeter]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] contains
	// errors, an error response is returned for the first error encountered.
	CreateServicePerimeter(context.Context, *CreateServicePerimeterRequest) (*longrunningpb.Operation, error)
	// Updates a [service perimeter]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter]. The
	// long-running operation from this RPC has a successful status after the
	// [service perimeter]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter]
	// propagates to long-lasting storage. If a [service perimeter]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] contains
	// errors, an error response is returned for the first error encountered.
	UpdateServicePerimeter(context.Context, *UpdateServicePerimeterRequest) (*longrunningpb.Operation, error)
	// Deletes a [service perimeter]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] based on the
	// resource name. The long-running operation from this RPC has a successful
	// status after the [service perimeter]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] is removed from
	// long-lasting storage.
	DeleteServicePerimeter(context.Context, *DeleteServicePerimeterRequest) (*longrunningpb.Operation, error)
	// Replace all existing [service perimeters]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] in an [access
	// policy] [google.identity.accesscontextmanager.v1.AccessPolicy] with the
	// [service perimeters]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] provided. This
	// is done atomically. The long-running operation from this RPC has a
	// successful status after all replacements propagate to long-lasting storage.
	// Replacements containing errors result in an error response for the first
	// error encountered. Upon an error, replacement are cancelled and existing
	// [service perimeters]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] are not
	// affected. The Operation.response field contains
	// ReplaceServicePerimetersResponse.
	ReplaceServicePerimeters(context.Context, *ReplaceServicePerimetersRequest) (*longrunningpb.Operation, error)
	// Commits the dry-run specification for all the [service perimeters]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] in an
	// [access policy][google.identity.accesscontextmanager.v1.AccessPolicy].
	// A commit operation on a service perimeter involves copying its `spec` field
	// to the `status` field of the service perimeter. Only [service perimeters]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] with
	// `use_explicit_dry_run_spec` field set to true are affected by a commit
	// operation. The long-running operation from this RPC has a successful
	// status after the dry-run specifications for all the [service perimeters]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] have been
	// committed. If a commit fails, it causes the long-running operation to
	// return an error response and the entire commit operation is cancelled.
	// When successful, the Operation.response field contains
	// CommitServicePerimetersResponse. The `dry_run` and the `spec` fields are
	// cleared after a successful commit operation.
	CommitServicePerimeters(context.Context, *CommitServicePerimetersRequest) (*longrunningpb.Operation, error)
	// Lists all [GcpUserAccessBindings]
	// [google.identity.accesscontextmanager.v1.GcpUserAccessBinding] for a
	// Google Cloud organization.
	ListGcpUserAccessBindings(context.Context, *ListGcpUserAccessBindingsRequest) (*ListGcpUserAccessBindingsResponse, error)
	// Gets the [GcpUserAccessBinding]
	// [google.identity.accesscontextmanager.v1.GcpUserAccessBinding] with
	// the given name.
	GetGcpUserAccessBinding(context.Context, *GetGcpUserAccessBindingRequest) (*GcpUserAccessBinding, error)
	// Creates a [GcpUserAccessBinding]
	// [google.identity.accesscontextmanager.v1.GcpUserAccessBinding]. If the
	// client specifies a [name]
	// [google.identity.accesscontextmanager.v1.GcpUserAccessBinding.name],
	// the server ignores it. Fails if a resource already exists with the same
	// [group_key]
	// [google.identity.accesscontextmanager.v1.GcpUserAccessBinding.group_key].
	// Completion of this long-running operation does not necessarily signify that
	// the new binding is deployed onto all affected users, which may take more
	// time.
	CreateGcpUserAccessBinding(context.Context, *CreateGcpUserAccessBindingRequest) (*longrunningpb.Operation, error)
	// Updates a [GcpUserAccessBinding]
	// [google.identity.accesscontextmanager.v1.GcpUserAccessBinding].
	// Completion of this long-running operation does not necessarily signify that
	// the changed binding is deployed onto all affected users, which may take
	// more time.
	UpdateGcpUserAccessBinding(context.Context, *UpdateGcpUserAccessBindingRequest) (*longrunningpb.Operation, error)
	// Deletes a [GcpUserAccessBinding]
	// [google.identity.accesscontextmanager.v1.GcpUserAccessBinding].
	// Completion of this long-running operation does not necessarily signify that
	// the binding deletion is deployed onto all affected users, which may take
	// more time.
	DeleteGcpUserAccessBinding(context.Context, *DeleteGcpUserAccessBindingRequest) (*longrunningpb.Operation, error)
	// Sets the IAM policy for the specified Access Context Manager
	// [access policy][google.identity.accesscontextmanager.v1.AccessPolicy].
	// This method replaces the existing IAM policy on the access policy. The IAM
	// policy controls the set of users who can perform specific operations on the
	// Access Context Manager [access
	// policy][google.identity.accesscontextmanager.v1.AccessPolicy].
	SetIamPolicy(context.Context, *iampb.SetIamPolicyRequest) (*iampb.Policy, error)
	// Gets the IAM policy for the specified Access Context Manager
	// [access policy][google.identity.accesscontextmanager.v1.AccessPolicy].
	GetIamPolicy(context.Context, *iampb.GetIamPolicyRequest) (*iampb.Policy, error)
	// Returns the IAM permissions that the caller has on the specified Access
	// Context Manager resource. The resource can be an
	// [AccessPolicy][google.identity.accesscontextmanager.v1.AccessPolicy],
	// [AccessLevel][google.identity.accesscontextmanager.v1.AccessLevel], or
	// [ServicePerimeter][google.identity.accesscontextmanager.v1.ServicePerimeter
	// ]. This method does not support other resources.
	TestIamPermissions(context.Context, *iampb.TestIamPermissionsRequest) (*iampb.TestIamPermissionsResponse, error)
}

AccessContextManagerServer is the server API for AccessContextManager service.

AccessLevel

type AccessLevel struct {

	// Required. Resource name for the Access Level. The `short_name` component
	// must begin with a letter and only include alphanumeric and '_'. Format:
	// `accessPolicies/{access_policy}/accessLevels/{access_level}`. The maximum
	// length of the `access_level` component is 50 characters.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Human readable title. Must be unique within the Policy.
	Title string `protobuf:"bytes,2,opt,name=title,proto3" json:"title,omitempty"`
	// Description of the `AccessLevel` and its use. Does not affect behavior.
	Description string `protobuf:"bytes,3,opt,name=description,proto3" json:"description,omitempty"`
	// Required. Describes the necessary conditions for the level to apply.
	//
	// Types that are assignable to Level:
	//	*AccessLevel_Basic
	//	*AccessLevel_Custom
	Level isAccessLevel_Level `protobuf_oneof:"level"`
	// Output only. Time the `AccessLevel` was created in UTC.
	CreateTime *timestamppb.Timestamp `protobuf:"bytes,6,opt,name=create_time,json=createTime,proto3" json:"create_time,omitempty"`
	// Output only. Time the `AccessLevel` was updated in UTC.
	UpdateTime *timestamppb.Timestamp `protobuf:"bytes,7,opt,name=update_time,json=updateTime,proto3" json:"update_time,omitempty"`
	// contains filtered or unexported fields
}

An AccessLevel is a label that can be applied to requests to Google Cloud services, along with a list of requirements necessary for the label to be applied.

func (*AccessLevel) Descriptor

func (*AccessLevel) Descriptor() ([]byte, []int)

