- 1.35.0 (latest)
- 1.34.0
- 1.33.0
- 1.32.0
- 1.31.0
- 1.30.0
- 1.29.0
- 1.28.0
- 1.27.0
- 1.26.0
- 1.25.0
- 1.24.0
- 1.23.0
- 1.22.0
- 1.21.0
- 1.20.1
- 1.19.2
- 1.18.0
- 1.17.0
- 1.16.1
- 1.15.0
- 1.14.1
- 1.13.0
- 1.12.1
- 1.11.0
- 1.10.1
- 1.9.0
- 1.8.0
- 1.7.0
- 1.6.1
- 1.5.2
- 1.4.0
- 1.3.2
- 1.2.0
- 1.1.0
- 1.0.0
- 0.9.0
- 0.8.0
- 0.7.0
- 0.6.0
- 0.5.0
- 0.4.2
- 0.3.0
- 0.2.1
- 0.1.0
Binding(mapping=None, *, ignore_unknown_fields=False, **kwargs)
Associates members
with a role
.
.. attribute:: binding_id
:type: str
Attributes
Name | Description |
condition |
google.cloud.compute_v1.types.Expr
The condition that is associated with this binding. If the condition evaluates to true , then this binding
applies to the current request.
If the condition evaluates to false , then this binding
does not apply to the current request. However, a different
role binding might grant the same role to one or more of the
members in this binding.
To learn which resources support conditions in their IAM
policies, see the `IAM
documentation |
members |
Sequence[str]
Specifies the identities requesting access for a Cloud Platform resource. members can have the following
values:
- allUsers : A special identifier that represents anyone
who is on the internet; with or without a Google account.
- allAuthenticatedUsers : A special identifier that
represents anyone who is authenticated with a Google
account or a service account.
- user:{emailid} : An email address that represents a
specific Google account. For example,
alice@example.com .
- serviceAccount:{emailid} : An email address that
represents a service account. For example,
my-other-app@appspot.gserviceaccount.com .
- group:{emailid} : An email address that represents a
Google group. For example, admins@example.com .
- deleted:user:{emailid}?uid={uniqueid} : An email
address (plus unique identifier) representing a user that
has been recently deleted. For example,
alice@example.com?uid=123456789012345678901 . If the
user is recovered, this value reverts to
user:{emailid} and the recovered user retains the
role in the binding.
- deleted:serviceAccount:{emailid}?uid={uniqueid} : An
email address (plus unique identifier) representing a
service account that has been recently deleted. For
example,
my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901 .
If the service account is undeleted, this value reverts
to serviceAccount:{emailid} and the undeleted service
account retains the role in the binding.
- deleted:group:{emailid}?uid={uniqueid} : An email
address (plus unique identifier) representing a Google
group that has been recently deleted. For example,
admins@example.com?uid=123456789012345678901 . If the
group is recovered, this value reverts to
group:{emailid} and the recovered group retains the
role in the binding.
- domain:{domain} : The G Suite domain (primary) that
represents all the users of that domain. For example,
google.com or example.com .
|
role |
str
Role that is assigned to members . For example,
roles/viewer , roles/editor , or roles/owner .
|