public final class DenyPolicyExplanation extends GeneratedMessageV3 implements DenyPolicyExplanationOrBuilder
Details about how the relevant IAM deny policies affect the final access
state.
Protobuf type google.cloud.policytroubleshooter.iam.v3.DenyPolicyExplanation
Inherited Members
com.google.protobuf.GeneratedMessageV3.<ListT>makeMutableCopy(ListT)
com.google.protobuf.GeneratedMessageV3.<ListT>makeMutableCopy(ListT,int)
com.google.protobuf.GeneratedMessageV3.<T>emptyList(java.lang.Class<T>)
com.google.protobuf.GeneratedMessageV3.internalGetMapFieldReflection(int)
Static Fields
DENY_ACCESS_STATE_FIELD_NUMBER
public static final int DENY_ACCESS_STATE_FIELD_NUMBER
| Field Value |
| Type |
Description |
int |
|
EXPLAINED_RESOURCES_FIELD_NUMBER
public static final int EXPLAINED_RESOURCES_FIELD_NUMBER
| Field Value |
| Type |
Description |
int |
|
PERMISSION_DENIABLE_FIELD_NUMBER
public static final int PERMISSION_DENIABLE_FIELD_NUMBER
| Field Value |
| Type |
Description |
int |
|
RELEVANCE_FIELD_NUMBER
public static final int RELEVANCE_FIELD_NUMBER
| Field Value |
| Type |
Description |
int |
|
Static Methods
getDefaultInstance()
public static DenyPolicyExplanation getDefaultInstance()
getDescriptor()
public static final Descriptors.Descriptor getDescriptor()
newBuilder()
public static DenyPolicyExplanation.Builder newBuilder()
newBuilder(DenyPolicyExplanation prototype)
public static DenyPolicyExplanation.Builder newBuilder(DenyPolicyExplanation prototype)
public static DenyPolicyExplanation parseDelimitedFrom(InputStream input)
public static DenyPolicyExplanation parseDelimitedFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
parseFrom(byte[] data)
public static DenyPolicyExplanation parseFrom(byte[] data)
| Parameter |
| Name |
Description |
data |
byte[]
|
parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)
public static DenyPolicyExplanation parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)
parseFrom(ByteString data)
public static DenyPolicyExplanation parseFrom(ByteString data)
parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)
public static DenyPolicyExplanation parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)
public static DenyPolicyExplanation parseFrom(CodedInputStream input)
public static DenyPolicyExplanation parseFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)
public static DenyPolicyExplanation parseFrom(InputStream input)
public static DenyPolicyExplanation parseFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
parseFrom(ByteBuffer data)
public static DenyPolicyExplanation parseFrom(ByteBuffer data)
parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)
public static DenyPolicyExplanation parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)
parser()
public static Parser<DenyPolicyExplanation> parser()
Methods
equals(Object obj)
public boolean equals(Object obj)
| Parameter |
| Name |
Description |
obj |
Object
|
Overrides
getDefaultInstanceForType()
public DenyPolicyExplanation getDefaultInstanceForType()
getDenyAccessState()
public DenyAccessState getDenyAccessState()
Indicates whether the principal is denied the specified permission for
the specified resource, based on evaluating all applicable IAM deny
policies.
.google.cloud.policytroubleshooter.iam.v3.DenyAccessState deny_access_state = 1;
getDenyAccessStateValue()
public int getDenyAccessStateValue()
Indicates whether the principal is denied the specified permission for
the specified resource, based on evaluating all applicable IAM deny
policies.
.google.cloud.policytroubleshooter.iam.v3.DenyAccessState deny_access_state = 1;
| Returns |
| Type |
Description |
int |
The enum numeric value on the wire for denyAccessState.
|
getExplainedResources(int index)
public ExplainedDenyResource getExplainedResources(int index)
List of resources with IAM deny policies that were evaluated to check the
principal's denied permissions, with annotations to indicate how each
policy contributed to the final result.
The list of resources includes the policy for the resource itself, as well
as policies that are inherited from higher levels of the resource
hierarchy, including the organization, the folder, and the project. The
order of the resources starts from the resource and climbs up the resource
hierarchy.
To learn more about the resource hierarchy, see
https://cloud.google.com/iam/help/resource-hierarchy.
repeated .google.cloud.policytroubleshooter.iam.v3.ExplainedDenyResource explained_resources = 2;
| Parameter |
| Name |
Description |
index |
int
|
getExplainedResourcesCount()
public int getExplainedResourcesCount()
List of resources with IAM deny policies that were evaluated to check the
principal's denied permissions, with annotations to indicate how each
policy contributed to the final result.