Deprecated: Use AccessLevel.ProtoReflect.Descriptor instead.

func (*AccessLevel) GetBasic

func (x *AccessLevel) GetBasic() *BasicLevel

func (*AccessLevel) GetCreateTime

func (x *AccessLevel) GetCreateTime() *timestamppb.Timestamp

func (*AccessLevel) GetCustom

func (x *AccessLevel) GetCustom() *CustomLevel

func (*AccessLevel) GetDescription

func (x *AccessLevel) GetDescription() string

func (*AccessLevel) GetLevel

func (m *AccessLevel) GetLevel() isAccessLevel_Level

func (*AccessLevel) GetName

func (x *AccessLevel) GetName() string

func (*AccessLevel) GetTitle

func (x *AccessLevel) GetTitle() string

func (*AccessLevel) GetUpdateTime

func (x *AccessLevel) GetUpdateTime() *timestamppb.Timestamp

func (*AccessLevel) ProtoMessage

func (*AccessLevel) ProtoMessage()

func (*AccessLevel) ProtoReflect

func (x *AccessLevel) ProtoReflect() protoreflect.Message

func (*AccessLevel) Reset

func (x *AccessLevel) Reset()

func (*AccessLevel) String

func (x *AccessLevel) String() string

AccessLevel_Basic

type AccessLevel_Basic struct {
	// A `BasicLevel` composed of `Conditions`.
	Basic *BasicLevel `protobuf:"bytes,4,opt,name=basic,proto3,oneof"`
}

AccessLevel_Custom

type AccessLevel_Custom struct {
	// A `CustomLevel` written in the Common Expression Language.
	Custom *CustomLevel `protobuf:"bytes,5,opt,name=custom,proto3,oneof"`
}

AccessPolicy

type AccessPolicy struct {

	// Output only. Resource name of the `AccessPolicy`. Format:
	// `accessPolicies/{access_policy}`
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Required. The parent of this `AccessPolicy` in the Cloud Resource
	// Hierarchy. Currently immutable once created. Format:
	// `organizations/{organization_id}`
	Parent string `protobuf:"bytes,2,opt,name=parent,proto3" json:"parent,omitempty"`
	// Required. Human readable title. Does not affect behavior.
	Title string `protobuf:"bytes,3,opt,name=title,proto3" json:"title,omitempty"`
	// The scopes of a policy define which resources an ACM policy can restrict,
	// and where ACM resources can be referenced.
	// For example, a policy with scopes=["folders/123"] has the following
	// behavior:
	// - vpcsc perimeters can only restrict projects within folders/123
	// - access levels can only be referenced by resources within folders/123.
	// If empty, there are no limitations on which resources can be restricted by
	// an ACM policy, and there are no limitations on where ACM resources can be
	// referenced.
	// Only one policy can include a given scope (attempting to create a second
	// policy which includes "folders/123" will result in an error).
	// Currently, scopes cannot be modified after a policy is created.
	// Currently, policies can only have a single scope.
	// Format: list of `folders/{folder_number}` or `projects/{project_number}`
	Scopes []string `protobuf:"bytes,7,rep,name=scopes,proto3" json:"scopes,omitempty"`
	// Output only. Time the `AccessPolicy` was created in UTC.
	CreateTime *timestamppb.Timestamp `protobuf:"bytes,4,opt,name=create_time,json=createTime,proto3" json:"create_time,omitempty"`
	// Output only. Time the `AccessPolicy` was updated in UTC.
	UpdateTime *timestamppb.Timestamp `protobuf:"bytes,5,opt,name=update_time,json=updateTime,proto3" json:"update_time,omitempty"`
	// Output only. An opaque identifier for the current version of the
	// `AccessPolicy`. This will always be a strongly validated etag, meaning that
	// two Access Polices will be identical if and only if their etags are
	// identical. Clients should not expect this to be in any specific format.
	Etag string `protobuf:"bytes,6,opt,name=etag,proto3" json:"etag,omitempty"`
	// contains filtered or unexported fields
}

AccessPolicy is a container for AccessLevels (which define the necessary attributes to use Google Cloud services) and ServicePerimeters (which define regions of services able to freely pass data within a perimeter). An access policy is globally visible within an organization, and the restrictions it specifies apply to all projects within an organization.

func (*AccessPolicy) Descriptor

func (*AccessPolicy) Descriptor() ([]byte, []int)

Deprecated: Use AccessPolicy.ProtoReflect.Descriptor instead.

func (*AccessPolicy) GetCreateTime

func (x *AccessPolicy) GetCreateTime() *timestamppb.Timestamp

func (*AccessPolicy) GetEtag

func (x *AccessPolicy) GetEtag() string

func (*AccessPolicy) GetName

func (x *AccessPolicy) GetName() string

func (*AccessPolicy) GetParent

func (x *AccessPolicy) GetParent() string

func (*AccessPolicy) GetScopes

func (x *AccessPolicy) GetScopes() []string

func (*AccessPolicy) GetTitle

func (x *AccessPolicy) GetTitle() string

func (*AccessPolicy) GetUpdateTime

func (x *AccessPolicy) GetUpdateTime() *timestamppb.Timestamp

func (*AccessPolicy) ProtoMessage

func (*AccessPolicy) ProtoMessage()

func (*AccessPolicy) ProtoReflect

func (x *AccessPolicy) ProtoReflect() protoreflect.Message

func (*AccessPolicy) Reset

func (x *AccessPolicy) Reset()

func (*AccessPolicy) String

func (x *AccessPolicy) String() string

BasicLevel

type BasicLevel struct {
	Conditions []*Condition `protobuf:"bytes,1,rep,name=conditions,proto3" json:"conditions,omitempty"`

	CombiningFunction BasicLevel_ConditionCombiningFunction "" /* 196 byte string literal not displayed */

}

BasicLevel is an AccessLevel using a set of recommended features.

func (*BasicLevel) Descriptor

func (*BasicLevel) Descriptor() ([]byte, []int)

Deprecated: Use BasicLevel.ProtoReflect.Descriptor instead.

func (*BasicLevel) GetCombiningFunction

func (x *BasicLevel) GetCombiningFunction() BasicLevel_ConditionCombiningFunction

func (*BasicLevel) GetConditions

func (x *BasicLevel) GetConditions() []*Condition

func (*BasicLevel) ProtoMessage

func (*BasicLevel) ProtoMessage()

func (*BasicLevel) ProtoReflect

func (x *BasicLevel) ProtoReflect() protoreflect.Message

func (*BasicLevel) Reset

func (x *BasicLevel) Reset()

func (*BasicLevel) String

func (x *BasicLevel) String() string

BasicLevel_ConditionCombiningFunction

type BasicLevel_ConditionCombiningFunction int32

Options for how the conditions list should be combined to determine if this AccessLevel is applied. Default is AND.

