AccessStateDiff(mapping=None, *, ignore_unknown_fields=False, **kwargs)
A summary and comparison of the principal's access under the current (baseline) policies and the proposed (simulated) policies for a single access tuple.
Attributes |
|
---|---|
Name | Description |
baseline |
google.cloud.policysimulator_v1.types.ExplainedAccess
The results of evaluating the access tuple under the current (baseline) policies. If the AccessState couldn't be fully evaluated, this field explains why. |
simulated |
google.cloud.policysimulator_v1.types.ExplainedAccess
The results of evaluating the access tuple under the proposed (simulated) policies. If the AccessState couldn't be fully evaluated, this field explains why. |
access_change |
google.cloud.policysimulator_v1.types.AccessStateDiff.AccessChangeType
How the principal's access, specified in the AccessState field, changed between the current (baseline) policies and proposed (simulated) policies. |
Classes
AccessChangeType
AccessChangeType(value)
How the principal's access, specified in the AccessState field, changed between the current (baseline) policies and proposed (simulated) policies.
- The principal had access under the current policies
(`GRANTED`), but their access after the proposed
changes is `UNKNOWN`.
- The principal's access under the current policies is
`UNKNOWN`, but they will not have access after the
proposed changes (`NOT_GRANTED`).
ACCESS_MAYBE_GAINED (6):
This result can occur for the following reasons:
- The principal did not have access under the current
policies (`NOT_GRANTED`), but their access after the
proposed changes is `UNKNOWN`.
- The principal's access under the current policies is
`UNKNOWN`, but they will have access after the proposed
changes (`GRANTED`).