Class Explanations.BindingExplanation.Builder (1.2.0)

Version 1.2.0

• 1.53.0 (latest)
• 1.52.0
• 1.51.0
• 1.50.0
• 1.48.0
• 1.47.0
• 1.46.0
• 1.45.0
• 1.44.0
• 1.43.0
• 1.42.0
• 1.41.0
• 1.40.0
• 1.39.0
• 1.38.0
• 1.36.0
• 1.35.0
• 1.34.0
• 1.33.0
• 1.32.0
• 1.31.0
• 1.30.0
• 1.29.0
• 1.28.0
• 1.27.0
• 1.26.0
• 1.23.0
• 1.22.0
• 1.21.0
• 1.20.0
• 1.19.0
• 1.18.0
• 1.17.0
• 1.16.0
• 1.15.0
• 1.14.0
• 1.13.0
• 1.12.0
• 1.11.0
• 1.10.0
• 1.8.0
• 1.7.0
• 1.6.0
• 1.5.0
• 1.4.0
• 1.3.0
• 1.2.6
• 1.1.0
• 1.0.4
• 0.4.4

public static final class Explanations.BindingExplanation.Builder extends GeneratedMessageV3.Builder<Explanations.BindingExplanation.Builder> implements Explanations.BindingExplanationOrBuilder

Details about how a binding in a policy affects a member's ability to use a permission.

Protobuf type google.cloud.policytroubleshooter.v1.BindingExplanation

Inheritance

Object > AbstractMessageLite.Builder<MessageType,BuilderType> > AbstractMessage.Builder<BuilderType> > GeneratedMessageV3.Builder > Explanations.BindingExplanation.Builder

Implements

Explanations.BindingExplanationOrBuilder

Inherited Members

AbstractMessage.Builder.findInitializationErrors()

AbstractMessage.Builder.getInitializationErrorString()

AbstractMessage.Builder.internalMergeFrom(AbstractMessageLite)

AbstractMessage.Builder.mergeFrom(byte[])

AbstractMessage.Builder.mergeFrom(byte[],ExtensionRegistryLite)

AbstractMessage.Builder.mergeFrom(byte[],int,int)

AbstractMessage.Builder.mergeFrom(byte[],int,int,ExtensionRegistryLite)

AbstractMessage.Builder.mergeFrom(ByteString)

AbstractMessage.Builder.mergeFrom(ByteString,ExtensionRegistryLite)

AbstractMessage.Builder.mergeFrom(CodedInputStream)

AbstractMessage.Builder.mergeFrom(CodedInputStream,ExtensionRegistryLite)

AbstractMessage.Builder.mergeFrom(Message)

AbstractMessage.Builder.mergeFrom(InputStream)

AbstractMessage.Builder.mergeFrom(InputStream,ExtensionRegistryLite)

AbstractMessage.Builder.newUninitializedMessageException(Message)

AbstractMessage.Builder.toString()

AbstractMessageLite.Builder.<T>addAll(Iterable<T>,Collection<? super T>)

AbstractMessageLite.Builder.<T>addAll(Iterable<T>,List<? super T>)

AbstractMessageLite.Builder.internalMergeFrom(MessageType)

AbstractMessageLite.Builder.mergeDelimitedFrom(InputStream)

AbstractMessageLite.Builder.mergeDelimitedFrom(InputStream,ExtensionRegistryLite)

AbstractMessageLite.Builder.mergeFrom(MessageLite)

AbstractMessageLite.Builder.newUninitializedMessageException(MessageLite)

GeneratedMessageV3.Builder.addRepeatedField(Descriptors.FieldDescriptor,Object)

GeneratedMessageV3.Builder.clear()

GeneratedMessageV3.Builder.clearField(Descriptors.FieldDescriptor)

GeneratedMessageV3.Builder.clearOneof(Descriptors.OneofDescriptor)

GeneratedMessageV3.Builder.clone()

GeneratedMessageV3.Builder.getAllFields()

GeneratedMessageV3.Builder.getDescriptorForType()

GeneratedMessageV3.Builder.getField(Descriptors.FieldDescriptor)

GeneratedMessageV3.Builder.getFieldBuilder(Descriptors.FieldDescriptor)

GeneratedMessageV3.Builder.getOneofFieldDescriptor(Descriptors.OneofDescriptor)