BasicLevel_AND, BasicLevel_OR

const (
	// All `Conditions` must be true for the `BasicLevel` to be true.
	BasicLevel_AND BasicLevel_ConditionCombiningFunction = 0
	// If at least one `Condition` is true, then the `BasicLevel` is true.
	BasicLevel_OR BasicLevel_ConditionCombiningFunction = 1
)

func (BasicLevel_ConditionCombiningFunction) Descriptor

func (BasicLevel_ConditionCombiningFunction) Descriptor() protoreflect.EnumDescriptor

func (BasicLevel_ConditionCombiningFunction) Enum

func (x BasicLevel_ConditionCombiningFunction) Enum() *BasicLevel_ConditionCombiningFunction

func (BasicLevel_ConditionCombiningFunction) EnumDescriptor

func (BasicLevel_ConditionCombiningFunction) EnumDescriptor() ([]byte, []int)

Deprecated: Use BasicLevel_ConditionCombiningFunction.Descriptor instead.

func (BasicLevel_ConditionCombiningFunction) Number

func (x BasicLevel_ConditionCombiningFunction) Number() protoreflect.EnumNumber

func (BasicLevel_ConditionCombiningFunction) String

func (x BasicLevel_ConditionCombiningFunction) String() string

func (BasicLevel_ConditionCombiningFunction) Type

func (BasicLevel_ConditionCombiningFunction) Type() protoreflect.EnumType

CommitServicePerimetersRequest

type CommitServicePerimetersRequest struct {

	// Required. Resource name for the parent [Access Policy]
	// [google.identity.accesscontextmanager.v1.AccessPolicy] which owns all
	// [Service Perimeters]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] in scope for
	// the commit operation.
	//
	// Format: `accessPolicies/{policy_id}`
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Optional. The etag for the version of the [Access Policy]
	// [google.identity.accesscontextmanager.v1.AccessPolicy] that this
	// commit operation is to be performed on. If, at the time of commit, the
	// etag for the Access Policy stored in Access Context Manager is different
	// from the specified etag, then the commit operation will not be performed
	// and the call will fail. This field is not required. If etag is not
	// provided, the operation will be performed as if a valid etag is provided.
	Etag string `protobuf:"bytes,2,opt,name=etag,proto3" json:"etag,omitempty"`
	// contains filtered or unexported fields
}

A request to commit dry-run specs in all [Service Perimeters] [google.identity.accesscontextmanager.v1.ServicePerimeter] belonging to an [Access Policy][google.identity.accesscontextmanager.v1.AccessPolicy].

func (*CommitServicePerimetersRequest) Descriptor

func (*CommitServicePerimetersRequest) Descriptor() ([]byte, []int)

Deprecated: Use CommitServicePerimetersRequest.ProtoReflect.Descriptor instead.

func (*CommitServicePerimetersRequest) GetEtag

func (x *CommitServicePerimetersRequest) GetEtag() string

func (*CommitServicePerimetersRequest) GetParent

func (x *CommitServicePerimetersRequest) GetParent() string

func (*CommitServicePerimetersRequest) ProtoMessage

func (*CommitServicePerimetersRequest) ProtoMessage()

func (*CommitServicePerimetersRequest) ProtoReflect

func (x *CommitServicePerimetersRequest) ProtoReflect() protoreflect.Message

func (*CommitServicePerimetersRequest) Reset

func (x *CommitServicePerimetersRequest) Reset()

func (*CommitServicePerimetersRequest) String

func (x *CommitServicePerimetersRequest) String() string

CommitServicePerimetersResponse

type CommitServicePerimetersResponse struct {

	// List of all the [Service Perimeter]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] instances in
	// the [Access Policy]
	// [google.identity.accesscontextmanager.v1.AccessPolicy].
	ServicePerimeters []*ServicePerimeter `protobuf:"bytes,1,rep,name=service_perimeters,json=servicePerimeters,proto3" json:"service_perimeters,omitempty"`
	// contains filtered or unexported fields
}

A response to CommitServicePerimetersRequest. This will be put inside of Operation.response field.

func (*CommitServicePerimetersResponse) Descriptor

func (*CommitServicePerimetersResponse) Descriptor() ([]byte, []int)

Deprecated: Use CommitServicePerimetersResponse.ProtoReflect.Descriptor instead.

func (*CommitServicePerimetersResponse) GetServicePerimeters

func (x *CommitServicePerimetersResponse) GetServicePerimeters() []*ServicePerimeter

func (*CommitServicePerimetersResponse) ProtoMessage

func (*CommitServicePerimetersResponse) ProtoMessage()

func (*CommitServicePerimetersResponse) ProtoReflect

func (x *CommitServicePerimetersResponse) ProtoReflect() protoreflect.Message

func (*CommitServicePerimetersResponse) Reset

func (x *CommitServicePerimetersResponse) Reset()

func (*CommitServicePerimetersResponse) String

func (x *CommitServicePerimetersResponse) String() string

Condition

type Condition struct {

	// CIDR block IP subnetwork specification. May be IPv4 or IPv6. Note that for
	// a CIDR IP address block, the specified IP address portion must be properly
	// truncated (i.e. all the host bits must be zero) or the input is considered
	// malformed. For example, "192.0.2.0/24" is accepted but "192.0.2.1/24" is
	// not. Similarly, for IPv6, "2001:db8::/32" is accepted whereas
	// "2001:db8::1/32" is not. The originating IP of a request must be in one of
	// the listed subnets in order for this Condition to be true. If empty, all IP
	// addresses are allowed.
	IpSubnetworks []string `protobuf:"bytes,1,rep,name=ip_subnetworks,json=ipSubnetworks,proto3" json:"ip_subnetworks,omitempty"`
	// Device specific restrictions, all restrictions must hold for the
	// Condition to be true. If not specified, all devices are allowed.
	DevicePolicy *DevicePolicy `protobuf:"bytes,2,opt,name=device_policy,json=devicePolicy,proto3" json:"device_policy,omitempty"`
	// A list of other access levels defined in the same `Policy`, referenced by
	// resource name. Referencing an `AccessLevel` which does not exist is an
	// error. All access levels listed must be granted for the Condition
	// to be true. Example:
	// "`accessPolicies/MY_POLICY/accessLevels/LEVEL_NAME"`
	RequiredAccessLevels []string `protobuf:"bytes,3,rep,name=required_access_levels,json=requiredAccessLevels,proto3" json:"required_access_levels,omitempty"`
	// Whether to negate the Condition. If true, the Condition becomes a NAND over
	// its non-empty fields, each field must be false for the Condition overall to
	// be satisfied. Defaults to false.
	Negate bool `protobuf:"varint,5,opt,name=negate,proto3" json:"negate,omitempty"`
	// The request must be made by one of the provided user or service
	// accounts. Groups are not supported.
	// Syntax:
	// `user:{emailid}`
	// `serviceAccount:{emailid}`
	// If not specified, a request may come from any user.
	Members []string `protobuf:"bytes,6,rep,name=members,proto3" json:"members,omitempty"`
	// The request must originate from one of the provided countries/regions.
	// Must be valid ISO 3166-1 alpha-2 codes.
	Regions []string `protobuf:"bytes,7,rep,name=regions,proto3" json:"regions,omitempty"`
	// contains filtered or unexported fields
}

A condition necessary for an AccessLevel to be granted. The Condition is an AND over its fields. So a Condition is true if: 1) the request IP is from one of the listed subnetworks AND 2) the originating device complies with the listed device policy AND 3) all listed access levels are granted AND 4) the request was sent at a time allowed by the DateTimeRestriction.

func (*Condition) Descriptor

func (*Condition) Descriptor() ([]byte, []int)

Deprecated: Use Condition.ProtoReflect.Descriptor instead.

