Grant(mapping=None, *, ignore_unknown_fields=False, **kwargs)A grant represents a request from a user for obtaining the access specified in an entitlement they are eligible for.
Attributes |
|
|---|---|
| Name | Description |
name |
str
Identifier. Name of this grant. Possible formats: - organizations/{organization-number}/locations/{region}/entitlements/{entitlement-id}/grants/{grant-id}
- folders/{folder-number}/locations/{region}/entitlements/{entitlement-id}/grants/{grant-id}
- projects/{project-id|project-number}/locations/{region}/entitlements/{entitlement-id}/grants/{grant-id}
The last segment of this name ({grant-id}) is
autogenerated.
|
create_time |
google.protobuf.timestamp_pb2.Timestamp
Output only. Create time stamp. |
update_time |
google.protobuf.timestamp_pb2.Timestamp
Output only. Update time stamp. |
requester |
str
Output only. Username of the user who created this grant. |
requested_duration |
google.protobuf.duration_pb2.Duration
Required. The amount of time access is needed for. This value should be less than the max_request_duration value
of the entitlement.
|
justification |
google.cloud.privilegedaccessmanager_v1.types.Justification
Optional. Justification of why this access is needed. |
state |
google.cloud.privilegedaccessmanager_v1.types.Grant.State
Output only. Current state of this grant. |
timeline |
google.cloud.privilegedaccessmanager_v1.types.Grant.Timeline
Output only. Timeline of this grant. |
privileged_access |
google.cloud.privilegedaccessmanager_v1.types.PrivilegedAccess
Output only. The access that would be granted by this grant. |
audit_trail |
google.cloud.privilegedaccessmanager_v1.types.Grant.AuditTrail
Output only. Audit trail of access provided by this grant. If unspecified then access was never granted. |
additional_email_recipients |
MutableSequence[str]
Optional. Additional email addresses to notify for all the actions performed on the grant. |
externally_modified |
bool
Output only. Flag set by the PAM system to indicate that policy bindings made by this grant have been modified from outside PAM. After it is set, this flag remains set forever irrespective of the grant state. A true value here indicates that PAM
no longer has any certainty on the access a user has because
of this grant.
|
Classes
AuditTrail
AuditTrail(mapping=None, *, ignore_unknown_fields=False, **kwargs)Audit trail for the access provided by this grant.
State
State(value)Different states a grant can be in.
Timeline
Timeline(mapping=None, *, ignore_unknown_fields=False, **kwargs)Timeline of a grant describing what happened to it and when.