GeneratedMessageV3.Builder.getParentForChildren()

GeneratedMessageV3.Builder.getRepeatedField(Descriptors.FieldDescriptor,int)

GeneratedMessageV3.Builder.getRepeatedFieldBuilder(Descriptors.FieldDescriptor,int)

GeneratedMessageV3.Builder.getRepeatedFieldCount(Descriptors.FieldDescriptor)

GeneratedMessageV3.Builder.getUnknownFields()

GeneratedMessageV3.Builder.hasField(Descriptors.FieldDescriptor)

GeneratedMessageV3.Builder.hasOneof(Descriptors.OneofDescriptor)

GeneratedMessageV3.Builder.internalGetFieldAccessorTable()

GeneratedMessageV3.Builder.internalGetMapField(int)

GeneratedMessageV3.Builder.internalGetMutableMapField(int)

GeneratedMessageV3.Builder.isClean()

GeneratedMessageV3.Builder.isInitialized()

GeneratedMessageV3.Builder.markClean()

GeneratedMessageV3.Builder.mergeUnknownFields(UnknownFieldSet)

GeneratedMessageV3.Builder.newBuilderForField(Descriptors.FieldDescriptor)

GeneratedMessageV3.Builder.onBuilt()

GeneratedMessageV3.Builder.onChanged()

GeneratedMessageV3.Builder.setField(Descriptors.FieldDescriptor,Object)

GeneratedMessageV3.Builder.setRepeatedField(Descriptors.FieldDescriptor,int,Object)

GeneratedMessageV3.Builder.setUnknownFields(UnknownFieldSet)

GeneratedMessageV3.Builder.setUnknownFieldsProto3(UnknownFieldSet)

Object.equals(Object)

Object.finalize()

Object.getClass()

Object.hashCode()

Object.notify()

Object.notifyAll()

Object.wait()

Object.wait(long)

Object.wait(long,int)

Static Methods

getDescriptor()

public static final Descriptors.Descriptor getDescriptor()

Returns

Type	Description
Descriptor

Methods

addRepeatedField(Descriptors.FieldDescriptor field, Object value)

public Explanations.BindingExplanation.Builder addRepeatedField(Descriptors.FieldDescriptor field, Object value)

Parameters

Name	Description
field	FieldDescriptor
value	Object

Returns

Type	Description
Explanations.BindingExplanation.Builder

Overrides

GeneratedMessageV3.Builder<BuilderType>.addRepeatedField(Descriptors.FieldDescriptor field, Object value)

build()

public Explanations.BindingExplanation build()

Returns

Type	Description
Explanations.BindingExplanation

buildPartial()

public Explanations.BindingExplanation buildPartial()

Returns

Type	Description
Explanations.BindingExplanation

clear()

public Explanations.BindingExplanation.Builder clear()

Returns

Type	Description
Explanations.BindingExplanation.Builder

Overrides

GeneratedMessageV3.Builder<BuilderType>.clear()

clearAccess()

public Explanations.BindingExplanation.Builder clearAccess()

Required. Indicates whether this binding provides the specified permission to the specified member for the specified resource. This field does not indicate whether the member actually has the permission for the resource. There might be another binding that overrides this binding. To determine whether the member actually has the permission, use the access field in the TroubleshootIamPolicyResponse.

.google.cloud.policytroubleshooter.v1.AccessState access = 1 [(.google.api.field_behavior) = REQUIRED];

Returns

Type	Description
Explanations.BindingExplanation.Builder	This builder for chaining.

clearCondition()

public Explanations.BindingExplanation.Builder clearCondition()

A condition expression that prevents access unless the expression evaluates to true. To learn about IAM Conditions, see http://cloud.google.com/iam/help/conditions/overview.