The list of resources includes the policy for the resource itself, as well
as policies that are inherited from higher levels of the resource
hierarchy, including the organization, the folder, and the project. The
order of the resources starts from the resource and climbs up the resource
hierarchy.
To learn more about the resource hierarchy, see
https://cloud.google.com/iam/help/resource-hierarchy.
repeated .google.cloud.policytroubleshooter.iam.v3.ExplainedDenyResource explained_resources = 2;
| Returns |
| Type |
Description |
int |
|
getExplainedResourcesList()
public List<ExplainedDenyResource> getExplainedResourcesList()
List of resources with IAM deny policies that were evaluated to check the
principal's denied permissions, with annotations to indicate how each
policy contributed to the final result.
The list of resources includes the policy for the resource itself, as well
as policies that are inherited from higher levels of the resource
hierarchy, including the organization, the folder, and the project. The
order of the resources starts from the resource and climbs up the resource
hierarchy.
To learn more about the resource hierarchy, see
https://cloud.google.com/iam/help/resource-hierarchy.
repeated .google.cloud.policytroubleshooter.iam.v3.ExplainedDenyResource explained_resources = 2;
getExplainedResourcesOrBuilder(int index)
public ExplainedDenyResourceOrBuilder getExplainedResourcesOrBuilder(int index)
List of resources with IAM deny policies that were evaluated to check the
principal's denied permissions, with annotations to indicate how each
policy contributed to the final result.
The list of resources includes the policy for the resource itself, as well
as policies that are inherited from higher levels of the resource
hierarchy, including the organization, the folder, and the project. The
order of the resources starts from the resource and climbs up the resource
hierarchy.
To learn more about the resource hierarchy, see
https://cloud.google.com/iam/help/resource-hierarchy.
repeated .google.cloud.policytroubleshooter.iam.v3.ExplainedDenyResource explained_resources = 2;
| Parameter |
| Name |
Description |
index |
int
|
getExplainedResourcesOrBuilderList()
public List<? extends ExplainedDenyResourceOrBuilder> getExplainedResourcesOrBuilderList()
List of resources with IAM deny policies that were evaluated to check the
principal's denied permissions, with annotations to indicate how each
policy contributed to the final result.
The list of resources includes the policy for the resource itself, as well
as policies that are inherited from higher levels of the resource
hierarchy, including the organization, the folder, and the project. The
order of the resources starts from the resource and climbs up the resource
hierarchy.
To learn more about the resource hierarchy, see
https://cloud.google.com/iam/help/resource-hierarchy.
repeated .google.cloud.policytroubleshooter.iam.v3.ExplainedDenyResource explained_resources = 2;
| Returns |
| Type |
Description |
List<? extends com.google.cloud.policytroubleshooter.iam.v3.ExplainedDenyResourceOrBuilder> |
|
getParserForType()
public Parser<DenyPolicyExplanation> getParserForType()
Overrides
getPermissionDeniable()
public boolean getPermissionDeniable()
Indicates whether the permission to troubleshoot is supported in deny
policies.
bool permission_deniable = 4;
| Returns |
| Type |
Description |
boolean |
The permissionDeniable.
|
getRelevance()
public HeuristicRelevance getRelevance()
The relevance of the deny policy result to the overall access state.
.google.cloud.policytroubleshooter.iam.v3.HeuristicRelevance relevance = 3;
getRelevanceValue()
public int getRelevanceValue()
The relevance of the deny policy result to the overall access state.
.google.cloud.policytroubleshooter.iam.v3.HeuristicRelevance relevance = 3;
| Returns |
| Type |
Description |
int |
The enum numeric value on the wire for relevance.
|
getSerializedSize()
public int getSerializedSize()
| Returns |
| Type |
Description |
int |
|
Overrides
hashCode()
| Returns |
| Type |
Description |
int |
|
Overrides
internalGetFieldAccessorTable()
protected GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
Overrides
isInitialized()
public final boolean isInitialized()
Overrides
newBuilderForType()
public DenyPolicyExplanation.Builder newBuilderForType()
newBuilderForType(GeneratedMessageV3.BuilderParent parent)
protected DenyPolicyExplanation.Builder newBuilderForType(GeneratedMessageV3.BuilderParent parent)
Overrides
newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)
protected Object newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)
| Returns |
| Type |
Description |
Object |
|
Overrides
toBuilder()
public DenyPolicyExplanation.Builder toBuilder()
writeTo(CodedOutputStream output)
public void writeTo(CodedOutputStream output)
Overrides
