Class IamPolicyAnalysisQuery (1.2.0)

Version 1.2.0

• 3.28.0 (latest)
• 3.27.1
• 3.26.4
• 3.25.1
• 3.24.3
• 3.23.0
• 3.22.0
• 3.21.0
• 3.20.1
• 3.19.1
• 3.18.1
• 3.17.1
• 3.16.0
• 3.15.0
• 3.14.2
• 3.13.1
• 3.12.0
• 3.11.0
• 3.10.0
• 3.9.1
• 3.8.1
• 3.7.1
• 3.6.1
• 3.5.0
• 3.4.0
• 3.3.0
• 3.2.1
• 3.1.0
• 2.2.2
• 2.1.0
• 2.0.0
• 1.3.2
• 1.2.0
• 1.1.0
• 1.0.0
• 0.10.0
• 0.9.0
• 0.8.0
• 0.7.0
• 0.6.0
• 0.5.0
• 0.4.1
• 0.3.0

IAM policy analysis query message.

Optional. Specifies a resource for analysis. Leaving it empty means ANY.

Optional. Specifies roles or permissions for analysis. Leaving it empty means ANY.

Classes

AccessSelector

Specifies roles and/or permissions to analyze, to determine both the identities possessing them and the resources they control. If multiple values are specified, results will include identities and resources matching any of them.

Optional. The permissions to appear in result.

IdentitySelector

Specifies an identity for which to determine resource access, based on roles assigned either directly to them or to the groups they belong to, directly or indirectly.

ResourceSelector

Specifies the resource to analyze for access policies, which may be set directly on the resource, or on ancestors such as organizations, folders or projects. At least one of [ResourceSelector][google.cloud.a sset.v1p4beta1.IamPolicyAnalysisQuery.ResourceSelector], [IdentitySele ctor][google.cloud.asset.v1p4beta1.IamPolicyAnalysisQuery.IdentitySele ctor] or [AccessSelector][google.cloud.asset.v1p4beta1.IamPolicyAnalys isQuery.AccessSelector] must be specified in a request.