.google.type.Expr condition = 7;

Returns

Type	Description
Explanations.BindingExplanation.Builder

clearField(Descriptors.FieldDescriptor field)

public Explanations.BindingExplanation.Builder clearField(Descriptors.FieldDescriptor field)

Parameter

Name	Description
field	FieldDescriptor

Returns

Type	Description
Explanations.BindingExplanation.Builder

Overrides

GeneratedMessageV3.Builder<BuilderType>.clearField(Descriptors.FieldDescriptor field)

clearMemberships()

public Explanations.BindingExplanation.Builder clearMemberships()

Returns

Type	Description
Explanations.BindingExplanation.Builder

clearOneof(Descriptors.OneofDescriptor oneof)

public Explanations.BindingExplanation.Builder clearOneof(Descriptors.OneofDescriptor oneof)

Parameter

Name	Description
oneof	OneofDescriptor

Returns

Type	Description
Explanations.BindingExplanation.Builder

Overrides

GeneratedMessageV3.Builder<BuilderType>.clearOneof(Descriptors.OneofDescriptor oneof)

clearRelevance()

public Explanations.BindingExplanation.Builder clearRelevance()

The relevance of this binding to the overall determination for the entire policy.

.google.cloud.policytroubleshooter.v1.HeuristicRelevance relevance = 6;

Returns

Type	Description
Explanations.BindingExplanation.Builder	This builder for chaining.

clearRole()

public Explanations.BindingExplanation.Builder clearRole()

The role that this binding grants. For example, roles/compute.serviceAgent. For a complete list of predefined IAM roles, as well as the permissions in each role, see https://cloud.google.com/iam/help/roles/reference.

string role = 2;

Returns

Type	Description
Explanations.BindingExplanation.Builder	This builder for chaining.

clearRolePermission()

public Explanations.BindingExplanation.Builder clearRolePermission()

Indicates whether the role granted by this binding contains the specified permission.

.google.cloud.policytroubleshooter.v1.BindingExplanation.RolePermission role_permission = 3;

Returns

Type	Description
Explanations.BindingExplanation.Builder	This builder for chaining.

clearRolePermissionRelevance()

public Explanations.BindingExplanation.Builder clearRolePermissionRelevance()

The relevance of the permission's existence, or nonexistence, in the role to the overall determination for the entire policy.

.google.cloud.policytroubleshooter.v1.HeuristicRelevance role_permission_relevance = 4;

Returns

Type	Description
Explanations.BindingExplanation.Builder	This builder for chaining.

clone()

public Explanations.BindingExplanation.Builder clone()

Returns

Type	Description
Explanations.BindingExplanation.Builder

Overrides

GeneratedMessageV3.Builder<BuilderType>.clone()

containsMemberships(String key)

public boolean containsMemberships(String key)

Indicates whether each member in the binding includes the member specified in the request, either directly or indirectly. Each key identifies a member in the binding, and each value indicates whether the member in the binding includes the member in the request. For example, suppose that a binding includes the following members:

• user:[e-mail]
• group:[e-mail] You want to troubleshoot access for user:[e-mail]. This user is a member of the group group:[e-mail]. For the first member in the binding, the key is user:[e-mail], and the membership field in the value is set to MEMBERSHIP_NOT_INCLUDED. For the second member in the binding, the key is group:[e-mail], and the membership field in the value is set to MEMBERSHIP_INCLUDED.

map<string, .google.cloud.policytroubleshooter.v1.BindingExplanation.AnnotatedMembership> memberships = 5;

Parameter

Name	Description
key	String

Returns

Type	Description
boolean

getAccess()

public Explanations.AccessState getAccess()

Required. Indicates whether this binding provides the specified permission to the specified member for the specified resource. This field does not indicate whether the member actually has the permission for the resource. There might be another binding that overrides this binding. To determine whether the member actually has the permission, use the access field in the TroubleshootIamPolicyResponse.

.google.cloud.policytroubleshooter.v1.AccessState access = 1 [(.google.api.field_behavior) = REQUIRED];

Returns

Type	Description
Explanations.AccessState	The access.

getAccessValue()

public int getAccessValue()

Required. Indicates whether this binding provides the specified permission to the specified member for the specified resource. This field does not indicate whether the member actually has the permission for the resource. There might be another binding that overrides this binding. To determine whether the member actually has the permission, use the access field in the TroubleshootIamPolicyResponse.

.google.cloud.policytroubleshooter.v1.AccessState access = 1 [(.google.api.field_behavior) = REQUIRED];

Returns

Type	Description
int	The enum numeric value on the wire for access.

getCondition()

public Expr getCondition()

A condition expression that prevents access unless the expression evaluates to true. To learn about IAM Conditions, see http://cloud.google.com/iam/help/conditions/overview.

