Class TroubleshootIamPolicyResponse (0.1.4)

TroubleshootIamPolicyResponse(
    mapping=None, *, ignore_unknown_fields=False, **kwargs
)

Response for TroubleshootIamPolicy.

Attributes

NameDescription
overall_access_state google.cloud.policytroubleshooter_iam_v3.types.TroubleshootIamPolicyResponse.OverallAccessState
Indicates whether the principal has the specified permission for the specified resource, based on evaluating all types of the applicable IAM policies.
access_tuple google.cloud.policytroubleshooter_iam_v3.types.AccessTuple
The access tuple from the request, including any provided context used to evaluate the condition.
allow_policy_explanation google.cloud.policytroubleshooter_iam_v3.types.AllowPolicyExplanation
An explanation of how the applicable IAM allow policies affect the final access state.
deny_policy_explanation google.cloud.policytroubleshooter_iam_v3.types.DenyPolicyExplanation
An explanation of how the applicable IAM deny policies affect the final access state.

Classes

OverallAccessState

OverallAccessState(value)

Whether the principal has the permission on the resource.

Values: OVERALL_ACCESS_STATE_UNSPECIFIED (0): Not specified. CAN_ACCESS (1): The principal has the permission. CANNOT_ACCESS (2): The principal doesn't have the permission. UNKNOWN_INFO (3): The principal might have the permission, but the sender can't access all of the information needed to fully evaluate the principal's access. UNKNOWN_CONDITIONAL (4): The principal might have the permission, but Policy Troubleshooter can't fully evaluate the principal's access because the sender didn't provide the required context to evaluate the condition.