public final class IAMGrpc
Creates and manages Identity and Access Management (IAM) resources.
You can use this service to work with all of the following resources:
- Service accounts, which identify an application or a virtual machine
(VM) instance rather than a person
- Service account keys, which service accounts use to authenticate with
Google APIs
- IAM policies for service accounts, which specify the roles that a
principal has for the service account
- IAM custom roles, which help you limit the number of permissions that
you grant to principals
In addition, you can use this service to complete the following tasks, among
others:
- Test whether a service account can use specific permissions
- Check which roles you can grant for a specific resource
- Lint, or validate, condition expressions in an IAM policy
When you read data from the IAM API, each read is eventually consistent. In
other words, if you write data with the IAM API, then immediately read that
data, the read operation might return an older version of the data. To deal
with this behavior, your application can retry the request with truncated
exponential backoff.
In contrast, writing data to the IAM API is sequentially consistent. In other
words, write operations are always processed in the order in which they were
received.
Static Fields
SERVICE_NAME
public static final String SERVICE_NAME
Field Value |
Type |
Description |
String |
|
Static Methods
bindService(IAMGrpc.AsyncService service)
public static final ServerServiceDefinition bindService(IAMGrpc.AsyncService service)
Returns |
Type |
Description |
io.grpc.ServerServiceDefinition |
|
getCreateRoleMethod()
public static MethodDescriptor<CreateRoleRequest,Role> getCreateRoleMethod()
getCreateServiceAccountKeyMethod()
public static MethodDescriptor<CreateServiceAccountKeyRequest,ServiceAccountKey> getCreateServiceAccountKeyMethod()
getCreateServiceAccountMethod()
public static MethodDescriptor<CreateServiceAccountRequest,ServiceAccount> getCreateServiceAccountMethod()
getDeleteRoleMethod()
public static MethodDescriptor<DeleteRoleRequest,Role> getDeleteRoleMethod()
getDeleteServiceAccountKeyMethod()
public static MethodDescriptor<DeleteServiceAccountKeyRequest,Empty> getDeleteServiceAccountKeyMethod()
getDeleteServiceAccountMethod()
public static MethodDescriptor<DeleteServiceAccountRequest,Empty> getDeleteServiceAccountMethod()
getDisableServiceAccountKeyMethod()
public static MethodDescriptor<DisableServiceAccountKeyRequest,Empty> getDisableServiceAccountKeyMethod()
getDisableServiceAccountMethod()
public static MethodDescriptor<DisableServiceAccountRequest,Empty> getDisableServiceAccountMethod()
getEnableServiceAccountKeyMethod()
public static MethodDescriptor<EnableServiceAccountKeyRequest,Empty> getEnableServiceAccountKeyMethod()
getEnableServiceAccountMethod()
public static MethodDescriptor<EnableServiceAccountRequest,Empty> getEnableServiceAccountMethod()
getGetIamPolicyMethod()
public static MethodDescriptor<GetIamPolicyRequest,Policy> getGetIamPolicyMethod()
Returns |
Type |
Description |
io.grpc.MethodDescriptor<com.google.iam.v1.GetIamPolicyRequest,com.google.iam.v1.Policy> |
|
getGetRoleMethod()
public static MethodDescriptor<GetRoleRequest,Role> getGetRoleMethod()
getGetServiceAccountKeyMethod()
public static MethodDescriptor<GetServiceAccountKeyRequest,ServiceAccountKey> getGetServiceAccountKeyMethod()
getGetServiceAccountMethod()
public static MethodDescriptor<GetServiceAccountRequest,ServiceAccount> getGetServiceAccountMethod()
getLintPolicyMethod()
public static MethodDescriptor<LintPolicyRequest,LintPolicyResponse> getLintPolicyMethod()
getListRolesMethod()
public static MethodDescriptor<ListRolesRequest,ListRolesResponse> getListRolesMethod()
getListServiceAccountKeysMethod()
public static MethodDescriptor<ListServiceAccountKeysRequest,ListServiceAccountKeysResponse> getListServiceAccountKeysMethod()
getListServiceAccountsMethod()
public static MethodDescriptor<ListServiceAccountsRequest,ListServiceAccountsResponse> getListServiceAccountsMethod()
getPatchServiceAccountMethod()
public static MethodDescriptor<PatchServiceAccountRequest,ServiceAccount> getPatchServiceAccountMethod()
getQueryAuditableServicesMethod()
public static MethodDescriptor<QueryAuditableServicesRequest,QueryAuditableServicesResponse> getQueryAuditableServicesMethod()
getQueryGrantableRolesMethod()
public static MethodDescriptor<QueryGrantableRolesRequest,QueryGrantableRolesResponse> getQueryGrantableRolesMethod()
getQueryTestablePermissionsMethod()
public static MethodDescriptor<QueryTestablePermissionsRequest,QueryTestablePermissionsResponse> getQueryTestablePermissionsMethod()
getServiceDescriptor()
public static ServiceDescriptor getServiceDescriptor()
Returns |
Type |
Description |
io.grpc.ServiceDescriptor |
|
getSetIamPolicyMethod()
public static MethodDescriptor<SetIamPolicyRequest,Policy> getSetIamPolicyMethod()
Returns |
Type |
Description |
io.grpc.MethodDescriptor<com.google.iam.v1.SetIamPolicyRequest,com.google.iam.v1.Policy> |
|
getSignBlobMethod()
public static MethodDescriptor<SignBlobRequest,SignBlobResponse> getSignBlobMethod()
getSignJwtMethod()
public static MethodDescriptor<SignJwtRequest,SignJwtResponse> getSignJwtMethod()
getTestIamPermissionsMethod()
public static MethodDescriptor<TestIamPermissionsRequest,TestIamPermissionsResponse> getTestIamPermissionsMethod()
Returns |
Type |
Description |
io.grpc.MethodDescriptor<com.google.iam.v1.TestIamPermissionsRequest,com.google.iam.v1.TestIamPermissionsResponse> |
|
getUndeleteRoleMethod()
public static MethodDescriptor<UndeleteRoleRequest,Role> getUndeleteRoleMethod()
getUndeleteServiceAccountMethod()
public static MethodDescriptor<UndeleteServiceAccountRequest,UndeleteServiceAccountResponse> getUndeleteServiceAccountMethod()
getUpdateRoleMethod()
public static MethodDescriptor<UpdateRoleRequest,Role> getUpdateRoleMethod()
getUpdateServiceAccountMethod()
public static MethodDescriptor<ServiceAccount,ServiceAccount> getUpdateServiceAccountMethod()
getUploadServiceAccountKeyMethod()
public static MethodDescriptor<UploadServiceAccountKeyRequest,ServiceAccountKey> getUploadServiceAccountKeyMethod()
newBlockingStub(Channel channel)
public static IAMGrpc.IAMBlockingStub newBlockingStub(Channel channel)
Creates a new blocking-style stub that supports unary and streaming output calls on the service
Parameter |
Name |
Description |
channel |
io.grpc.Channel
|
newFutureStub(Channel channel)
public static IAMGrpc.IAMFutureStub newFutureStub(Channel channel)
Creates a new ListenableFuture-style stub that supports unary calls on the service
Parameter |
Name |
Description |
channel |
io.grpc.Channel
|
newStub(Channel channel)
public static IAMGrpc.IAMStub newStub(Channel channel)
Creates a new async stub that supports all call types for the service
Parameter |
Name |
Description |
channel |
io.grpc.Channel
|