Class ExplainedDenyPolicy.Builder (1.40.0)

public static final class ExplainedDenyPolicy.Builder extends GeneratedMessageV3.Builder<ExplainedDenyPolicy.Builder> implements ExplainedDenyPolicyOrBuilder

Details about how a specific IAM deny policy Policy contributed to the access check.

Protobuf type google.cloud.policytroubleshooter.iam.v3.ExplainedDenyPolicy

Static Methods

getDescriptor()

public static final Descriptors.Descriptor getDescriptor()
Returns
TypeDescription
Descriptor

Methods

addAllRuleExplanations(Iterable<? extends DenyRuleExplanation> values)

public ExplainedDenyPolicy.Builder addAllRuleExplanations(Iterable<? extends DenyRuleExplanation> values)

Details about how each rule in the policy affects the principal's inability to use the permission for the resource. The order of the deny rule matches the order of the rules in the deny policy.

If the sender of the request does not have access to the policy, this field is omitted.

repeated .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation rule_explanations = 3;

Parameter
NameDescription
valuesIterable<? extends com.google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation>
Returns
TypeDescription
ExplainedDenyPolicy.Builder

addRepeatedField(Descriptors.FieldDescriptor field, Object value)

public ExplainedDenyPolicy.Builder addRepeatedField(Descriptors.FieldDescriptor field, Object value)
Parameters
NameDescription
fieldFieldDescriptor
valueObject
Returns
TypeDescription
ExplainedDenyPolicy.Builder
Overrides

addRuleExplanations(DenyRuleExplanation value)

public ExplainedDenyPolicy.Builder addRuleExplanations(DenyRuleExplanation value)

Details about how each rule in the policy affects the principal's inability to use the permission for the resource. The order of the deny rule matches the order of the rules in the deny policy.

If the sender of the request does not have access to the policy, this field is omitted.

repeated .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation rule_explanations = 3;

Parameter
NameDescription
valueDenyRuleExplanation
Returns
TypeDescription
ExplainedDenyPolicy.Builder

addRuleExplanations(DenyRuleExplanation.Builder builderForValue)

public ExplainedDenyPolicy.Builder addRuleExplanations(DenyRuleExplanation.Builder builderForValue)

Details about how each rule in the policy affects the principal's inability to use the permission for the resource. The order of the deny rule matches the order of the rules in the deny policy.

If the sender of the request does not have access to the policy, this field is omitted.

repeated .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation rule_explanations = 3;

Parameter
NameDescription
builderForValueDenyRuleExplanation.Builder
Returns
TypeDescription
ExplainedDenyPolicy.Builder

addRuleExplanations(int index, DenyRuleExplanation value)

public ExplainedDenyPolicy.Builder addRuleExplanations(int index, DenyRuleExplanation value)

Details about how each rule in the policy affects the principal's inability to use the permission for the resource. The order of the deny rule matches the order of the rules in the deny policy.

If the sender of the request does not have access to the policy, this field is omitted.

repeated .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation rule_explanations = 3;

Parameters
NameDescription
indexint
valueDenyRuleExplanation
Returns
TypeDescription
ExplainedDenyPolicy.Builder

addRuleExplanations(int index, DenyRuleExplanation.Builder builderForValue)

public ExplainedDenyPolicy.Builder addRuleExplanations(int index, DenyRuleExplanation.Builder builderForValue)

Details about how each rule in the policy affects the principal's inability to use the permission for the resource. The order of the deny rule matches the order of the rules in the deny policy.

If the sender of the request does not have access to the policy, this field is omitted.

repeated .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation rule_explanations = 3;

Parameters
NameDescription
indexint
builderForValueDenyRuleExplanation.Builder
Returns
TypeDescription
ExplainedDenyPolicy.Builder

addRuleExplanationsBuilder()

public DenyRuleExplanation.Builder addRuleExplanationsBuilder()

Details about how each rule in the policy affects the principal's inability to use the permission for the resource. The order of the deny rule matches the order of the rules in the deny policy.

If the sender of the request does not have access to the policy, this field is omitted.

repeated .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation rule_explanations = 3;

Returns
TypeDescription
DenyRuleExplanation.Builder

addRuleExplanationsBuilder(int index)

public DenyRuleExplanation.Builder addRuleExplanationsBuilder(int index)

Details about how each rule in the policy affects the principal's inability to use the permission for the resource. The order of the deny rule matches the order of the rules in the deny policy.

