ObjectAccessMetadata

Represents access metadata for an object.

JSON representation
{
  "ownerPrincipal": string,
  "accessType": enum (AccessType)
}
Fields
ownerPrincipal

string

Output only. The IAM principal of the owner of the object. The supported formats are: * user:{emailid} for Google Account user * principal://iam.googleapis.com/locations/global/workforcePools/POOL_ID/subject/SUBJECT_ATTRIBUTE_VALUE for Workforce Identity user * serviceAccount:SA_EMAIL_ADDRESS for service account * principal://iam.googleapis.com/projects/PROJECT_NUMBER/locations/global/workloadIdentityPools/POOL_ID/subject/SUBJECT_ATTRIBUTE_VALUE for Workload Identity user * principal://TRUST_DOMAIN/resources/SERVICE/RESOURCE_PATH for agent identity user. Please note that ownership can only be transferred to a user principal, not a group.

accessType

enum (AccessType)

Output only. The type of access.

AccessType

AccessType of the object.

Enums
ACCESS_TYPE_UNSPECIFIED Default unspecified.
PRIVATE Indicates the object is accessible only by the owner.
PUBLIC Indicates the object is broadly public.
SHARED Indicates the object has granular access configured, but not accessible by public.