Class AnalyzeIamPolicyRequest.Options

public static final class AnalyzeIamPolicyRequest.Options extends GeneratedMessageV3 implements AnalyzeIamPolicyRequest.OptionsOrBuilder

Contains request options.

Protobuf type google.cloud.asset.v1p4beta1.AnalyzeIamPolicyRequest.Options

Inheritance

Object > AbstractMessageLite<MessageType,BuilderType> > AbstractMessage > GeneratedMessageV3 > AnalyzeIamPolicyRequest.Options

Fields

ANALYZE_SERVICE_ACCOUNT_IMPERSONATION_FIELD_NUMBER

public static final int ANALYZE_SERVICE_ACCOUNT_IMPERSONATION_FIELD_NUMBER
Field Value
TypeDescription
int

EXECUTION_TIMEOUT_FIELD_NUMBER

public static final int EXECUTION_TIMEOUT_FIELD_NUMBER
Field Value
TypeDescription
int

EXPAND_GROUPS_FIELD_NUMBER

public static final int EXPAND_GROUPS_FIELD_NUMBER
Field Value
TypeDescription
int

EXPAND_RESOURCES_FIELD_NUMBER

public static final int EXPAND_RESOURCES_FIELD_NUMBER
Field Value
TypeDescription
int

EXPAND_ROLES_FIELD_NUMBER

public static final int EXPAND_ROLES_FIELD_NUMBER
Field Value
TypeDescription
int

OUTPUT_GROUP_EDGES_FIELD_NUMBER

public static final int OUTPUT_GROUP_EDGES_FIELD_NUMBER
Field Value
TypeDescription
int

OUTPUT_RESOURCE_EDGES_FIELD_NUMBER

public static final int OUTPUT_RESOURCE_EDGES_FIELD_NUMBER
Field Value
TypeDescription
int

Methods

equals(Object obj)

public boolean equals(Object obj)
Parameter
NameDescription
objObject
Returns
TypeDescription
boolean
Overrides

getAnalyzeServiceAccountImpersonation()

public boolean getAnalyzeServiceAccountImpersonation()

Optional. If true, the response will include access analysis from identities to resources via service account impersonation. This is a very expensive operation, because many derived queries will be executed. We highly recommend you use ExportIamPolicyAnalysis rpc instead. For example, if the request analyzes for which resources user A has permission P, and there's an IAM policy states user A has iam.serviceAccounts.getAccessToken permission to a service account SA, and there's another IAM policy states service account SA has permission P to a GCP folder F, then user A potentially has access to the GCP folder F. And those advanced analysis results will be included in AnalyzeIamPolicyResponse.service_account_impersonation_analysis. Another example, if the request analyzes for who has permission P to a GCP folder F, and there's an IAM policy states user A has iam.serviceAccounts.actAs permission to a service account SA, and there's another IAM policy states service account SA has permission P to the GCP folder F, then user A potentially has access to the GCP folder F. And those advanced analysis results will be included in AnalyzeIamPolicyResponse.service_account_impersonation_analysis. Default is false.

bool analyze_service_account_impersonation = 6 [(.google.api.field_behavior) = OPTIONAL];

Returns
TypeDescription
boolean

The analyzeServiceAccountImpersonation.

getDefaultInstance()

public static AnalyzeIamPolicyRequest.Options getDefaultInstance()
Returns
TypeDescription
AnalyzeIamPolicyRequest.Options

getDefaultInstanceForType()

public AnalyzeIamPolicyRequest.Options getDefaultInstanceForType()
Returns
TypeDescription
AnalyzeIamPolicyRequest.Options

getDescriptor()

public static final Descriptors.Descriptor getDescriptor()
Returns
TypeDescription
Descriptor

getExecutionTimeout()

public Duration getExecutionTimeout()

Optional. Amount of time executable has to complete. See JSON representation of Duration. If this field is set with a value less than the RPC deadline, and the execution of your query hasn't finished in the specified execution timeout, you will get a response with partial result. Otherwise, your query's execution will continue until the RPC deadline. If it's not finished until then, you will get a DEADLINE_EXCEEDED error. Default is empty.

.google.protobuf.Duration execution_timeout = 7 [(.google.api.field_behavior) = OPTIONAL];

Returns
TypeDescription
Duration

The executionTimeout.

getExecutionTimeoutOrBuilder()

public DurationOrBuilder getExecutionTimeoutOrBuilder()

Optional. Amount of time executable has to complete. See JSON representation of Duration. If this field is set with a value less than the RPC deadline, and the execution of your query hasn't finished in the specified execution timeout, you will get a response with partial result. Otherwise, your query's execution will continue until the RPC deadline. If it's not finished until then, you will get a DEADLINE_EXCEEDED error. Default is empty.

