A request message for [AssetService.AnalyzeIamPolicy][google.cloud.ass et.v1p4beta1.AssetService.AnalyzeIamPolicy]. .. attribute:: analysis_query
Required. The request query.
Classes
Options
Contains request options. .. attribute:: expand_groups
Optional. If true, the identities section of the result will expand any Google groups appearing in an IAM policy binding. If [identity_selector][] is specified, the identity in the result will be determined by the selector, and this flag will have no effect. Default is false.
Optional. If true, the resource section of the result will expand any resource attached to an IAM policy to include resources lower in the resource hierarchy. For example, if the request analyzes for which resources user A has permission P, and the results include an IAM policy with P on a GCP folder, the results will also include resources in that folder with permission P. If [resource_selector][] is specified, the resource section of the result will be determined by the selector, and this flag will have no effect. Default is false.
Optional. If true, the result will output group identity edges, starting from the binding’s group members, to any expanded identities. Default is false.
Optional. Amount of time executable has to complete. See JSON
representation of Duration
<https://developers.google.com/protocol-
buffers/docs/proto3#json>__. If this field is set with a
value less than the RPC deadline, and the execution of your
query hasn’t finished in the specified execution timeout, you
will get a response with partial result. Otherwise, your
query’s execution will continue until the RPC deadline. If
it’s not finished until then, you will get a DEADLINE_EXCEEDED
error. Default is empty.