.google.type.Expr condition = 7;

Returns

Type	Description
com.google.type.Expr	The condition.

getConditionBuilder()

public Expr.Builder getConditionBuilder()

A condition expression that prevents access unless the expression evaluates to true. To learn about IAM Conditions, see http://cloud.google.com/iam/help/conditions/overview.

.google.type.Expr condition = 7;

Returns

Type	Description
com.google.type.Expr.Builder

getConditionOrBuilder()

public ExprOrBuilder getConditionOrBuilder()

A condition expression that prevents access unless the expression evaluates to true. To learn about IAM Conditions, see http://cloud.google.com/iam/help/conditions/overview.

.google.type.Expr condition = 7;

Returns

Type	Description
com.google.type.ExprOrBuilder

getDefaultInstanceForType()

public Explanations.BindingExplanation getDefaultInstanceForType()

Returns

Type	Description
Explanations.BindingExplanation

getDescriptorForType()

public Descriptors.Descriptor getDescriptorForType()

Returns

Type	Description
Descriptor

Overrides

GeneratedMessageV3.Builder<BuilderType>.getDescriptorForType()

getMemberships()

public Map<String,Explanations.BindingExplanation.AnnotatedMembership> getMemberships()

Use #getMembershipsMap() instead.

Returns

Type	Description
Map<String,AnnotatedMembership>

getMembershipsCount()

public int getMembershipsCount()

Indicates whether each member in the binding includes the member specified in the request, either directly or indirectly. Each key identifies a member in the binding, and each value indicates whether the member in the binding includes the member in the request. For example, suppose that a binding includes the following members:

• user:[e-mail]
• group:[e-mail] You want to troubleshoot access for user:[e-mail]. This user is a member of the group group:[e-mail]. For the first member in the binding, the key is user:[e-mail], and the membership field in the value is set to MEMBERSHIP_NOT_INCLUDED. For the second member in the binding, the key is group:[e-mail], and the membership field in the value is set to MEMBERSHIP_INCLUDED.

map<string, .google.cloud.policytroubleshooter.v1.BindingExplanation.AnnotatedMembership> memberships = 5;

Returns

Type	Description
int

getMembershipsMap()

public Map<String,Explanations.BindingExplanation.AnnotatedMembership> getMembershipsMap()

Indicates whether each member in the binding includes the member specified in the request, either directly or indirectly. Each key identifies a member in the binding, and each value indicates whether the member in the binding includes the member in the request. For example, suppose that a binding includes the following members:

• user:[e-mail]
• group:[e-mail] You want to troubleshoot access for user:[e-mail]. This user is a member of the group group:[e-mail]. For the first member in the binding, the key is user:[e-mail], and the membership field in the value is set to MEMBERSHIP_NOT_INCLUDED. For the second member in the binding, the key is group:[e-mail], and the membership field in the value is set to MEMBERSHIP_INCLUDED.

map<string, .google.cloud.policytroubleshooter.v1.BindingExplanation.AnnotatedMembership> memberships = 5;

Returns

Type	Description
Map<String,AnnotatedMembership>

getMembershipsOrDefault(String key, Explanations.BindingExplanation.AnnotatedMembership defaultValue)

public Explanations.BindingExplanation.AnnotatedMembership getMembershipsOrDefault(String key, Explanations.BindingExplanation.AnnotatedMembership defaultValue)

Indicates whether each member in the binding includes the member specified in the request, either directly or indirectly. Each key identifies a member in the binding, and each value indicates whether the member in the binding includes the member in the request. For example, suppose that a binding includes the following members:

• user:[e-mail]
• group:[e-mail] You want to troubleshoot access for user:[e-mail]. This user is a member of the group group:[e-mail]. For the first member in the binding, the key is user:[e-mail], and the membership field in the value is set to MEMBERSHIP_NOT_INCLUDED. For the second member in the binding, the key is group:[e-mail], and the membership field in the value is set to MEMBERSHIP_INCLUDED.

map<string, .google.cloud.policytroubleshooter.v1.BindingExplanation.AnnotatedMembership> memberships = 5;

Parameters

Name	Description
key	String
defaultValue	Explanations.BindingExplanation.AnnotatedMembership

Returns

Type	Description
Explanations.BindingExplanation.AnnotatedMembership

getMembershipsOrThrow(String key)

public Explanations.BindingExplanation.AnnotatedMembership getMembershipsOrThrow(String key)