.google.protobuf.Duration execution_timeout = 7 [(.google.api.field_behavior) = OPTIONAL];

Returns
TypeDescription
DurationOrBuilder

getExpandGroups()

public boolean getExpandGroups()

Optional. If true, the identities section of the result will expand any Google groups appearing in an IAM policy binding. If [identity_selector][] is specified, the identity in the result will be determined by the selector, and this flag will have no effect. Default is false.

bool expand_groups = 1 [(.google.api.field_behavior) = OPTIONAL];

Returns
TypeDescription
boolean

The expandGroups.

getExpandResources()

public boolean getExpandResources()

Optional. If true, the resource section of the result will expand any resource attached to an IAM policy to include resources lower in the resource hierarchy. For example, if the request analyzes for which resources user A has permission P, and the results include an IAM policy with P on a GCP folder, the results will also include resources in that folder with permission P. If [resource_selector][] is specified, the resource section of the result will be determined by the selector, and this flag will have no effect. Default is false.

bool expand_resources = 3 [(.google.api.field_behavior) = OPTIONAL];

Returns
TypeDescription
boolean

The expandResources.

getExpandRoles()

public boolean getExpandRoles()

Optional. If true, the access section of result will expand any roles appearing in IAM policy bindings to include their permissions. If [access_selector][] is specified, the access section of the result will be determined by the selector, and this flag will have no effect. Default is false.

bool expand_roles = 2 [(.google.api.field_behavior) = OPTIONAL];

Returns
TypeDescription
boolean

The expandRoles.

getOutputGroupEdges()

public boolean getOutputGroupEdges()

Optional. If true, the result will output group identity edges, starting from the binding's group members, to any expanded identities. Default is false.

bool output_group_edges = 5 [(.google.api.field_behavior) = OPTIONAL];

Returns
TypeDescription
boolean

The outputGroupEdges.

getOutputResourceEdges()

public boolean getOutputResourceEdges()

Optional. If true, the result will output resource edges, starting from the policy attached resource, to any expanded resources. Default is false.

bool output_resource_edges = 4 [(.google.api.field_behavior) = OPTIONAL];

Returns
TypeDescription
boolean

The outputResourceEdges.

getParserForType()

public Parser<AnalyzeIamPolicyRequest.Options> getParserForType()
Returns
TypeDescription
Parser<Options>
Overrides

getSerializedSize()

public int getSerializedSize()
Returns
TypeDescription
int
Overrides

getUnknownFields()

public final UnknownFieldSet getUnknownFields()
Returns
TypeDescription
UnknownFieldSet
Overrides

hasExecutionTimeout()

public boolean hasExecutionTimeout()

Optional. Amount of time executable has to complete. See JSON representation of Duration. If this field is set with a value less than the RPC deadline, and the execution of your query hasn't finished in the specified execution timeout, you will get a response with partial result. Otherwise, your query's execution will continue until the RPC deadline. If it's not finished until then, you will get a DEADLINE_EXCEEDED error. Default is empty.

.google.protobuf.Duration execution_timeout = 7 [(.google.api.field_behavior) = OPTIONAL];

Returns
TypeDescription
boolean

Whether the executionTimeout field is set.

hashCode()

public int hashCode()
Returns
TypeDescription
int
Overrides

internalGetFieldAccessorTable()

protected GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
Returns
TypeDescription
FieldAccessorTable
Overrides

isInitialized()

public final boolean isInitialized()
Returns
TypeDescription
boolean
Overrides

newBuilder()

public static AnalyzeIamPolicyRequest.Options.Builder newBuilder()
Returns
TypeDescription
AnalyzeIamPolicyRequest.Options.Builder

newBuilder(AnalyzeIamPolicyRequest.Options prototype)

public static AnalyzeIamPolicyRequest.Options.Builder newBuilder(AnalyzeIamPolicyRequest.Options prototype)
Parameter
NameDescription
prototypeAnalyzeIamPolicyRequest.Options
Returns
TypeDescription
AnalyzeIamPolicyRequest.Options.Builder

newBuilderForType()

public AnalyzeIamPolicyRequest.Options.Builder newBuilderForType()
Returns
TypeDescription
AnalyzeIamPolicyRequest.Options.Builder

newBuilderForType(GeneratedMessageV3.BuilderParent parent)