func (*Condition) GetDevicePolicy

func (x *Condition) GetDevicePolicy() *DevicePolicy

func (*Condition) GetIpSubnetworks

func (x *Condition) GetIpSubnetworks() []string

func (*Condition) GetMembers

func (x *Condition) GetMembers() []string

func (*Condition) GetNegate

func (x *Condition) GetNegate() bool

func (*Condition) GetRegions

func (x *Condition) GetRegions() []string

func (*Condition) GetRequiredAccessLevels

func (x *Condition) GetRequiredAccessLevels() []string

func (*Condition) ProtoMessage

func (*Condition) ProtoMessage()

func (*Condition) ProtoReflect

func (x *Condition) ProtoReflect() protoreflect.Message

func (*Condition) Reset

func (x *Condition) Reset()

func (*Condition) String

func (x *Condition) String() string

CreateAccessLevelRequest

type CreateAccessLevelRequest struct {

	// Required. Resource name for the access policy which owns this [Access
	// Level] [google.identity.accesscontextmanager.v1.AccessLevel].
	//
	// Format: `accessPolicies/{policy_id}`
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Required. The [Access Level]
	// [google.identity.accesscontextmanager.v1.AccessLevel] to create.
	// Syntactic correctness of the [Access Level]
	// [google.identity.accesscontextmanager.v1.AccessLevel] is a
	// precondition for creation.
	AccessLevel *AccessLevel `protobuf:"bytes,2,opt,name=access_level,json=accessLevel,proto3" json:"access_level,omitempty"`
	// contains filtered or unexported fields
}

A request to create an AccessLevel.

func (*CreateAccessLevelRequest) Descriptor

func (*CreateAccessLevelRequest) Descriptor() ([]byte, []int)

Deprecated: Use CreateAccessLevelRequest.ProtoReflect.Descriptor instead.

func (*CreateAccessLevelRequest) GetAccessLevel

func (x *CreateAccessLevelRequest) GetAccessLevel() *AccessLevel

func (*CreateAccessLevelRequest) GetParent

func (x *CreateAccessLevelRequest) GetParent() string

func (*CreateAccessLevelRequest) ProtoMessage

func (*CreateAccessLevelRequest) ProtoMessage()

func (*CreateAccessLevelRequest) ProtoReflect

func (x *CreateAccessLevelRequest) ProtoReflect() protoreflect.Message

func (*CreateAccessLevelRequest) Reset

func (x *CreateAccessLevelRequest) Reset()

func (*CreateAccessLevelRequest) String

func (x *CreateAccessLevelRequest) String() string

CreateGcpUserAccessBindingRequest

type CreateGcpUserAccessBindingRequest struct {

	// Required. Example: "organizations/256"
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Required. [GcpUserAccessBinding]
	// [google.identity.accesscontextmanager.v1.GcpUserAccessBinding]
	GcpUserAccessBinding *GcpUserAccessBinding `protobuf:"bytes,2,opt,name=gcp_user_access_binding,json=gcpUserAccessBinding,proto3" json:"gcp_user_access_binding,omitempty"`
	// contains filtered or unexported fields
}

Request of [CreateGcpUserAccessBinding] [google.identity.accesscontextmanager.v1.AccessContextManager.CreateGcpUserAccessBinding].

func (*CreateGcpUserAccessBindingRequest) Descriptor

func (*CreateGcpUserAccessBindingRequest) Descriptor() ([]byte, []int)

Deprecated: Use CreateGcpUserAccessBindingRequest.ProtoReflect.Descriptor instead.

func (*CreateGcpUserAccessBindingRequest) GetGcpUserAccessBinding

func (x *CreateGcpUserAccessBindingRequest) GetGcpUserAccessBinding() *GcpUserAccessBinding

func (*CreateGcpUserAccessBindingRequest) GetParent

func (x *CreateGcpUserAccessBindingRequest) GetParent() string

func (*CreateGcpUserAccessBindingRequest) ProtoMessage

func (*CreateGcpUserAccessBindingRequest) ProtoMessage()

func (*CreateGcpUserAccessBindingRequest) ProtoReflect

func (x *CreateGcpUserAccessBindingRequest) ProtoReflect() protoreflect.Message

func (*CreateGcpUserAccessBindingRequest) Reset

func (x *CreateGcpUserAccessBindingRequest) Reset()

func (*CreateGcpUserAccessBindingRequest) String

func (x *CreateGcpUserAccessBindingRequest) String() string

CreateServicePerimeterRequest

type CreateServicePerimeterRequest struct {

	// Required. Resource name for the access policy which owns this [Service
	// Perimeter] [google.identity.accesscontextmanager.v1.ServicePerimeter].
	//
	// Format: `accessPolicies/{policy_id}`
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Required. The [Service Perimeter]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] to create.
	// Syntactic correctness of the [Service Perimeter]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] is a
	// precondition for creation.
	ServicePerimeter *ServicePerimeter `protobuf:"bytes,2,opt,name=service_perimeter,json=servicePerimeter,proto3" json:"service_perimeter,omitempty"`
	// contains filtered or unexported fields
}

A request to create a ServicePerimeter.

func (*CreateServicePerimeterRequest) Descriptor

func (*CreateServicePerimeterRequest) Descriptor() ([]byte, []int)

Deprecated: Use CreateServicePerimeterRequest.ProtoReflect.Descriptor instead.

func (*CreateServicePerimeterRequest) GetParent

func (x *CreateServicePerimeterRequest) GetParent() string

func (*CreateServicePerimeterRequest) GetServicePerimeter

func (x *CreateServicePerimeterRequest) GetServicePerimeter() *ServicePerimeter

func (*CreateServicePerimeterRequest) ProtoMessage

func (*CreateServicePerimeterRequest) ProtoMessage()

func (*CreateServicePerimeterRequest) ProtoReflect

func (x *CreateServicePerimeterRequest) ProtoReflect() protoreflect.Message

func (*CreateServicePerimeterRequest) Reset

func (x *CreateServicePerimeterRequest) Reset()

func (*CreateServicePerimeterRequest) String

func (x *CreateServicePerimeterRequest) String() string

CustomLevel

type CustomLevel struct {

	// Required. A Cloud CEL expression evaluating to a boolean.
	Expr *expr.Expr `protobuf:"bytes,1,opt,name=expr,proto3" json:"expr,omitempty"`
	// contains filtered or unexported fields
}

CustomLevel is an AccessLevel using the Cloud Common Expression Language to represent the necessary conditions for the level to apply to a request. See CEL spec at: https://github.com/google/cel-spec

func (*CustomLevel) Descriptor

func (*CustomLevel) Descriptor() ([]byte, []int)

Deprecated: Use CustomLevel.ProtoReflect.Descriptor instead.

func (*CustomLevel) GetExpr

func (x *CustomLevel) GetExpr() *expr.Expr

func (*CustomLevel) ProtoMessage

func (*CustomLevel) ProtoMessage()

func (*CustomLevel) ProtoReflect

func (x *CustomLevel) ProtoReflect() protoreflect.Message

func (*CustomLevel) Reset

func (x *CustomLevel) Reset()

func (*CustomLevel) String

func (x *CustomLevel) String() string

DeleteAccessLevelRequest

type DeleteAccessLevelRequest struct {

	// Required. Resource name for the [Access Level]
	// [google.identity.accesscontextmanager.v1.AccessLevel].
	//
	// Format:
	// `accessPolicies/{policy_id}/accessLevels/{access_level_id}`
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

A request to delete an AccessLevel.

func (*DeleteAccessLevelRequest) Descriptor

func (*DeleteAccessLevelRequest) Descriptor() ([]byte, []int)

Deprecated: Use DeleteAccessLevelRequest.ProtoReflect.Descriptor instead.