Indicates whether each member in the binding includes the member specified in the request, either directly or indirectly. Each key identifies a member in the binding, and each value indicates whether the member in the binding includes the member in the request. For example, suppose that a binding includes the following members:

• user:[e-mail]
• group:[e-mail] You want to troubleshoot access for user:[e-mail]. This user is a member of the group group:[e-mail]. For the first member in the binding, the key is user:[e-mail], and the membership field in the value is set to MEMBERSHIP_NOT_INCLUDED. For the second member in the binding, the key is group:[e-mail], and the membership field in the value is set to MEMBERSHIP_INCLUDED.

map<string, .google.cloud.policytroubleshooter.v1.BindingExplanation.AnnotatedMembership> memberships = 5;

Parameter

Name	Description
key	String

Returns

Type	Description
Explanations.BindingExplanation.AnnotatedMembership

getMutableMemberships()

public Map<String,Explanations.BindingExplanation.AnnotatedMembership> getMutableMemberships()

Use alternate mutation accessors instead.

Returns

Type	Description
Map<String,AnnotatedMembership>

getRelevance()

public Explanations.HeuristicRelevance getRelevance()

The relevance of this binding to the overall determination for the entire policy.

.google.cloud.policytroubleshooter.v1.HeuristicRelevance relevance = 6;

Returns

Type	Description
Explanations.HeuristicRelevance	The relevance.

getRelevanceValue()

public int getRelevanceValue()

The relevance of this binding to the overall determination for the entire policy.

.google.cloud.policytroubleshooter.v1.HeuristicRelevance relevance = 6;

Returns

Type	Description
int	The enum numeric value on the wire for relevance.

getRole()

public String getRole()

The role that this binding grants. For example, roles/compute.serviceAgent. For a complete list of predefined IAM roles, as well as the permissions in each role, see https://cloud.google.com/iam/help/roles/reference.

string role = 2;

Returns

Type	Description
String	The role.

getRoleBytes()

public ByteString getRoleBytes()

The role that this binding grants. For example, roles/compute.serviceAgent. For a complete list of predefined IAM roles, as well as the permissions in each role, see https://cloud.google.com/iam/help/roles/reference.

string role = 2;

Returns

Type	Description
ByteString	The bytes for role.

getRolePermission()

public Explanations.BindingExplanation.RolePermission getRolePermission()

Indicates whether the role granted by this binding contains the specified permission.

.google.cloud.policytroubleshooter.v1.BindingExplanation.RolePermission role_permission = 3;

Returns

Type	Description
Explanations.BindingExplanation.RolePermission	The rolePermission.

getRolePermissionRelevance()

public Explanations.HeuristicRelevance getRolePermissionRelevance()

The relevance of the permission's existence, or nonexistence, in the role to the overall determination for the entire policy.

.google.cloud.policytroubleshooter.v1.HeuristicRelevance role_permission_relevance = 4;

Returns

Type	Description
Explanations.HeuristicRelevance	The rolePermissionRelevance.

getRolePermissionRelevanceValue()

public int getRolePermissionRelevanceValue()

The relevance of the permission's existence, or nonexistence, in the role to the overall determination for the entire policy.

.google.cloud.policytroubleshooter.v1.HeuristicRelevance role_permission_relevance = 4;

Returns

Type	Description
int	The enum numeric value on the wire for rolePermissionRelevance.

getRolePermissionValue()

public int getRolePermissionValue()

Indicates whether the role granted by this binding contains the specified permission.

.google.cloud.policytroubleshooter.v1.BindingExplanation.RolePermission role_permission = 3;

Returns

Type	Description
int	The enum numeric value on the wire for rolePermission.

hasCondition()

public boolean hasCondition()

A condition expression that prevents access unless the expression evaluates to true. To learn about IAM Conditions, see http://cloud.google.com/iam/help/conditions/overview.