If the sender of the request does not have access to the policy, this field is omitted.

repeated .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation rule_explanations = 3;

Parameter
NameDescription
indexint
Returns
TypeDescription
DenyRuleExplanation.Builder

build()

public ExplainedDenyPolicy build()
Returns
TypeDescription
ExplainedDenyPolicy

buildPartial()

public ExplainedDenyPolicy buildPartial()
Returns
TypeDescription
ExplainedDenyPolicy

clear()

public ExplainedDenyPolicy.Builder clear()
Returns
TypeDescription
ExplainedDenyPolicy.Builder
Overrides

clearDenyAccessState()

public ExplainedDenyPolicy.Builder clearDenyAccessState()

Required. Indicates whether this policy denies the specified permission to the specified principal for the specified resource.

This field does not indicate whether the principal actually has the permission for the resource. There might be another policy that overrides this policy. To determine whether the principal actually has the permission, use the overall_access_state field in the TroubleshootIamPolicyResponse.

.google.cloud.policytroubleshooter.iam.v3.DenyAccessState deny_access_state = 1 [(.google.api.field_behavior) = REQUIRED];

Returns
TypeDescription
ExplainedDenyPolicy.Builder

This builder for chaining.

clearField(Descriptors.FieldDescriptor field)

public ExplainedDenyPolicy.Builder clearField(Descriptors.FieldDescriptor field)
Parameter
NameDescription
fieldFieldDescriptor
Returns
TypeDescription
ExplainedDenyPolicy.Builder
Overrides

clearOneof(Descriptors.OneofDescriptor oneof)

public ExplainedDenyPolicy.Builder clearOneof(Descriptors.OneofDescriptor oneof)
Parameter
NameDescription
oneofOneofDescriptor
Returns
TypeDescription
ExplainedDenyPolicy.Builder
Overrides

clearPolicy()

public ExplainedDenyPolicy.Builder clearPolicy()

The IAM deny policy attached to the resource.

If the sender of the request does not have access to the policy, this field is omitted.

.google.iam.v2.Policy policy = 2;

Returns
TypeDescription
ExplainedDenyPolicy.Builder

clearRelevance()

public ExplainedDenyPolicy.Builder clearRelevance()

The relevance of this policy to the overall access state in the TroubleshootIamPolicyResponse.

If the sender of the request does not have access to the policy, this field is omitted.

.google.cloud.policytroubleshooter.iam.v3.HeuristicRelevance relevance = 4;

Returns
TypeDescription
ExplainedDenyPolicy.Builder

This builder for chaining.

clearRuleExplanations()

public ExplainedDenyPolicy.Builder clearRuleExplanations()

Details about how each rule in the policy affects the principal's inability to use the permission for the resource. The order of the deny rule matches the order of the rules in the deny policy.

If the sender of the request does not have access to the policy, this field is omitted.

repeated .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation rule_explanations = 3;

Returns
TypeDescription
ExplainedDenyPolicy.Builder

clone()

public ExplainedDenyPolicy.Builder clone()
Returns
TypeDescription
ExplainedDenyPolicy.Builder
Overrides

getDefaultInstanceForType()

public ExplainedDenyPolicy getDefaultInstanceForType()
Returns
TypeDescription
ExplainedDenyPolicy

getDenyAccessState()

public DenyAccessState getDenyAccessState()

Required. Indicates whether this policy denies the specified permission to the specified principal for the specified resource.

This field does not indicate whether the principal actually has the permission for the resource. There might be another policy that overrides this policy. To determine whether the principal actually has the permission, use the overall_access_state field in the TroubleshootIamPolicyResponse.

.google.cloud.policytroubleshooter.iam.v3.DenyAccessState deny_access_state = 1 [(.google.api.field_behavior) = REQUIRED];

Returns
TypeDescription
DenyAccessState

The denyAccessState.

getDenyAccessStateValue()

public int getDenyAccessStateValue()

Required. Indicates whether this policy denies the specified permission to the specified principal for the specified resource.

This field does not indicate whether the principal actually has the permission for the resource. There might be another policy that overrides this policy. To determine whether the principal actually has the permission, use the overall_access_state field in the TroubleshootIamPolicyResponse.

