Reference documentation and code samples for the Policy Troubleshooter V3 API class Google::Cloud::PolicyTroubleshooter::Iam::V3::AccessTuple.
Information about the principal, resource, and permission to check.
Inherits
- Object
Extended By
- Google::Protobuf::MessageExts::ClassMethods
Includes
- Google::Protobuf::MessageExts
Methods
#condition_context
def condition_context() -> ::Google::Cloud::PolicyTroubleshooter::Iam::V3::ConditionContext
- (::Google::Cloud::PolicyTroubleshooter::Iam::V3::ConditionContext) — Optional. Additional context for the request, such as the request time or IP address. This context allows Policy Troubleshooter to troubleshoot conditional role bindings and deny rules.
#condition_context=
def condition_context=(value) -> ::Google::Cloud::PolicyTroubleshooter::Iam::V3::ConditionContext
- value (::Google::Cloud::PolicyTroubleshooter::Iam::V3::ConditionContext) — Optional. Additional context for the request, such as the request time or IP address. This context allows Policy Troubleshooter to troubleshoot conditional role bindings and deny rules.
- (::Google::Cloud::PolicyTroubleshooter::Iam::V3::ConditionContext) — Optional. Additional context for the request, such as the request time or IP address. This context allows Policy Troubleshooter to troubleshoot conditional role bindings and deny rules.
#full_resource_name
def full_resource_name() -> ::String
-
(::String) — Required. The full resource name that identifies the resource. For example,
//compute.googleapis.com/projects/my-project/zones/us-central1-a/instances/my-instance
.For examples of full resource names for Google Cloud services, see https://cloud.google.com/iam/help/troubleshooter/full-resource-names.
#full_resource_name=
def full_resource_name=(value) -> ::String
-
value (::String) — Required. The full resource name that identifies the resource. For example,
//compute.googleapis.com/projects/my-project/zones/us-central1-a/instances/my-instance
.For examples of full resource names for Google Cloud services, see https://cloud.google.com/iam/help/troubleshooter/full-resource-names.
-
(::String) — Required. The full resource name that identifies the resource. For example,
//compute.googleapis.com/projects/my-project/zones/us-central1-a/instances/my-instance
.For examples of full resource names for Google Cloud services, see https://cloud.google.com/iam/help/troubleshooter/full-resource-names.
#permission
def permission() -> ::String
-
(::String) — Required. The IAM permission to check for, either in the
v1
permission format or thev2
permission format.For a complete list of IAM permissions in the
v1
format, see https://cloud.google.com/iam/help/permissions/reference.For a list of IAM permissions in the
v2
format, see https://cloud.google.com/iam/help/deny/supported-permissions.For a complete list of predefined IAM roles and the permissions in each role, see https://cloud.google.com/iam/help/roles/reference.
#permission=
def permission=(value) -> ::String
-
value (::String) — Required. The IAM permission to check for, either in the
v1
permission format or thev2
permission format.For a complete list of IAM permissions in the
v1
format, see https://cloud.google.com/iam/help/permissions/reference.For a list of IAM permissions in the
v2
format, see https://cloud.google.com/iam/help/deny/supported-permissions.For a complete list of predefined IAM roles and the permissions in each role, see https://cloud.google.com/iam/help/roles/reference.
-
(::String) — Required. The IAM permission to check for, either in the
v1
permission format or thev2
permission format.For a complete list of IAM permissions in the
v1
format, see https://cloud.google.com/iam/help/permissions/reference.For a list of IAM permissions in the
v2
format, see https://cloud.google.com/iam/help/deny/supported-permissions.For a complete list of predefined IAM roles and the permissions in each role, see https://cloud.google.com/iam/help/roles/reference.
#permission_fqdn
def permission_fqdn() -> ::String
-
(::String) — Output only. The permission that Policy Troubleshooter checked for, in
the
v2
format.
#principal
def principal() -> ::String
-
(::String) — Required. The email address of the principal whose access you want to
check. For example,
alice@example.com
ormy-service-account@my-project.iam.gserviceaccount.com
.The principal must be a Google Account or a service account. Other types of principals are not supported.
#principal=
def principal=(value) -> ::String
-
value (::String) — Required. The email address of the principal whose access you want to
check. For example,
alice@example.com
ormy-service-account@my-project.iam.gserviceaccount.com
.The principal must be a Google Account or a service account. Other types of principals are not supported.
-
(::String) — Required. The email address of the principal whose access you want to
check. For example,
alice@example.com
ormy-service-account@my-project.iam.gserviceaccount.com
.The principal must be a Google Account or a service account. Other types of principals are not supported.