.google.type.Expr condition = 7;

Returns

Type	Description
boolean	Whether the condition field is set.

internalGetFieldAccessorTable()

protected GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()

Returns

Type	Description
FieldAccessorTable

Overrides

GeneratedMessageV3.Builder<BuilderType>.internalGetFieldAccessorTable()

internalGetMapField(int number)

protected MapField internalGetMapField(int number)

Parameter

Name	Description
number	int

Returns

Type	Description
MapField

Overrides

GeneratedMessageV3.Builder<BuilderType>.internalGetMapField(int fieldNumber)

internalGetMutableMapField(int number)

protected MapField internalGetMutableMapField(int number)

Parameter

Name	Description
number	int

Returns

Type	Description
MapField

Overrides

GeneratedMessageV3.Builder<BuilderType>.internalGetMutableMapField(int fieldNumber)

isInitialized()

public final boolean isInitialized()

Returns

Type	Description
boolean

Overrides

GeneratedMessageV3.Builder<BuilderType>.isInitialized()

mergeCondition(Expr value)

public Explanations.BindingExplanation.Builder mergeCondition(Expr value)

A condition expression that prevents access unless the expression evaluates to true. To learn about IAM Conditions, see http://cloud.google.com/iam/help/conditions/overview.

.google.type.Expr condition = 7;

Parameter

Name	Description
value	com.google.type.Expr

Returns

Type	Description
Explanations.BindingExplanation.Builder

mergeFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)

public Explanations.BindingExplanation.Builder mergeFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)

Parameters

Name	Description
input	CodedInputStream
extensionRegistry	ExtensionRegistryLite

Returns

Type	Description
Explanations.BindingExplanation.Builder

Overrides

AbstractMessage.Builder<BuilderType>.mergeFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)

Exceptions

Type	Description
IOException

mergeFrom(Message other)

public Explanations.BindingExplanation.Builder mergeFrom(Message other)

Parameter

Name	Description
other	Message

Returns

Type	Description
Explanations.BindingExplanation.Builder

Overrides

AbstractMessage.Builder<BuilderType>.mergeFrom(Message other)

mergeFrom(Explanations.BindingExplanation other)

public Explanations.BindingExplanation.Builder mergeFrom(Explanations.BindingExplanation other)

Parameter

Name	Description
other	Explanations.BindingExplanation

Returns

Type	Description
Explanations.BindingExplanation.Builder

mergeUnknownFields(UnknownFieldSet unknownFields)

public final Explanations.BindingExplanation.Builder mergeUnknownFields(UnknownFieldSet unknownFields)

Parameter

Name	Description
unknownFields	UnknownFieldSet

Returns

Type	Description
Explanations.BindingExplanation.Builder

Overrides

GeneratedMessageV3.Builder<BuilderType>.mergeUnknownFields(UnknownFieldSet unknownFields)

putAllMemberships(Map<String,Explanations.BindingExplanation.AnnotatedMembership> values)

public Explanations.BindingExplanation.Builder putAllMemberships(Map<String,Explanations.BindingExplanation.AnnotatedMembership> values)

Indicates whether each member in the binding includes the member specified in the request, either directly or indirectly. Each key identifies a member in the binding, and each value indicates whether the member in the binding includes the member in the request. For example, suppose that a binding includes the following members:

• user:[e-mail]
• group:[e-mail] You want to troubleshoot access for user:[e-mail]. This user is a member of the group group:[e-mail]. For the first member in the binding, the key is user:[e-mail], and the membership field in the value is set to MEMBERSHIP_NOT_INCLUDED. For the second member in the binding, the key is group:[e-mail], and the membership field in the value is set to MEMBERSHIP_INCLUDED.

map<string, .google.cloud.policytroubleshooter.v1.BindingExplanation.AnnotatedMembership> memberships = 5;

Parameter

Name	Description
values	Map<String,AnnotatedMembership>

Returns

Type	Description
Explanations.BindingExplanation.Builder

putMemberships(String key, Explanations.BindingExplanation.AnnotatedMembership value)

public Explanations.BindingExplanation.Builder putMemberships(String key, Explanations.BindingExplanation.AnnotatedMembership value)

Indicates whether each member in the binding includes the member specified in the request, either directly or indirectly. Each key identifies a member in the binding, and each value indicates whether the member in the binding includes the member in the request. For example, suppose that a binding includes the following members:

• user:[e-mail]
• group:[e-mail] You want to troubleshoot access for user:[e-mail]. This user is a member of the group group:[e-mail]. For the first member in the binding, the key is user:[e-mail], and the membership field in the value is set to MEMBERSHIP_NOT_INCLUDED. For the second member in the binding, the key is group:[e-mail], and the membership field in the value is set to MEMBERSHIP_INCLUDED.

map<string, .google.cloud.policytroubleshooter.v1.BindingExplanation.AnnotatedMembership> memberships = 5;