.google.cloud.policytroubleshooter.iam.v3.DenyAccessState deny_access_state = 1 [(.google.api.field_behavior) = REQUIRED];

Returns
TypeDescription
int

The enum numeric value on the wire for denyAccessState.

getDescriptorForType()

public Descriptors.Descriptor getDescriptorForType()
Returns
TypeDescription
Descriptor
Overrides

getPolicy()

public Policy getPolicy()

The IAM deny policy attached to the resource.

If the sender of the request does not have access to the policy, this field is omitted.

.google.iam.v2.Policy policy = 2;

Returns
TypeDescription
com.google.iam.v2.Policy

The policy.

getPolicyBuilder()

public Policy.Builder getPolicyBuilder()

The IAM deny policy attached to the resource.

If the sender of the request does not have access to the policy, this field is omitted.

.google.iam.v2.Policy policy = 2;

Returns
TypeDescription
com.google.iam.v2.Policy.Builder

getPolicyOrBuilder()

public PolicyOrBuilder getPolicyOrBuilder()

The IAM deny policy attached to the resource.

If the sender of the request does not have access to the policy, this field is omitted.

.google.iam.v2.Policy policy = 2;

Returns
TypeDescription
com.google.iam.v2.PolicyOrBuilder

getRelevance()

public HeuristicRelevance getRelevance()

The relevance of this policy to the overall access state in the TroubleshootIamPolicyResponse.

If the sender of the request does not have access to the policy, this field is omitted.

.google.cloud.policytroubleshooter.iam.v3.HeuristicRelevance relevance = 4;

Returns
TypeDescription
HeuristicRelevance

The relevance.

getRelevanceValue()

public int getRelevanceValue()

The relevance of this policy to the overall access state in the TroubleshootIamPolicyResponse.

If the sender of the request does not have access to the policy, this field is omitted.

.google.cloud.policytroubleshooter.iam.v3.HeuristicRelevance relevance = 4;

Returns
TypeDescription
int

The enum numeric value on the wire for relevance.

getRuleExplanations(int index)

public DenyRuleExplanation getRuleExplanations(int index)

Details about how each rule in the policy affects the principal's inability to use the permission for the resource. The order of the deny rule matches the order of the rules in the deny policy.

If the sender of the request does not have access to the policy, this field is omitted.

repeated .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation rule_explanations = 3;

Parameter
NameDescription
indexint
Returns
TypeDescription
DenyRuleExplanation

getRuleExplanationsBuilder(int index)

public DenyRuleExplanation.Builder getRuleExplanationsBuilder(int index)

Details about how each rule in the policy affects the principal's inability to use the permission for the resource. The order of the deny rule matches the order of the rules in the deny policy.

If the sender of the request does not have access to the policy, this field is omitted.

repeated .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation rule_explanations = 3;

Parameter
NameDescription
indexint
Returns
TypeDescription
DenyRuleExplanation.Builder

getRuleExplanationsBuilderList()

public List<DenyRuleExplanation.Builder> getRuleExplanationsBuilderList()

Details about how each rule in the policy affects the principal's inability to use the permission for the resource. The order of the deny rule matches the order of the rules in the deny policy.

If the sender of the request does not have access to the policy, this field is omitted.

repeated .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation rule_explanations = 3;

Returns
TypeDescription
List<Builder>

getRuleExplanationsCount()

public int getRuleExplanationsCount()

Details about how each rule in the policy affects the principal's inability to use the permission for the resource. The order of the deny rule matches the order of the rules in the deny policy.

If the sender of the request does not have access to the policy, this field is omitted.

repeated .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation rule_explanations = 3;

Returns
TypeDescription
int

getRuleExplanationsList()

public List<DenyRuleExplanation> getRuleExplanationsList()

Details about how each rule in the policy affects the principal's inability to use the permission for the resource. The order of the deny rule matches the order of the rules in the deny policy.

If the sender of the request does not have access to the policy, this field is omitted.

repeated .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation rule_explanations = 3;

Returns
TypeDescription
List<DenyRuleExplanation>

getRuleExplanationsOrBuilder(int index)

public DenyRuleExplanationOrBuilder getRuleExplanationsOrBuilder(int index)

Details about how each rule in the policy affects the principal's inability to use the permission for the resource. The order of the deny rule matches the order of the rules in the deny policy.