func (*DeleteAccessLevelRequest) GetName

func (x *DeleteAccessLevelRequest) GetName() string

func (*DeleteAccessLevelRequest) ProtoMessage

func (*DeleteAccessLevelRequest) ProtoMessage()

func (*DeleteAccessLevelRequest) ProtoReflect

func (x *DeleteAccessLevelRequest) ProtoReflect() protoreflect.Message

func (*DeleteAccessLevelRequest) Reset

func (x *DeleteAccessLevelRequest) Reset()

func (*DeleteAccessLevelRequest) String

func (x *DeleteAccessLevelRequest) String() string

DeleteAccessPolicyRequest

type DeleteAccessPolicyRequest struct {

	// Required. Resource name for the access policy to delete.
	//
	// Format `accessPolicies/{policy_id}`
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

A request to delete an AccessPolicy.

func (*DeleteAccessPolicyRequest) Descriptor

func (*DeleteAccessPolicyRequest) Descriptor() ([]byte, []int)

Deprecated: Use DeleteAccessPolicyRequest.ProtoReflect.Descriptor instead.

func (*DeleteAccessPolicyRequest) GetName

func (x *DeleteAccessPolicyRequest) GetName() string

func (*DeleteAccessPolicyRequest) ProtoMessage

func (*DeleteAccessPolicyRequest) ProtoMessage()

func (*DeleteAccessPolicyRequest) ProtoReflect

func (x *DeleteAccessPolicyRequest) ProtoReflect() protoreflect.Message

func (*DeleteAccessPolicyRequest) Reset

func (x *DeleteAccessPolicyRequest) Reset()

func (*DeleteAccessPolicyRequest) String

func (x *DeleteAccessPolicyRequest) String() string

DeleteGcpUserAccessBindingRequest

type DeleteGcpUserAccessBindingRequest struct {

	// Required. Example: "organizations/256/gcpUserAccessBindings/b3-BhcX_Ud5N"
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

Request of [DeleteGcpUserAccessBinding] [google.identity.accesscontextmanager.v1.AccessContextManager.DeleteGcpUserAccessBinding].

func (*DeleteGcpUserAccessBindingRequest) Descriptor

func (*DeleteGcpUserAccessBindingRequest) Descriptor() ([]byte, []int)

Deprecated: Use DeleteGcpUserAccessBindingRequest.ProtoReflect.Descriptor instead.

func (*DeleteGcpUserAccessBindingRequest) GetName

func (x *DeleteGcpUserAccessBindingRequest) GetName() string

func (*DeleteGcpUserAccessBindingRequest) ProtoMessage

func (*DeleteGcpUserAccessBindingRequest) ProtoMessage()

func (*DeleteGcpUserAccessBindingRequest) ProtoReflect

func (x *DeleteGcpUserAccessBindingRequest) ProtoReflect() protoreflect.Message

func (*DeleteGcpUserAccessBindingRequest) Reset

func (x *DeleteGcpUserAccessBindingRequest) Reset()

func (*DeleteGcpUserAccessBindingRequest) String

func (x *DeleteGcpUserAccessBindingRequest) String() string

DeleteServicePerimeterRequest

type DeleteServicePerimeterRequest struct {

	// Required. Resource name for the [Service Perimeter]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter].
	//
	// Format:
	// `accessPolicies/{policy_id}/servicePerimeters/{service_perimeter_id}`
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

A request to delete a ServicePerimeter.

func (*DeleteServicePerimeterRequest) Descriptor

func (*DeleteServicePerimeterRequest) Descriptor() ([]byte, []int)

Deprecated: Use DeleteServicePerimeterRequest.ProtoReflect.Descriptor instead.

func (*DeleteServicePerimeterRequest) GetName

func (x *DeleteServicePerimeterRequest) GetName() string

func (*DeleteServicePerimeterRequest) ProtoMessage

func (*DeleteServicePerimeterRequest) ProtoMessage()

func (*DeleteServicePerimeterRequest) ProtoReflect

func (x *DeleteServicePerimeterRequest) ProtoReflect() protoreflect.Message

func (*DeleteServicePerimeterRequest) Reset

func (x *DeleteServicePerimeterRequest) Reset()

func (*DeleteServicePerimeterRequest) String

func (x *DeleteServicePerimeterRequest) String() string

DevicePolicy

type DevicePolicy struct {
	RequireScreenlock bool `protobuf:"varint,1,opt,name=require_screenlock,json=requireScreenlock,proto3" json:"require_screenlock,omitempty"`

	AllowedEncryptionStatuses []_type.DeviceEncryptionStatus "" /* 216 byte string literal not displayed */

	OsConstraints []*OsConstraint `protobuf:"bytes,3,rep,name=os_constraints,json=osConstraints,proto3" json:"os_constraints,omitempty"`

	AllowedDeviceManagementLevels []_type.DeviceManagementLevel "" /* 229 byte string literal not displayed */

	RequireAdminApproval bool `protobuf:"varint,7,opt,name=require_admin_approval,json=requireAdminApproval,proto3" json:"require_admin_approval,omitempty"`

	RequireCorpOwned bool `protobuf:"varint,8,opt,name=require_corp_owned,json=requireCorpOwned,proto3" json:"require_corp_owned,omitempty"`

}

DevicePolicy specifies device specific restrictions necessary to acquire a given access level. A DevicePolicy specifies requirements for requests from devices to be granted access levels, it does not do any enforcement on the device. DevicePolicy acts as an AND over all specified fields, and each repeated field is an OR over its elements. Any unset fields are ignored. For example, if the proto is { os_type : DESKTOP_WINDOWS, os_type : DESKTOP_LINUX, encryption_status: ENCRYPTED}, then the DevicePolicy will be true for requests originating from encrypted Linux desktops and encrypted Windows desktops.

func (*DevicePolicy) Descriptor

func (*DevicePolicy) Descriptor() ([]byte, []int)

Deprecated: Use DevicePolicy.ProtoReflect.Descriptor instead.

func (*DevicePolicy) GetAllowedDeviceManagementLevels

func (x *DevicePolicy) GetAllowedDeviceManagementLevels() []_type.DeviceManagementLevel

func (*DevicePolicy) GetAllowedEncryptionStatuses

func (x *DevicePolicy) GetAllowedEncryptionStatuses() []_type.DeviceEncryptionStatus

func (*DevicePolicy) GetOsConstraints

func (x *DevicePolicy) GetOsConstraints() []*OsConstraint

func (*DevicePolicy) GetRequireAdminApproval

func (x *DevicePolicy) GetRequireAdminApproval() bool

func (*DevicePolicy) GetRequireCorpOwned

func (x *DevicePolicy) GetRequireCorpOwned() bool

func (*DevicePolicy) GetRequireScreenlock

func (x *DevicePolicy) GetRequireScreenlock() bool

func (*DevicePolicy) ProtoMessage

func (*DevicePolicy) ProtoMessage()

func (*DevicePolicy) ProtoReflect

func (x *DevicePolicy) ProtoReflect() protoreflect.Message

func (*DevicePolicy) Reset

func (x *DevicePolicy) Reset()

func (*DevicePolicy) String

func (x *DevicePolicy) String() string

GcpUserAccessBinding

type GcpUserAccessBinding struct {

	// Immutable. Assigned by the server during creation. The last segment has an arbitrary
	// length and has only URI unreserved characters (as defined by
	// [RFC 3986 Section 2.3](https://tools.ietf.org/html/rfc3986#section-2.3)).
	// Should not be specified by the client during creation.
	// Example: "organizations/256/gcpUserAccessBindings/b3-BhcX_Ud5N"
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Required. Immutable. Google Group id whose members are subject to this binding's restrictions.
	// See "id" in the [G Suite Directory API's Groups resource]
	// (https://developers.google.com/admin-sdk/directory/v1/reference/groups#resource).
	// If a group's email address/alias is changed, this resource will continue
	// to point at the changed group. This field does not accept group email
	// addresses or aliases.
	// Example: "01d520gv4vjcrht"
	GroupKey string `protobuf:"bytes,2,opt,name=group_key,json=groupKey,proto3" json:"group_key,omitempty"`
	// Required. Access level that a user must have to be granted access. Only one access
	// level is supported, not multiple. This repeated field must have exactly
	// one element.
	// Example: "accessPolicies/9522/accessLevels/device_trusted"
	AccessLevels []string `protobuf:"bytes,3,rep,name=access_levels,json=accessLevels,proto3" json:"access_levels,omitempty"`
	// contains filtered or unexported fields
}

