Reference documentation and code samples for the Policy Troubleshooter V3 API class Google::Cloud::PolicyTroubleshooter::Iam::V3::AllowPolicyExplanation.
Details about how the relevant IAM allow policies affect the final access state.
Inherits
- Object
Extended By
- Google::Protobuf::MessageExts::ClassMethods
Includes
- Google::Protobuf::MessageExts
Methods
#allow_access_state
def allow_access_state() -> ::Google::Cloud::PolicyTroubleshooter::Iam::V3::AllowAccessState
- (::Google::Cloud::PolicyTroubleshooter::Iam::V3::AllowAccessState) — Indicates whether the principal has the specified permission for the specified resource, based on evaluating all applicable IAM allow policies.
#allow_access_state=
def allow_access_state=(value) -> ::Google::Cloud::PolicyTroubleshooter::Iam::V3::AllowAccessState
- value (::Google::Cloud::PolicyTroubleshooter::Iam::V3::AllowAccessState) — Indicates whether the principal has the specified permission for the specified resource, based on evaluating all applicable IAM allow policies.
- (::Google::Cloud::PolicyTroubleshooter::Iam::V3::AllowAccessState) — Indicates whether the principal has the specified permission for the specified resource, based on evaluating all applicable IAM allow policies.
#explained_policies
def explained_policies() -> ::Array<::Google::Cloud::PolicyTroubleshooter::Iam::V3::ExplainedAllowPolicy>
-
(::Array<::Google::Cloud::PolicyTroubleshooter::Iam::V3::ExplainedAllowPolicy>) — List of IAM allow policies that were evaluated to check the principal's
permissions, with annotations to indicate how each policy contributed to
the final result.
The list of policies includes the policy for the resource itself, as well as allow policies that are inherited from higher levels of the resource hierarchy, including the organization, the folder, and the project.
To learn more about the resource hierarchy, see https://cloud.google.com/iam/help/resource-hierarchy.
#explained_policies=
def explained_policies=(value) -> ::Array<::Google::Cloud::PolicyTroubleshooter::Iam::V3::ExplainedAllowPolicy>
-
value (::Array<::Google::Cloud::PolicyTroubleshooter::Iam::V3::ExplainedAllowPolicy>) — List of IAM allow policies that were evaluated to check the principal's
permissions, with annotations to indicate how each policy contributed to
the final result.
The list of policies includes the policy for the resource itself, as well as allow policies that are inherited from higher levels of the resource hierarchy, including the organization, the folder, and the project.
To learn more about the resource hierarchy, see https://cloud.google.com/iam/help/resource-hierarchy.
-
(::Array<::Google::Cloud::PolicyTroubleshooter::Iam::V3::ExplainedAllowPolicy>) — List of IAM allow policies that were evaluated to check the principal's
permissions, with annotations to indicate how each policy contributed to
the final result.
The list of policies includes the policy for the resource itself, as well as allow policies that are inherited from higher levels of the resource hierarchy, including the organization, the folder, and the project.
To learn more about the resource hierarchy, see https://cloud.google.com/iam/help/resource-hierarchy.
#relevance
def relevance() -> ::Google::Cloud::PolicyTroubleshooter::Iam::V3::HeuristicRelevance
- (::Google::Cloud::PolicyTroubleshooter::Iam::V3::HeuristicRelevance) — The relevance of the allow policy type to the overall access state.
#relevance=
def relevance=(value) -> ::Google::Cloud::PolicyTroubleshooter::Iam::V3::HeuristicRelevance
- value (::Google::Cloud::PolicyTroubleshooter::Iam::V3::HeuristicRelevance) — The relevance of the allow policy type to the overall access state.
- (::Google::Cloud::PolicyTroubleshooter::Iam::V3::HeuristicRelevance) — The relevance of the allow policy type to the overall access state.