- 1.46.0 (latest)
- 1.45.0
- 1.44.0
- 1.43.0
- 1.42.0
- 1.41.0
- 1.40.0
- 1.39.0
- 1.38.0
- 1.36.0
- 1.35.0
- 1.34.0
- 1.33.0
- 1.32.0
- 1.31.0
- 1.30.0
- 1.29.0
- 1.28.0
- 1.27.0
- 1.26.0
- 1.23.0
- 1.22.0
- 1.21.0
- 1.20.0
- 1.19.0
- 1.18.0
- 1.17.0
- 1.16.0
- 1.15.0
- 1.14.0
- 1.13.0
- 1.12.0
- 1.11.0
- 1.10.0
- 1.8.0
- 1.7.0
- 1.6.0
- 1.5.0
- 1.4.0
- 1.3.0
- 1.2.6
- 1.1.0
- 1.0.4
- 0.4.4
public static interface Explanations.BindingExplanationOrBuilder extends MessageOrBuilder
Implements
MessageOrBuilderMethods
containsMemberships(String key)
public abstract boolean containsMemberships(String key)
Indicates whether each member in the binding includes the member specified in the request, either directly or indirectly. Each key identifies a member in the binding, and each value indicates whether the member in the binding includes the member in the request. For example, suppose that a binding includes the following members:
user:alice@example.com
group:product-eng@example.com
You want to troubleshoot access foruser:bob@example.com
. This user is a member of the groupgroup:product-eng@example.com
. For the first member in the binding, the key isuser:alice@example.com
, and themembership
field in the value is set toMEMBERSHIP_NOT_INCLUDED
. For the second member in the binding, the key isgroup:product-eng@example.com
, and themembership
field in the value is set toMEMBERSHIP_INCLUDED
.
map<string, .google.cloud.policytroubleshooter.v1.BindingExplanation.AnnotatedMembership> memberships = 5;
Name | Description |
key | String |
Type | Description |
boolean |
getAccess()
public abstract Explanations.AccessState getAccess()
Required. Indicates whether this binding provides the specified permission to the
specified member for the specified resource.
This field does not indicate whether the member actually has the
permission for the resource. There might be another binding that overrides
this binding. To determine whether the member actually has the permission,
use the access
field in the
TroubleshootIamPolicyResponse.
.google.cloud.policytroubleshooter.v1.AccessState access = 1 [(.google.api.field_behavior) = REQUIRED];
Type | Description |
Explanations.AccessState | The access. |
getAccessValue()
public abstract int getAccessValue()
Required. Indicates whether this binding provides the specified permission to the
specified member for the specified resource.
This field does not indicate whether the member actually has the
permission for the resource. There might be another binding that overrides
this binding. To determine whether the member actually has the permission,
use the access
field in the
TroubleshootIamPolicyResponse.
.google.cloud.policytroubleshooter.v1.AccessState access = 1 [(.google.api.field_behavior) = REQUIRED];
Type | Description |
int | The enum numeric value on the wire for access. |
getCondition()
public abstract Expr getCondition()
A condition expression that prevents access unless the expression evaluates
to true
.
To learn about IAM Conditions, see
http://cloud.google.com/iam/help/conditions/overview.
.google.type.Expr condition = 7;
Type | Description |
com.google.type.Expr | The condition. |
getConditionOrBuilder()
public abstract ExprOrBuilder getConditionOrBuilder()
A condition expression that prevents access unless the expression evaluates
to true
.
To learn about IAM Conditions, see
http://cloud.google.com/iam/help/conditions/overview.
.google.type.Expr condition = 7;
Type | Description |
com.google.type.ExprOrBuilder |
getMemberships()
public abstract Map<String,Explanations.BindingExplanation.AnnotatedMembership> getMemberships()
Use #getMembershipsMap() instead.
Type | Description |
Map<String,AnnotatedMembership> |
getMembershipsCount()
public abstract int getMembershipsCount()
Indicates whether each member in the binding includes the member specified in the request, either directly or indirectly. Each key identifies a member in the binding, and each value indicates whether the member in the binding includes the member in the request. For example, suppose that a binding includes the following members:
user:alice@example.com
group:product-eng@example.com
You want to troubleshoot access foruser:bob@example.com
. This user is a member of the groupgroup:product-eng@example.com
. For the first member in the binding, the key isuser:alice@example.com
, and themembership
field in the value is set toMEMBERSHIP_NOT_INCLUDED
. For the second member in the binding, the key isgroup:product-eng@example.com
, and themembership
field in the value is set toMEMBERSHIP_INCLUDED
.
map<string, .google.cloud.policytroubleshooter.v1.BindingExplanation.AnnotatedMembership> memberships = 5;
Type | Description |
int |
getMembershipsMap()
public abstract Map<String,Explanations.BindingExplanation.AnnotatedMembership> getMembershipsMap()
Indicates whether each member in the binding includes the member specified in the request, either directly or indirectly. Each key identifies a member in the binding, and each value indicates whether the member in the binding includes the member in the request. For example, suppose that a binding includes the following members:
user:alice@example.com
group:product-eng@example.com
You want to troubleshoot access foruser:bob@example.com
. This user is a member of the groupgroup:product-eng@example.com
. For the first member in the binding, the key isuser:alice@example.com
, and themembership
field in the value is set toMEMBERSHIP_NOT_INCLUDED
. For the second member in the binding, the key isgroup:product-eng@example.com
, and themembership
field in the value is set toMEMBERSHIP_INCLUDED
.