Restricts access to Cloud Console and Google Cloud APIs for a set of users using Context-Aware Access.

func (*GcpUserAccessBinding) Descriptor

func (*GcpUserAccessBinding) Descriptor() ([]byte, []int)

Deprecated: Use GcpUserAccessBinding.ProtoReflect.Descriptor instead.

func (*GcpUserAccessBinding) GetAccessLevels

func (x *GcpUserAccessBinding) GetAccessLevels() []string

func (*GcpUserAccessBinding) GetGroupKey

func (x *GcpUserAccessBinding) GetGroupKey() string

func (*GcpUserAccessBinding) GetName

func (x *GcpUserAccessBinding) GetName() string

func (*GcpUserAccessBinding) ProtoMessage

func (*GcpUserAccessBinding) ProtoMessage()

func (*GcpUserAccessBinding) ProtoReflect

func (x *GcpUserAccessBinding) ProtoReflect() protoreflect.Message

func (*GcpUserAccessBinding) Reset

func (x *GcpUserAccessBinding) Reset()

func (*GcpUserAccessBinding) String

func (x *GcpUserAccessBinding) String() string

GcpUserAccessBindingOperationMetadata

type GcpUserAccessBindingOperationMetadata struct {
	// contains filtered or unexported fields
}

Currently, a completed operation means nothing. In the future, this metadata and a completed operation may indicate that the binding has taken effect and is affecting access decisions for all users.

func (*GcpUserAccessBindingOperationMetadata) Descriptor

func (*GcpUserAccessBindingOperationMetadata) Descriptor() ([]byte, []int)

Deprecated: Use GcpUserAccessBindingOperationMetadata.ProtoReflect.Descriptor instead.

func (*GcpUserAccessBindingOperationMetadata) ProtoMessage

func (*GcpUserAccessBindingOperationMetadata) ProtoMessage()

func (*GcpUserAccessBindingOperationMetadata) ProtoReflect

func (x *GcpUserAccessBindingOperationMetadata) ProtoReflect() protoreflect.Message

func (*GcpUserAccessBindingOperationMetadata) Reset

func (x *GcpUserAccessBindingOperationMetadata) Reset()

func (*GcpUserAccessBindingOperationMetadata) String

func (x *GcpUserAccessBindingOperationMetadata) String() string

GetAccessLevelRequest

type GetAccessLevelRequest struct {
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`

	AccessLevelFormat LevelFormat "" /* 172 byte string literal not displayed */

}

A request to get a particular AccessLevel.

func (*GetAccessLevelRequest) Descriptor

func (*GetAccessLevelRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetAccessLevelRequest.ProtoReflect.Descriptor instead.

func (*GetAccessLevelRequest) GetAccessLevelFormat

func (x *GetAccessLevelRequest) GetAccessLevelFormat() LevelFormat

func (*GetAccessLevelRequest) GetName

func (x *GetAccessLevelRequest) GetName() string

func (*GetAccessLevelRequest) ProtoMessage

func (*GetAccessLevelRequest) ProtoMessage()

func (*GetAccessLevelRequest) ProtoReflect

func (x *GetAccessLevelRequest) ProtoReflect() protoreflect.Message

func (*GetAccessLevelRequest) Reset

func (x *GetAccessLevelRequest) Reset()

func (*GetAccessLevelRequest) String

func (x *GetAccessLevelRequest) String() string

GetAccessPolicyRequest

type GetAccessPolicyRequest struct {

	// Required. Resource name for the access policy to get.
	//
	// Format `accessPolicies/{policy_id}`
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

A request to get a particular AccessPolicy.

func (*GetAccessPolicyRequest) Descriptor

func (*GetAccessPolicyRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetAccessPolicyRequest.ProtoReflect.Descriptor instead.

func (*GetAccessPolicyRequest) GetName

func (x *GetAccessPolicyRequest) GetName() string

func (*GetAccessPolicyRequest) ProtoMessage

func (*GetAccessPolicyRequest) ProtoMessage()

func (*GetAccessPolicyRequest) ProtoReflect

func (x *GetAccessPolicyRequest) ProtoReflect() protoreflect.Message

func (*GetAccessPolicyRequest) Reset

func (x *GetAccessPolicyRequest) Reset()

func (*GetAccessPolicyRequest) String

func (x *GetAccessPolicyRequest) String() string

GetGcpUserAccessBindingRequest

type GetGcpUserAccessBindingRequest struct {

	// Required. Example: "organizations/256/gcpUserAccessBindings/b3-BhcX_Ud5N"
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

Request of [GetGcpUserAccessBinding] [google.identity.accesscontextmanager.v1.AccessContextManager.GetGcpUserAccessBinding].

func (*GetGcpUserAccessBindingRequest) Descriptor

func (*GetGcpUserAccessBindingRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetGcpUserAccessBindingRequest.ProtoReflect.Descriptor instead.

func (*GetGcpUserAccessBindingRequest) GetName

func (x *GetGcpUserAccessBindingRequest) GetName() string

func (*GetGcpUserAccessBindingRequest) ProtoMessage

func (*GetGcpUserAccessBindingRequest) ProtoMessage()

func (*GetGcpUserAccessBindingRequest) ProtoReflect

func (x *GetGcpUserAccessBindingRequest) ProtoReflect() protoreflect.Message

func (*GetGcpUserAccessBindingRequest) Reset

func (x *GetGcpUserAccessBindingRequest) Reset()

func (*GetGcpUserAccessBindingRequest) String

func (x *GetGcpUserAccessBindingRequest) String() string

GetServicePerimeterRequest

type GetServicePerimeterRequest struct {

	// Required. Resource name for the [Service Perimeter]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter].
	//
	// Format:
	// `accessPolicies/{policy_id}/servicePerimeters/{service_perimeters_id}`
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

A request to get a particular ServicePerimeter.

func (*GetServicePerimeterRequest) Descriptor

func (*GetServicePerimeterRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetServicePerimeterRequest.ProtoReflect.Descriptor instead.

func (*GetServicePerimeterRequest) GetName

func (x *GetServicePerimeterRequest) GetName() string

func (*GetServicePerimeterRequest) ProtoMessage

func (*GetServicePerimeterRequest) ProtoMessage()

func (*GetServicePerimeterRequest) ProtoReflect

func (x *GetServicePerimeterRequest) ProtoReflect() protoreflect.Message

func (*GetServicePerimeterRequest) Reset

func (x *GetServicePerimeterRequest) Reset()

func (*GetServicePerimeterRequest) String

func (x *GetServicePerimeterRequest) String() string

LevelFormat

type LevelFormat int32

The format used in an AccessLevel.