If the sender of the request does not have access to the policy, this field is omitted.

repeated .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation rule_explanations = 3;

Parameter
NameDescription
indexint
Returns
TypeDescription
DenyRuleExplanationOrBuilder

getRuleExplanationsOrBuilderList()

public List<? extends DenyRuleExplanationOrBuilder> getRuleExplanationsOrBuilderList()

Details about how each rule in the policy affects the principal's inability to use the permission for the resource. The order of the deny rule matches the order of the rules in the deny policy.

If the sender of the request does not have access to the policy, this field is omitted.

repeated .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation rule_explanations = 3;

Returns
TypeDescription
List<? extends com.google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanationOrBuilder>

hasPolicy()

public boolean hasPolicy()

The IAM deny policy attached to the resource.

If the sender of the request does not have access to the policy, this field is omitted.

.google.iam.v2.Policy policy = 2;

Returns
TypeDescription
boolean

Whether the policy field is set.

internalGetFieldAccessorTable()

protected GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
Returns
TypeDescription
FieldAccessorTable
Overrides

isInitialized()

public final boolean isInitialized()
Returns
TypeDescription
boolean
Overrides

mergeFrom(ExplainedDenyPolicy other)

public ExplainedDenyPolicy.Builder mergeFrom(ExplainedDenyPolicy other)
Parameter
NameDescription
otherExplainedDenyPolicy
Returns
TypeDescription
ExplainedDenyPolicy.Builder

mergeFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)

public ExplainedDenyPolicy.Builder mergeFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)
Parameters
NameDescription
inputCodedInputStream
extensionRegistryExtensionRegistryLite
Returns
TypeDescription
ExplainedDenyPolicy.Builder
Overrides
Exceptions
TypeDescription
IOException

mergeFrom(Message other)

public ExplainedDenyPolicy.Builder mergeFrom(Message other)
Parameter
NameDescription
otherMessage
Returns
TypeDescription
ExplainedDenyPolicy.Builder
Overrides

mergePolicy(Policy value)

public ExplainedDenyPolicy.Builder mergePolicy(Policy value)

The IAM deny policy attached to the resource.

If the sender of the request does not have access to the policy, this field is omitted.

.google.iam.v2.Policy policy = 2;

Parameter
NameDescription
valuecom.google.iam.v2.Policy
Returns
TypeDescription
ExplainedDenyPolicy.Builder

mergeUnknownFields(UnknownFieldSet unknownFields)

public final ExplainedDenyPolicy.Builder mergeUnknownFields(UnknownFieldSet unknownFields)
Parameter
NameDescription
unknownFieldsUnknownFieldSet
Returns
TypeDescription
ExplainedDenyPolicy.Builder
Overrides

removeRuleExplanations(int index)

public ExplainedDenyPolicy.Builder removeRuleExplanations(int index)

Details about how each rule in the policy affects the principal's inability to use the permission for the resource. The order of the deny rule matches the order of the rules in the deny policy.

If the sender of the request does not have access to the policy, this field is omitted.

repeated .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation rule_explanations = 3;

Parameter
NameDescription
indexint
Returns
TypeDescription
ExplainedDenyPolicy.Builder

setDenyAccessState(DenyAccessState value)

public ExplainedDenyPolicy.Builder setDenyAccessState(DenyAccessState value)

Required. Indicates whether this policy denies the specified permission to the specified principal for the specified resource.

This field does not indicate whether the principal actually has the permission for the resource. There might be another policy that overrides this policy. To determine whether the principal actually has the permission, use the overall_access_state field in the TroubleshootIamPolicyResponse.

.google.cloud.policytroubleshooter.iam.v3.DenyAccessState deny_access_state = 1 [(.google.api.field_behavior) = REQUIRED];

Parameter
NameDescription
valueDenyAccessState

The denyAccessState to set.

Returns
TypeDescription
ExplainedDenyPolicy.Builder

This builder for chaining.

setDenyAccessStateValue(int value)

public ExplainedDenyPolicy.Builder setDenyAccessStateValue(int value)

Required. Indicates whether this policy denies the specified permission to the specified principal for the specified resource.

This field does not indicate whether the principal actually has the permission for the resource. There might be another policy that overrides this policy. To determine whether the principal actually has the permission, use the overall_access_state field in the TroubleshootIamPolicyResponse.

.google.cloud.policytroubleshooter.iam.v3.DenyAccessState deny_access_state = 1 [(.google.api.field_behavior) = REQUIRED];

Parameter
NameDescription
valueint

The enum numeric value on the wire for denyAccessState to set.

