Class Binding (1.5.0)

Version 1.5.0

• 1.18.0 (latest)
• 1.17.0
• 1.16.1
• 1.15.0
• 1.14.1
• 1.13.0
• 1.12.1
• 1.11.0
• 1.10.1
• 1.9.0
• 1.8.0
• 1.7.0
• 1.6.1
• 1.5.2
• 1.4.0
• 1.3.2
• 1.2.0
• 1.1.0
• 1.0.0
• 0.9.0
• 0.8.0
• 0.7.0
• 0.6.0
• 0.5.0
• 0.4.2
• 0.3.0
• 0.2.1
• 0.1.0

Binding(mapping=None, *, ignore_unknown_fields=False, **kwargs)

Associates members, or principals, with a role.

Attributes

Name	Description
binding_id	str This is deprecated and has no effect. Do not use. This field is a member of `oneof`_ ``_binding_id``.
condition	google.cloud.compute_v1.types.Expr The condition that is associated with this binding. If the condition evaluates to ``true``, then this binding applies to the current request. If the condition evaluates to ``false``, then this binding does not apply to the current request. However, a different role binding might grant the same role to one or more of the principals in this binding. To learn which resources support conditions in their IAM policies, see the `IAM documentation
members	Sequence[str] Specifies the principals requesting access for a Google Cloud resource. ``members`` can have the following values: \* ``allUsers``: A special identifier that represents anyone who is on the internet; with or without a Google account. \* ``allAuthenticatedUsers``: A special identifier that represents anyone who is authenticated with a Google account or a service account. \* ``user:{emailid}``: An email address that represents a specific Google account. For example, ``[e-mail]`` . \* ``serviceAccount:{emailid}``: An email address that represents a service account. For example, ``[e-mail]``. \* ``group:{emailid}``: An email address that represents a Google group. For example, ``[e-mail]``. \* ``deleted:user:{emailid}?uid={uniqueid}``: An email address (plus unique identifier) representing a user that has been recently deleted. For example, ``[e-mail]?uid=123456789012345678901``. If the user is recovered, this value reverts to ``user:{emailid}`` and the recovered user retains the role in the binding. \* ``deleted:serviceAccount:{emailid}?uid={uniqueid}``: An email address (plus unique identifier) representing a service account that has been recently deleted. For example, ``[e-mail]?uid=123456789012345678901``. If the service account is undeleted, this value reverts to ``serviceAccount:{emailid}`` and the undeleted service account retains the role in the binding. \* ``deleted:group:{emailid}?uid={uniqueid}``: An email address (plus unique identifier) representing a Google group that has been recently deleted. For example, ``[e-mail]?uid=123456789012345678901``. If the group is recovered, this value reverts to ``group:{emailid}`` and the recovered group retains the role in the binding. \* ``domain:{domain}``: The G Suite domain (primary) that represents all the users of that domain. For example, ``google.com`` or ``example.com``.
role	str Role that is assigned to the list of ``members``, or principals. For example, ``roles/viewer``, ``roles/editor``, or ``roles/owner``. This field is a member of `oneof`_ ``_role``.

Inheritance

builtins.object > proto.message.Message > Binding