LevelFormat_LEVEL_FORMAT_UNSPECIFIED, LevelFormat_AS_DEFINED, LevelFormat_CEL

const (
	// The format was not specified.
	LevelFormat_LEVEL_FORMAT_UNSPECIFIED LevelFormat = 0
	// Uses the format the resource was defined in. BasicLevels are returned as
	// BasicLevels, CustomLevels are returned as CustomLevels.
	LevelFormat_AS_DEFINED LevelFormat = 1
	// Use Cloud Common Expression Language when returning the resource.  Both
	// BasicLevels and CustomLevels are returned as CustomLevels.
	LevelFormat_CEL LevelFormat = 2
)

func (LevelFormat) Descriptor

func (LevelFormat) Descriptor() protoreflect.EnumDescriptor

func (LevelFormat) Enum

func (x LevelFormat) Enum() *LevelFormat

func (LevelFormat) EnumDescriptor

func (LevelFormat) EnumDescriptor() ([]byte, []int)

Deprecated: Use LevelFormat.Descriptor instead.

func (LevelFormat) Number

func (x LevelFormat) Number() protoreflect.EnumNumber

func (LevelFormat) String

func (x LevelFormat) String() string

func (LevelFormat) Type

func (LevelFormat) Type() protoreflect.EnumType

ListAccessLevelsRequest

type ListAccessLevelsRequest struct {
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`

	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`

	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`

	AccessLevelFormat LevelFormat "" /* 172 byte string literal not displayed */

}

A request to list all AccessLevels in an AccessPolicy.

func (*ListAccessLevelsRequest) Descriptor

func (*ListAccessLevelsRequest) Descriptor() ([]byte, []int)

Deprecated: Use ListAccessLevelsRequest.ProtoReflect.Descriptor instead.

func (*ListAccessLevelsRequest) GetAccessLevelFormat

func (x *ListAccessLevelsRequest) GetAccessLevelFormat() LevelFormat

func (*ListAccessLevelsRequest) GetPageSize

func (x *ListAccessLevelsRequest) GetPageSize() int32

func (*ListAccessLevelsRequest) GetPageToken

func (x *ListAccessLevelsRequest) GetPageToken() string

func (*ListAccessLevelsRequest) GetParent

func (x *ListAccessLevelsRequest) GetParent() string

func (*ListAccessLevelsRequest) ProtoMessage

func (*ListAccessLevelsRequest) ProtoMessage()

func (*ListAccessLevelsRequest) ProtoReflect

func (x *ListAccessLevelsRequest) ProtoReflect() protoreflect.Message

func (*ListAccessLevelsRequest) Reset

func (x *ListAccessLevelsRequest) Reset()

func (*ListAccessLevelsRequest) String

func (x *ListAccessLevelsRequest) String() string

ListAccessLevelsResponse

type ListAccessLevelsResponse struct {

	// List of the [Access Level]
	// [google.identity.accesscontextmanager.v1.AccessLevel] instances.
	AccessLevels []*AccessLevel `protobuf:"bytes,1,rep,name=access_levels,json=accessLevels,proto3" json:"access_levels,omitempty"`
	// The pagination token to retrieve the next page of results. If the value is
	// empty, no further results remain.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

A response to ListAccessLevelsRequest.

func (*ListAccessLevelsResponse) Descriptor

func (*ListAccessLevelsResponse) Descriptor() ([]byte, []int)

Deprecated: Use ListAccessLevelsResponse.ProtoReflect.Descriptor instead.

func (*ListAccessLevelsResponse) GetAccessLevels

func (x *ListAccessLevelsResponse) GetAccessLevels() []*AccessLevel

func (*ListAccessLevelsResponse) GetNextPageToken

func (x *ListAccessLevelsResponse) GetNextPageToken() string

func (*ListAccessLevelsResponse) ProtoMessage

func (*ListAccessLevelsResponse) ProtoMessage()

func (*ListAccessLevelsResponse) ProtoReflect

func (x *ListAccessLevelsResponse) ProtoReflect() protoreflect.Message

func (*ListAccessLevelsResponse) Reset

func (x *ListAccessLevelsResponse) Reset()

func (*ListAccessLevelsResponse) String

func (x *ListAccessLevelsResponse) String() string

ListAccessPoliciesRequest

type ListAccessPoliciesRequest struct {

	// Required. Resource name for the container to list AccessPolicy instances
	// from.
	//
	// Format:
	// `organizations/{org_id}`
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Number of AccessPolicy instances to include in the list. Default 100.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// Next page token for the next batch of AccessPolicy instances. Defaults to
	// the first page of results.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// contains filtered or unexported fields
}

A request to list all AccessPolicies for a container.

func (*ListAccessPoliciesRequest) Descriptor

func (*ListAccessPoliciesRequest) Descriptor() ([]byte, []int)

Deprecated: Use ListAccessPoliciesRequest.ProtoReflect.Descriptor instead.

func (*ListAccessPoliciesRequest) GetPageSize

func (x *ListAccessPoliciesRequest) GetPageSize() int32

func (*ListAccessPoliciesRequest) GetPageToken

func (x *ListAccessPoliciesRequest) GetPageToken() string

func (*ListAccessPoliciesRequest) GetParent

func (x *ListAccessPoliciesRequest) GetParent() string

func (*ListAccessPoliciesRequest) ProtoMessage

func (*ListAccessPoliciesRequest) ProtoMessage()

func (*ListAccessPoliciesRequest) ProtoReflect

func (x *ListAccessPoliciesRequest) ProtoReflect() protoreflect.Message

func (*ListAccessPoliciesRequest) Reset

func (x *ListAccessPoliciesRequest) Reset()

func (*ListAccessPoliciesRequest) String

func (x *ListAccessPoliciesRequest) String() string

ListAccessPoliciesResponse

type ListAccessPoliciesResponse struct {

	// List of the AccessPolicy instances.
	AccessPolicies []*AccessPolicy `protobuf:"bytes,1,rep,name=access_policies,json=accessPolicies,proto3" json:"access_policies,omitempty"`
	// The pagination token to retrieve the next page of results. If the value is
	// empty, no further results remain.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

A response to ListAccessPoliciesRequest.

func (*ListAccessPoliciesResponse) Descriptor

func (*ListAccessPoliciesResponse) Descriptor() ([]byte, []int)

Deprecated: Use ListAccessPoliciesResponse.ProtoReflect.Descriptor instead.

func (*ListAccessPoliciesResponse) GetAccessPolicies

func (x *ListAccessPoliciesResponse) GetAccessPolicies() []*AccessPolicy

func (*ListAccessPoliciesResponse) GetNextPageToken

func (x *ListAccessPoliciesResponse) GetNextPageToken() string

func (*ListAccessPoliciesResponse) ProtoMessage

func (*ListAccessPoliciesResponse) ProtoMessage()

func (*ListAccessPoliciesResponse) ProtoReflect

func (x *ListAccessPoliciesResponse) ProtoReflect() protoreflect.Message

func (*ListAccessPoliciesResponse) Reset

func (x *ListAccessPoliciesResponse) Reset()

func (*ListAccessPoliciesResponse) String

func (x *ListAccessPoliciesResponse) String() string

ListGcpUserAccessBindingsRequest

type ListGcpUserAccessBindingsRequest struct {

	// Required. Example: "organizations/256"
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Optional. Maximum number of items to return. The server may return fewer items.
	// If left blank, the server may return any number of items.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// Optional. If left blank, returns the first page. To enumerate all items, use the
	// [next_page_token]
	// [google.identity.accesscontextmanager.v1.ListGcpUserAccessBindingsResponse.next_page_token]
	// from your previous list operation.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// contains filtered or unexported fields
}