map<string, .google.cloud.policytroubleshooter.v1.BindingExplanation.AnnotatedMembership> memberships = 5;
Type | Description |
Map<String,AnnotatedMembership> |
getMembershipsOrDefault(String key, Explanations.BindingExplanation.AnnotatedMembership defaultValue)
public abstract Explanations.BindingExplanation.AnnotatedMembership getMembershipsOrDefault(String key, Explanations.BindingExplanation.AnnotatedMembership defaultValue)
Indicates whether each member in the binding includes the member specified in the request, either directly or indirectly. Each key identifies a member in the binding, and each value indicates whether the member in the binding includes the member in the request. For example, suppose that a binding includes the following members:
user:alice@example.com
group:product-eng@example.com
You want to troubleshoot access foruser:bob@example.com
. This user is a member of the groupgroup:product-eng@example.com
. For the first member in the binding, the key isuser:alice@example.com
, and themembership
field in the value is set toMEMBERSHIP_NOT_INCLUDED
. For the second member in the binding, the key isgroup:product-eng@example.com
, and themembership
field in the value is set toMEMBERSHIP_INCLUDED
.
map<string, .google.cloud.policytroubleshooter.v1.BindingExplanation.AnnotatedMembership> memberships = 5;
Name | Description |
key | String |
defaultValue | Explanations.BindingExplanation.AnnotatedMembership |
Type | Description |
Explanations.BindingExplanation.AnnotatedMembership |
getMembershipsOrThrow(String key)
public abstract Explanations.BindingExplanation.AnnotatedMembership getMembershipsOrThrow(String key)
Indicates whether each member in the binding includes the member specified in the request, either directly or indirectly. Each key identifies a member in the binding, and each value indicates whether the member in the binding includes the member in the request. For example, suppose that a binding includes the following members:
user:alice@example.com
group:product-eng@example.com
You want to troubleshoot access foruser:bob@example.com
. This user is a member of the groupgroup:product-eng@example.com
. For the first member in the binding, the key isuser:alice@example.com
, and themembership
field in the value is set toMEMBERSHIP_NOT_INCLUDED
. For the second member in the binding, the key isgroup:product-eng@example.com
, and themembership
field in the value is set toMEMBERSHIP_INCLUDED
.
map<string, .google.cloud.policytroubleshooter.v1.BindingExplanation.AnnotatedMembership> memberships = 5;
Name | Description |
key | String |
Type | Description |
Explanations.BindingExplanation.AnnotatedMembership |
getRelevance()
public abstract Explanations.HeuristicRelevance getRelevance()
The relevance of this binding to the overall determination for the entire policy.
.google.cloud.policytroubleshooter.v1.HeuristicRelevance relevance = 6;
Type | Description |
Explanations.HeuristicRelevance | The relevance. |
getRelevanceValue()
public abstract int getRelevanceValue()
The relevance of this binding to the overall determination for the entire policy.
.google.cloud.policytroubleshooter.v1.HeuristicRelevance relevance = 6;
Type | Description |
int | The enum numeric value on the wire for relevance. |
getRole()
public abstract String getRole()
The role that this binding grants. For example,
roles/compute.serviceAgent
.
For a complete list of predefined IAM roles, as well as the permissions in
each role, see https://cloud.google.com/iam/help/roles/reference.
string role = 2;
Type | Description |
String | The role. |
getRoleBytes()
public abstract ByteString getRoleBytes()
The role that this binding grants. For example,
roles/compute.serviceAgent
.
For a complete list of predefined IAM roles, as well as the permissions in
each role, see https://cloud.google.com/iam/help/roles/reference.
string role = 2;
Type | Description |
ByteString | The bytes for role. |
getRolePermission()
public abstract Explanations.BindingExplanation.RolePermission getRolePermission()
Indicates whether the role granted by this binding contains the specified permission.
.google.cloud.policytroubleshooter.v1.BindingExplanation.RolePermission role_permission = 3;
Type | Description |
Explanations.BindingExplanation.RolePermission | The rolePermission. |
getRolePermissionRelevance()
public abstract Explanations.HeuristicRelevance getRolePermissionRelevance()
The relevance of the permission's existence, or nonexistence, in the role to the overall determination for the entire policy.
.google.cloud.policytroubleshooter.v1.HeuristicRelevance role_permission_relevance = 4;
Type | Description |
Explanations.HeuristicRelevance | The rolePermissionRelevance. |
getRolePermissionRelevanceValue()
public abstract int getRolePermissionRelevanceValue()
The relevance of the permission's existence, or nonexistence, in the role to the overall determination for the entire policy.
.google.cloud.policytroubleshooter.v1.HeuristicRelevance role_permission_relevance = 4;
Type | Description |
int | The enum numeric value on the wire for rolePermissionRelevance. |
getRolePermissionValue()
public abstract int getRolePermissionValue()
Indicates whether the role granted by this binding contains the specified permission.
.google.cloud.policytroubleshooter.v1.BindingExplanation.RolePermission role_permission = 3;
Type | Description |
int | The enum numeric value on the wire for rolePermission. |
hasCondition()
public abstract boolean hasCondition()
A condition expression that prevents access unless the expression evaluates
to true
.
To learn about IAM Conditions, see
http://cloud.google.com/iam/help/conditions/overview.
.google.type.Expr condition = 7;
Type | Description |
boolean | Whether the condition field is set. |