Parameters

Name	Description
key	String
value	Explanations.BindingExplanation.AnnotatedMembership

Returns

Type	Description
Explanations.BindingExplanation.Builder

removeMemberships(String key)

public Explanations.BindingExplanation.Builder removeMemberships(String key)

Indicates whether each member in the binding includes the member specified in the request, either directly or indirectly. Each key identifies a member in the binding, and each value indicates whether the member in the binding includes the member in the request. For example, suppose that a binding includes the following members:

• user:[e-mail]
• group:[e-mail] You want to troubleshoot access for user:[e-mail]. This user is a member of the group group:[e-mail]. For the first member in the binding, the key is user:[e-mail], and the membership field in the value is set to MEMBERSHIP_NOT_INCLUDED. For the second member in the binding, the key is group:[e-mail], and the membership field in the value is set to MEMBERSHIP_INCLUDED.

map<string, .google.cloud.policytroubleshooter.v1.BindingExplanation.AnnotatedMembership> memberships = 5;

Parameter

Name	Description
key	String

Returns

Type	Description
Explanations.BindingExplanation.Builder

setAccess(Explanations.AccessState value)

public Explanations.BindingExplanation.Builder setAccess(Explanations.AccessState value)

Required. Indicates whether this binding provides the specified permission to the specified member for the specified resource. This field does not indicate whether the member actually has the permission for the resource. There might be another binding that overrides this binding. To determine whether the member actually has the permission, use the access field in the TroubleshootIamPolicyResponse.

.google.cloud.policytroubleshooter.v1.AccessState access = 1 [(.google.api.field_behavior) = REQUIRED];

Parameter

Name	Description
value	Explanations.AccessState The access to set.

Returns

Type	Description
Explanations.BindingExplanation.Builder	This builder for chaining.

setAccessValue(int value)

public Explanations.BindingExplanation.Builder setAccessValue(int value)

Required. Indicates whether this binding provides the specified permission to the specified member for the specified resource. This field does not indicate whether the member actually has the permission for the resource. There might be another binding that overrides this binding. To determine whether the member actually has the permission, use the access field in the TroubleshootIamPolicyResponse.

.google.cloud.policytroubleshooter.v1.AccessState access = 1 [(.google.api.field_behavior) = REQUIRED];

Parameter

Name	Description
value	int The enum numeric value on the wire for access to set.

Returns

Type	Description
Explanations.BindingExplanation.Builder	This builder for chaining.

setCondition(Expr value)

public Explanations.BindingExplanation.Builder setCondition(Expr value)

A condition expression that prevents access unless the expression evaluates to true. To learn about IAM Conditions, see http://cloud.google.com/iam/help/conditions/overview.

.google.type.Expr condition = 7;

Parameter

Name	Description
value	com.google.type.Expr

Returns

Type	Description
Explanations.BindingExplanation.Builder

setCondition(Expr.Builder builderForValue)

public Explanations.BindingExplanation.Builder setCondition(Expr.Builder builderForValue)

A condition expression that prevents access unless the expression evaluates to true. To learn about IAM Conditions, see http://cloud.google.com/iam/help/conditions/overview.

.google.type.Expr condition = 7;

Parameter

Name	Description
builderForValue	com.google.type.Expr.Builder

Returns

Type	Description
Explanations.BindingExplanation.Builder

setField(Descriptors.FieldDescriptor field, Object value)

public Explanations.BindingExplanation.Builder setField(Descriptors.FieldDescriptor field, Object value)

Parameters

Name	Description
field	FieldDescriptor
value	Object

Returns

Type	Description
Explanations.BindingExplanation.Builder

Overrides

GeneratedMessageV3.Builder<BuilderType>.setField(Descriptors.FieldDescriptor field, Object value)

setRelevance(Explanations.HeuristicRelevance value)

public Explanations.BindingExplanation.Builder setRelevance(Explanations.HeuristicRelevance value)

The relevance of this binding to the overall determination for the entire policy.

.google.cloud.policytroubleshooter.v1.HeuristicRelevance relevance = 6;

Parameter

Name	Description
value	Explanations.HeuristicRelevance The relevance to set.

Returns

Type	Description
Explanations.BindingExplanation.Builder	This builder for chaining.

setRelevanceValue(int value)

public Explanations.BindingExplanation.Builder setRelevanceValue(int value)

The relevance of this binding to the overall determination for the entire policy.

