AllowPolicyExplanation(mapping=None, *, ignore_unknown_fields=False, **kwargs)Details about how the relevant IAM allow policies affect the final access state.
Attributes | |
|---|---|
| Name | Description |
allow_access_state |
google.cloud.policytroubleshooter_iam_v3.types.AllowAccessState
Indicates whether the principal has the specified permission for the specified resource, based on evaluating all applicable IAM allow policies. |
explained_policies |
MutableSequence[google.cloud.policytroubleshooter_iam_v3.types.ExplainedAllowPolicy]
List of IAM allow policies that were evaluated to check the principal's permissions, with annotations to indicate how each policy contributed to the final result. The list of policies includes the policy for the resource itself, as well as allow policies that are inherited from higher levels of the resource hierarchy, including the organization, the folder, and the project. To learn more about the resource hierarchy, see https://cloud.google.com/iam/help/resource-hierarchy. |
relevance |
google.cloud.policytroubleshooter_iam_v3.types.HeuristicRelevance
The relevance of the allow policy type to the overall access state. |