Lien

A Lien represents an encumbrance on the actions that can be performed on a resource.

JSON representation 
{
  "name": string,
  "parent": string,
  "restrictions": [
    string
  ],
  "reason": string,
  "origin": string,
  "createTime": string
}
Fields
name

string

A system-generated unique identifier for this Lien.

Example: liens/1234abcd
parent

string

A reference to the resource this Lien is attached to. The server will validate the parent against those for which Liens are supported.

Example: projects/1234
restrictions[]

string

The types of operations which should be blocked as a result of this Lien. Each value should correspond to an IAM permission. The server will validate the permissions against those for which Liens are supported.

An empty list is meaningless and will be rejected.

Example: ['resourcemanager.projects.delete']
reason

string

Concise user-visible strings indicating why an action cannot be performed on a resource. Maximum length of 200 characters.

Example: 'Holds production API key'
origin

string

A stable, user-visible/meaningful string identifying the origin of the Lien, intended to be inspected programmatically. Maximum length of 200 characters.

Example: 'compute.googleapis.com'
createTime

string (Timestamp format)

The creation time of this Lien.

A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".