protected AnalyzeIamPolicyRequest.Options.Builder newBuilderForType(GeneratedMessageV3.BuilderParent parent)
Parameter
NameDescription
parentBuilderParent
Returns
TypeDescription
AnalyzeIamPolicyRequest.Options.Builder
Overrides

newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)

protected Object newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)
Parameter
NameDescription
unusedUnusedPrivateParameter
Returns
TypeDescription
Object
Overrides

parseDelimitedFrom(InputStream input)

public static AnalyzeIamPolicyRequest.Options parseDelimitedFrom(InputStream input)
Parameter
NameDescription
inputInputStream
Returns
TypeDescription
AnalyzeIamPolicyRequest.Options
Exceptions
TypeDescription
IOException

parseDelimitedFrom(InputStream input, ExtensionRegistryLite extensionRegistry)

public static AnalyzeIamPolicyRequest.Options parseDelimitedFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
Parameters
NameDescription
inputInputStream
extensionRegistryExtensionRegistryLite
Returns
TypeDescription
AnalyzeIamPolicyRequest.Options
Exceptions
TypeDescription
IOException

parseFrom(byte[] data)

public static AnalyzeIamPolicyRequest.Options parseFrom(byte[] data)
Parameter
NameDescription
databyte[]
Returns
TypeDescription
AnalyzeIamPolicyRequest.Options
Exceptions
TypeDescription
InvalidProtocolBufferException

parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)

public static AnalyzeIamPolicyRequest.Options parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)
Parameters
NameDescription
databyte[]
extensionRegistryExtensionRegistryLite
Returns
TypeDescription
AnalyzeIamPolicyRequest.Options
Exceptions
TypeDescription
InvalidProtocolBufferException

parseFrom(ByteString data)

public static AnalyzeIamPolicyRequest.Options parseFrom(ByteString data)
Parameter
NameDescription
dataByteString
Returns
TypeDescription
AnalyzeIamPolicyRequest.Options
Exceptions
TypeDescription
InvalidProtocolBufferException

parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)

public static AnalyzeIamPolicyRequest.Options parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)
Parameters
NameDescription
dataByteString
extensionRegistryExtensionRegistryLite
Returns
TypeDescription
AnalyzeIamPolicyRequest.Options
Exceptions
TypeDescription
InvalidProtocolBufferException

parseFrom(CodedInputStream input)

public static AnalyzeIamPolicyRequest.Options parseFrom(CodedInputStream input)
Parameter
NameDescription
inputCodedInputStream
Returns
TypeDescription
AnalyzeIamPolicyRequest.Options
Exceptions
TypeDescription
IOException

parseFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)

public static AnalyzeIamPolicyRequest.Options parseFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)
Parameters
NameDescription
inputCodedInputStream
extensionRegistryExtensionRegistryLite
Returns
TypeDescription
AnalyzeIamPolicyRequest.Options
Exceptions
TypeDescription
IOException

parseFrom(InputStream input)

public static AnalyzeIamPolicyRequest.Options parseFrom(InputStream input)
Parameter
NameDescription
inputInputStream
Returns
TypeDescription
AnalyzeIamPolicyRequest.Options
Exceptions
TypeDescription
IOException

parseFrom(InputStream input, ExtensionRegistryLite extensionRegistry)

public static AnalyzeIamPolicyRequest.Options parseFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
Parameters
NameDescription
inputInputStream
extensionRegistryExtensionRegistryLite
Returns
TypeDescription
AnalyzeIamPolicyRequest.Options
Exceptions
TypeDescription
IOException

parseFrom(ByteBuffer data)

public static AnalyzeIamPolicyRequest.Options parseFrom(ByteBuffer data)
Parameter
NameDescription
dataByteBuffer
Returns
TypeDescription
AnalyzeIamPolicyRequest.Options
Exceptions
TypeDescription
InvalidProtocolBufferException

parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)

public static AnalyzeIamPolicyRequest.Options parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)
Parameters
NameDescription
dataByteBuffer
extensionRegistryExtensionRegistryLite
Returns
TypeDescription
AnalyzeIamPolicyRequest.Options
Exceptions
TypeDescription
InvalidProtocolBufferException

parser()

public static Parser<AnalyzeIamPolicyRequest.Options> parser()
Returns
TypeDescription
Parser<Options>

toBuilder()

public AnalyzeIamPolicyRequest.Options.Builder toBuilder()
Returns
TypeDescription
AnalyzeIamPolicyRequest.Options.Builder

writeTo(CodedOutputStream output)

public void writeTo(CodedOutputStream output)
Parameter
NameDescription
outputCodedOutputStream
Overrides Exceptions
TypeDescription
IOException