TroubleshootIamPolicyResponse(
mapping=None, *, ignore_unknown_fields=False, **kwargs
)Response for TroubleshootIamPolicy.
Attributes | |
|---|---|
| Name | Description |
overall_access_state |
google.cloud.policytroubleshooter_iam_v3.types.TroubleshootIamPolicyResponse.OverallAccessState
Indicates whether the principal has the specified permission for the specified resource, based on evaluating all types of the applicable IAM policies. |
access_tuple |
google.cloud.policytroubleshooter_iam_v3.types.AccessTuple
The access tuple from the request, including any provided context used to evaluate the condition. |
allow_policy_explanation |
google.cloud.policytroubleshooter_iam_v3.types.AllowPolicyExplanation
An explanation of how the applicable IAM allow policies affect the final access state. |
deny_policy_explanation |
google.cloud.policytroubleshooter_iam_v3.types.DenyPolicyExplanation
An explanation of how the applicable IAM deny policies affect the final access state. |
Classes
OverallAccessState
OverallAccessState(value)Whether the principal has the permission on the resource.
Values: OVERALL_ACCESS_STATE_UNSPECIFIED (0): Not specified. CAN_ACCESS (1): The principal has the permission. CANNOT_ACCESS (2): The principal doesn't have the permission. UNKNOWN_INFO (3): The principal might have the permission, but the sender can't access all of the information needed to fully evaluate the principal's access. UNKNOWN_CONDITIONAL (4): The principal might have the permission, but Policy Troubleshooter can't fully evaluate the principal's access because the sender didn't provide the required context to evaluate the condition.