.google.cloud.policytroubleshooter.v1.HeuristicRelevance relevance = 6;

Parameter

Name	Description
value	int The enum numeric value on the wire for relevance to set.

Returns

Type	Description
Explanations.BindingExplanation.Builder	This builder for chaining.

setRepeatedField(Descriptors.FieldDescriptor field, int index, Object value)

public Explanations.BindingExplanation.Builder setRepeatedField(Descriptors.FieldDescriptor field, int index, Object value)

Parameters

Name	Description
field	FieldDescriptor
index	int
value	Object

Returns

Type	Description
Explanations.BindingExplanation.Builder

Overrides

GeneratedMessageV3.Builder<BuilderType>.setRepeatedField(Descriptors.FieldDescriptor field, int index, Object value)

setRole(String value)

public Explanations.BindingExplanation.Builder setRole(String value)

The role that this binding grants. For example, roles/compute.serviceAgent. For a complete list of predefined IAM roles, as well as the permissions in each role, see https://cloud.google.com/iam/help/roles/reference.

string role = 2;

Parameter

Name	Description
value	String The role to set.

Returns

Type	Description
Explanations.BindingExplanation.Builder	This builder for chaining.

setRoleBytes(ByteString value)

public Explanations.BindingExplanation.Builder setRoleBytes(ByteString value)

The role that this binding grants. For example, roles/compute.serviceAgent. For a complete list of predefined IAM roles, as well as the permissions in each role, see https://cloud.google.com/iam/help/roles/reference.

string role = 2;

Parameter

Name	Description
value	ByteString The bytes for role to set.

Returns

Type	Description
Explanations.BindingExplanation.Builder	This builder for chaining.

setRolePermission(Explanations.BindingExplanation.RolePermission value)

public Explanations.BindingExplanation.Builder setRolePermission(Explanations.BindingExplanation.RolePermission value)

Indicates whether the role granted by this binding contains the specified permission.

.google.cloud.policytroubleshooter.v1.BindingExplanation.RolePermission role_permission = 3;

Parameter

Name	Description
value	Explanations.BindingExplanation.RolePermission The rolePermission to set.

Returns

Type	Description
Explanations.BindingExplanation.Builder	This builder for chaining.

setRolePermissionRelevance(Explanations.HeuristicRelevance value)

public Explanations.BindingExplanation.Builder setRolePermissionRelevance(Explanations.HeuristicRelevance value)

The relevance of the permission's existence, or nonexistence, in the role to the overall determination for the entire policy.

.google.cloud.policytroubleshooter.v1.HeuristicRelevance role_permission_relevance = 4;

Parameter

Name	Description
value	Explanations.HeuristicRelevance The rolePermissionRelevance to set.

Returns

Type	Description
Explanations.BindingExplanation.Builder	This builder for chaining.

setRolePermissionRelevanceValue(int value)

public Explanations.BindingExplanation.Builder setRolePermissionRelevanceValue(int value)

The relevance of the permission's existence, or nonexistence, in the role to the overall determination for the entire policy.

.google.cloud.policytroubleshooter.v1.HeuristicRelevance role_permission_relevance = 4;

Parameter

Name	Description
value	int The enum numeric value on the wire for rolePermissionRelevance to set.

Returns

Type	Description
Explanations.BindingExplanation.Builder	This builder for chaining.

setRolePermissionValue(int value)

public Explanations.BindingExplanation.Builder setRolePermissionValue(int value)

Indicates whether the role granted by this binding contains the specified permission.

.google.cloud.policytroubleshooter.v1.BindingExplanation.RolePermission role_permission = 3;

Parameter

Name	Description
value	int The enum numeric value on the wire for rolePermission to set.

Returns

Type	Description
Explanations.BindingExplanation.Builder	This builder for chaining.

setUnknownFields(UnknownFieldSet unknownFields)

public final Explanations.BindingExplanation.Builder setUnknownFields(UnknownFieldSet unknownFields)

Parameter

Name	Description
unknownFields	UnknownFieldSet

Returns

Type	Description
Explanations.BindingExplanation.Builder

Overrides

GeneratedMessageV3.Builder<BuilderType>.setUnknownFields(UnknownFieldSet unknownFields)