Method: consentStores.queryAccessibleData

Full name: projects.locations.datasets.consentStores.queryAccessibleData

Queries all data_ids that are consented for a specified use in the given consent store and writes them to a specified destination.

The returned Operation includes a progress counter for the number of User data mappings processed.

Errors are logged to Cloud Logging (see Viewing error logs in Cloud Logging). For example, the following sample log entry shows a failed to evaluate consent policy error that occurred during a consentStores.queryAccessibleData call to consent store projects/{projectId}/locations/{locationId}/datasets/{datasetId}/consentStores/{consentStoreId}.

jsonPayload: {
  @type:
  "type.googleapis.com/google.cloud.healthcare.logging.QueryAccessibleDataLogEntry"
  error: {
    code:  9
    message:  "failed to evaluate consent policy"
  }
  resourceName:
  "projects/{projectId}/locations/{locationId}/datasets/{datasetId}/consentStores/{consentStoreId}/consents/{consentId}"
}
logName:
"projects/{projectId}/logs/healthcare.googleapis.com%2Fquery_accessible_data"
operation: {
  id:
  "projects/{projectId}/locations/{locationId}/datasets/{datasetId}/operations/{operation_id}"
  producer:  "healthcare.googleapis.com/consentStores.queryAccessibleData"
}
receiveTimestamp:  "TIMESTAMP"
resource: {
  labels: {
    consentStoreId:  "{consentStoreId}"
    datasetId:  "{datasetId}"
    location:  "{locationId}"
    projectId:  "{projectId}"
  }
  type:  "healthcare_consent_store"
}
severity:  "ERROR"
timestamp:  "TIMESTAMP"

HTTP request

POST https://healthcare.googleapis.com/v1beta1/{consentStore=projects/*/locations/*/datasets/*/consentStores/*}:queryAccessibleData

The URL uses gRPC Transcoding syntax.

Path parameters

Parameters

Parameters
`consentStore`	`string` Required. Name of the consent store to retrieve User data mappings from. Authorization requires the following IAM permission on the specified resource `consentStore`: `healthcare.consentStores.queryAccessibleData`

consentStore

string

Required. Name of the consent store to retrieve User data mappings from.

Authorization requires the following IAM permission on the specified resource consentStore:

healthcare.consentStores.queryAccessibleData

Request body

The request body contains data with the following structure:

JSON representation
{ "resourceAttributes": { string: string, ... }, "requestAttributes": { string: string, ... }, "gcsDestination": { object(`GcsDestination`) } }

Fields

Fields
`resourceAttributes`	`map (key: string, value: string)` Optional. The values of resource attributes associated with the type of resources being requested. If no values are specified, then all resource types are included in the output. An object containing a list of `"key": value` pairs. Example: `{ "name": "wrench", "mass": "1.3kg", "count": "3" }`.
`requestAttributes`	`map (key: string, value: string)` The values of request attributes associated with this access request. An object containing a list of `"key": value` pairs. Example: `{ "name": "wrench", "mass": "1.3kg", "count": "3" }`.
`gcsDestination`	`object(GcsDestination)` The Cloud Storage destination. The Cloud Healthcare API service account must have the `roles/storage.objectAdmin` Cloud IAM role for this Cloud Storage location.

resourceAttributes

map (key: string, value: string)

Optional. The values of resource attributes associated with the type of resources being requested. If no values are specified, then all resource types are included in the output.

An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }.

requestAttributes

map (key: string, value: string)

The values of request attributes associated with this access request.

An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }.

gcsDestination

object(GcsDestination)

The Cloud Storage destination. The Cloud Healthcare API service account must have the roles/storage.objectAdmin Cloud IAM role for this Cloud Storage location.

Response body

If successful, the response body contains an instance of Operation.

Authorization Scopes

Requires one of the following OAuth scopes:

https://www.googleapis.com/auth/cloud-healthcare
https://www.googleapis.com/auth/cloud-platform

For more information, see the Authentication Overview.

GcsDestination

The Cloud Storage location for export.

JSON representation
{ "uriPrefix": string }

Fields

Fields
`uriPrefix`	`string` URI for a Cloud Storage directory where the server writes result files, in the format `gs://{bucket-id}/{path/to/destination/dir}`. If there is no trailing slash, the service appends one when composing the object path. The user is responsible for creating the Cloud Storage bucket and directory referenced in `uriPrefix`.

uriPrefix

string

URI for a Cloud Storage directory where the server writes result files, in the format gs://{bucket-id}/{path/to/destination/dir}. If there is no trailing slash, the service appends one when composing the object path. The user is responsible for creating the Cloud Storage bucket and directory referenced in uriPrefix.