Returns
TypeDescription
ExplainedDenyPolicy.Builder

This builder for chaining.

setField(Descriptors.FieldDescriptor field, Object value)

public ExplainedDenyPolicy.Builder setField(Descriptors.FieldDescriptor field, Object value)
Parameters
NameDescription
fieldFieldDescriptor
valueObject
Returns
TypeDescription
ExplainedDenyPolicy.Builder
Overrides

setPolicy(Policy value)

public ExplainedDenyPolicy.Builder setPolicy(Policy value)

The IAM deny policy attached to the resource.

If the sender of the request does not have access to the policy, this field is omitted.

.google.iam.v2.Policy policy = 2;

Parameter
NameDescription
valuecom.google.iam.v2.Policy
Returns
TypeDescription
ExplainedDenyPolicy.Builder

setPolicy(Policy.Builder builderForValue)

public ExplainedDenyPolicy.Builder setPolicy(Policy.Builder builderForValue)

The IAM deny policy attached to the resource.

If the sender of the request does not have access to the policy, this field is omitted.

.google.iam.v2.Policy policy = 2;

Parameter
NameDescription
builderForValuecom.google.iam.v2.Policy.Builder
Returns
TypeDescription
ExplainedDenyPolicy.Builder

setRelevance(HeuristicRelevance value)

public ExplainedDenyPolicy.Builder setRelevance(HeuristicRelevance value)

The relevance of this policy to the overall access state in the TroubleshootIamPolicyResponse.

If the sender of the request does not have access to the policy, this field is omitted.

.google.cloud.policytroubleshooter.iam.v3.HeuristicRelevance relevance = 4;

Parameter
NameDescription
valueHeuristicRelevance

The relevance to set.

Returns
TypeDescription
ExplainedDenyPolicy.Builder

This builder for chaining.

setRelevanceValue(int value)

public ExplainedDenyPolicy.Builder setRelevanceValue(int value)

The relevance of this policy to the overall access state in the TroubleshootIamPolicyResponse.

If the sender of the request does not have access to the policy, this field is omitted.

.google.cloud.policytroubleshooter.iam.v3.HeuristicRelevance relevance = 4;

Parameter
NameDescription
valueint

The enum numeric value on the wire for relevance to set.

Returns
TypeDescription
ExplainedDenyPolicy.Builder

This builder for chaining.

setRepeatedField(Descriptors.FieldDescriptor field, int index, Object value)

public ExplainedDenyPolicy.Builder setRepeatedField(Descriptors.FieldDescriptor field, int index, Object value)
Parameters
NameDescription
fieldFieldDescriptor
indexint
valueObject
Returns
TypeDescription
ExplainedDenyPolicy.Builder
Overrides

setRuleExplanations(int index, DenyRuleExplanation value)

public ExplainedDenyPolicy.Builder setRuleExplanations(int index, DenyRuleExplanation value)

Details about how each rule in the policy affects the principal's inability to use the permission for the resource. The order of the deny rule matches the order of the rules in the deny policy.

If the sender of the request does not have access to the policy, this field is omitted.

repeated .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation rule_explanations = 3;

Parameters
NameDescription
indexint
valueDenyRuleExplanation
Returns
TypeDescription
ExplainedDenyPolicy.Builder

setRuleExplanations(int index, DenyRuleExplanation.Builder builderForValue)

public ExplainedDenyPolicy.Builder setRuleExplanations(int index, DenyRuleExplanation.Builder builderForValue)

Details about how each rule in the policy affects the principal's inability to use the permission for the resource. The order of the deny rule matches the order of the rules in the deny policy.

If the sender of the request does not have access to the policy, this field is omitted.

repeated .google.cloud.policytroubleshooter.iam.v3.DenyRuleExplanation rule_explanations = 3;

Parameters
NameDescription
indexint
builderForValueDenyRuleExplanation.Builder
Returns
TypeDescription
ExplainedDenyPolicy.Builder

setUnknownFields(UnknownFieldSet unknownFields)

public final ExplainedDenyPolicy.Builder setUnknownFields(UnknownFieldSet unknownFields)
Parameter
NameDescription
unknownFieldsUnknownFieldSet
Returns
TypeDescription
ExplainedDenyPolicy.Builder
Overrides