Request of [ListGcpUserAccessBindings] [google.identity.accesscontextmanager.v1.AccessContextManager.ListGcpUserAccessBindings].

func (*ListGcpUserAccessBindingsRequest) Descriptor

func (*ListGcpUserAccessBindingsRequest) Descriptor() ([]byte, []int)

Deprecated: Use ListGcpUserAccessBindingsRequest.ProtoReflect.Descriptor instead.

func (*ListGcpUserAccessBindingsRequest) GetPageSize

func (x *ListGcpUserAccessBindingsRequest) GetPageSize() int32

func (*ListGcpUserAccessBindingsRequest) GetPageToken

func (x *ListGcpUserAccessBindingsRequest) GetPageToken() string

func (*ListGcpUserAccessBindingsRequest) GetParent

func (x *ListGcpUserAccessBindingsRequest) GetParent() string

func (*ListGcpUserAccessBindingsRequest) ProtoMessage

func (*ListGcpUserAccessBindingsRequest) ProtoMessage()

func (*ListGcpUserAccessBindingsRequest) ProtoReflect

func (x *ListGcpUserAccessBindingsRequest) ProtoReflect() protoreflect.Message

func (*ListGcpUserAccessBindingsRequest) Reset

func (x *ListGcpUserAccessBindingsRequest) Reset()

func (*ListGcpUserAccessBindingsRequest) String

func (x *ListGcpUserAccessBindingsRequest) String() string

ListGcpUserAccessBindingsResponse

type ListGcpUserAccessBindingsResponse struct {
	GcpUserAccessBindings []*GcpUserAccessBinding "" /* 128 byte string literal not displayed */

	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`

}

Response of [ListGcpUserAccessBindings] [google.identity.accesscontextmanager.v1.AccessContextManager.ListGcpUserAccessBindings].

func (*ListGcpUserAccessBindingsResponse) Descriptor

func (*ListGcpUserAccessBindingsResponse) Descriptor() ([]byte, []int)

Deprecated: Use ListGcpUserAccessBindingsResponse.ProtoReflect.Descriptor instead.

func (*ListGcpUserAccessBindingsResponse) GetGcpUserAccessBindings

func (x *ListGcpUserAccessBindingsResponse) GetGcpUserAccessBindings() []*GcpUserAccessBinding

func (*ListGcpUserAccessBindingsResponse) GetNextPageToken

func (x *ListGcpUserAccessBindingsResponse) GetNextPageToken() string

func (*ListGcpUserAccessBindingsResponse) ProtoMessage

func (*ListGcpUserAccessBindingsResponse) ProtoMessage()

func (*ListGcpUserAccessBindingsResponse) ProtoReflect

func (x *ListGcpUserAccessBindingsResponse) ProtoReflect() protoreflect.Message

func (*ListGcpUserAccessBindingsResponse) Reset

func (x *ListGcpUserAccessBindingsResponse) Reset()

func (*ListGcpUserAccessBindingsResponse) String

func (x *ListGcpUserAccessBindingsResponse) String() string

ListServicePerimetersRequest

type ListServicePerimetersRequest struct {

	// Required. Resource name for the access policy to list [Service Perimeters]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] from.
	//
	// Format:
	// `accessPolicies/{policy_id}`
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Number of [Service Perimeters]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] to include
	// in the list. Default 100.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// Next page token for the next batch of [Service Perimeter]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] instances.
	// Defaults to the first page of results.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// contains filtered or unexported fields
}

A request to list all ServicePerimeters in an AccessPolicy.

func (*ListServicePerimetersRequest) Descriptor

func (*ListServicePerimetersRequest) Descriptor() ([]byte, []int)

Deprecated: Use ListServicePerimetersRequest.ProtoReflect.Descriptor instead.

func (*ListServicePerimetersRequest) GetPageSize

func (x *ListServicePerimetersRequest) GetPageSize() int32

func (*ListServicePerimetersRequest) GetPageToken

func (x *ListServicePerimetersRequest) GetPageToken() string

func (*ListServicePerimetersRequest) GetParent

func (x *ListServicePerimetersRequest) GetParent() string

func (*ListServicePerimetersRequest) ProtoMessage

func (*ListServicePerimetersRequest) ProtoMessage()

func (*ListServicePerimetersRequest) ProtoReflect

func (x *ListServicePerimetersRequest) ProtoReflect() protoreflect.Message

func (*ListServicePerimetersRequest) Reset

func (x *ListServicePerimetersRequest) Reset()

func (*ListServicePerimetersRequest) String

func (x *ListServicePerimetersRequest) String() string

ListServicePerimetersResponse

type ListServicePerimetersResponse struct {

	// List of the [Service Perimeter]
	// [google.identity.accesscontextmanager.v1.ServicePerimeter] instances.
	ServicePerimeters []*ServicePerimeter `protobuf:"bytes,1,rep,name=service_perimeters,json=servicePerimeters,proto3" json:"service_perimeters,omitempty"`
	// The pagination token to retrieve the next page of results. If the value is
	// empty, no further results remain.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

A response to ListServicePerimetersRequest.

func (*ListServicePerimetersResponse) Descriptor

func (*ListServicePerimetersResponse) Descriptor() ([]byte, []int)

Deprecated: Use ListServicePerimetersResponse.ProtoReflect.Descriptor instead.

func (*ListServicePerimetersResponse) GetNextPageToken

func (x *ListServicePerimetersResponse) GetNextPageToken() string

func (*ListServicePerimetersResponse) GetServicePerimeters

func (x *ListServicePerimetersResponse) GetServicePerimeters() []*ServicePerimeter

func (*ListServicePerimetersResponse) ProtoMessage

func (*ListServicePerimetersResponse) ProtoMessage()

func (*ListServicePerimetersResponse) ProtoReflect

func (x *ListServicePerimetersResponse) ProtoReflect() protoreflect.Message

func (*ListServicePerimetersResponse) Reset

func (x *ListServicePerimetersResponse) Reset()

func (*ListServicePerimetersResponse) String

func (x *ListServicePerimetersResponse) String() string

OsConstraint

type OsConstraint struct {
	OsType _type.OsType "" /* 134 byte string literal not displayed */

	MinimumVersion string `protobuf:"bytes,2,opt,name=minimum_version,json=minimumVersion,proto3" json:"minimum_version,omitempty"`

	RequireVerifiedChromeOs bool "" /* 135 byte string literal not displayed */

}

A restriction on the OS type and version of devices making requests.

func (*OsConstraint) Descriptor

func (*OsConstraint) Descriptor() ([]byte, []int)

Deprecated: Use OsConstraint.ProtoReflect.Descriptor instead.

func (*OsConstraint) GetMinimumVersion

func (x *OsConstraint) GetMinimumVersion() string

func (*OsConstraint) GetOsType

func (x *OsConstraint) GetOsType() _type.OsType

func (*OsConstraint) GetRequireVerifiedChromeOs

func (x *OsConstraint) GetRequireVerifiedChromeOs() bool

func (*OsConstraint) ProtoMessage