Class Policy.Builder (1.91.0)

Version latest

• 1.91.0 (latest)
• 1.90.0
• 1.88.0
• 1.86.0
• 1.85.0
• 1.84.0
• 1.83.0
• 1.82.0
• 1.80.0
• 1.78.0
• 1.77.0
• 1.74.0
• 1.73.0
• 1.72.0
• 1.70.0
• 1.69.0
• 1.68.0
• 1.67.0
• 1.66.0
• 1.65.0
• 1.64.0
• 1.63.0
• 1.62.0
• 1.61.0
• 1.59.0
• 1.58.0
• 1.57.0
• 1.56.0
• 1.55.0
• 1.54.0
• 1.53.0
• 1.52.0
• 1.51.0
• 1.50.0
• 1.49.0
• 1.47.0
• 1.46.0
• 1.45.0
• 1.44.0
• 1.43.0
• 1.42.0
• 1.41.0
• 1.40.0
• 1.39.0
• 1.38.0
• 1.37.0
• 1.34.0
• 1.33.0
• 1.32.0
• 1.31.0
• 1.30.0
• 1.29.0
• 1.28.0
• 1.27.0
• 1.26.0
• 1.25.0
• 1.24.0
• 1.23.0
• 1.22.0
• 1.21.0
• 1.20.0
• 1.19.0
• 1.18.0
• 1.17.0
• 1.16.0
• 1.15.0
• 1.14.0
• 1.13.0
• 1.12.1
• 1.11.0
• 1.9.1
• 1.8.1
• 1.7.2
• 1.6.0-beta

public static final class Policy.Builder extends GeneratedMessageV3.Builder<Policy.Builder> implements PolicyOrBuilder

An Identity and Access Management (IAM) policy, which specifies access controls for Google Cloud resources.

A Policy is a collection of bindings. A binding binds one or more members, or principals, to a single role. Principals can be user accounts, service accounts, Google groups, and domains (such as G Suite). A role is a named list of permissions; each role can be an IAM predefined role or a user-created custom role.

For some types of Google Cloud resources, a binding can also specify a condition, which is a logical expression that allows access to a resource only if the expression evaluates to true. A condition can add constraints based on attributes of the request, the resource, or both. To learn which resources support conditions in their IAM policies, see the IAM documentation.

JSON example:

` { "bindings": [ { "role": "roles/resourcemanager.organizationAdmin", "members": [ "user:[e-mail]", "group:[e-mail]", "domain:google.com", "serviceAccount:[e-mail]" ] }, { "role": "roles/resourcemanager.organizationViewer", "members": [ "user:[e-mail]" ], "condition": { "title": "expirable access", "description": "Does not grant access after Sep 2020", "expression": "request.time < timestamp('2020-10-01T00:00:00.000Z')", } } ], "etag": "BwWWja0YfJA=", "version": 3 }

YAML example:

bindings:

• members:
  • user:[e-mail]
  • group:[e-mail]
  • domain:google.com
  • serviceAccount:[e-mail] role: roles/resourcemanager.organizationAdmin

• members:

  • user:[e-mail] role: roles/resourcemanager.organizationViewer condition: title: expirable access description: Does not grant access after Sep 2020 expression: request.time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3

`

For a description of IAM and its features, see the IAM documentation.

Protobuf type google.cloud.compute.v1.Policy

Inheritance

Object > AbstractMessageLite.Builder<MessageType,BuilderType> > AbstractMessage.Builder<BuilderType> > GeneratedMessageV3.Builder > Policy.Builder

Implements

PolicyOrBuilder

Inherited Members

AbstractMessage.Builder.findInitializationErrors()

AbstractMessage.Builder.getInitializationErrorString()

AbstractMessage.Builder.internalMergeFrom(AbstractMessageLite)

AbstractMessage.Builder.mergeFrom(byte[])

AbstractMessage.Builder.mergeFrom(byte[],ExtensionRegistryLite)

AbstractMessage.Builder.mergeFrom(byte[],int,int)

AbstractMessage.Builder.mergeFrom(byte[],int,int,ExtensionRegistryLite)

AbstractMessage.Builder.mergeFrom(ByteString)

AbstractMessage.Builder.mergeFrom(ByteString,ExtensionRegistryLite)

AbstractMessage.Builder.mergeFrom(CodedInputStream)

AbstractMessage.Builder.mergeFrom(CodedInputStream,ExtensionRegistryLite)

AbstractMessage.Builder.mergeFrom(Message)

AbstractMessage.Builder.mergeFrom(InputStream)

AbstractMessage.Builder.mergeFrom(InputStream,ExtensionRegistryLite)

AbstractMessage.Builder.newUninitializedMessageException(Message)

AbstractMessage.Builder.toString()

AbstractMessageLite.Builder.<T>addAll(Iterable<T>,Collection<? super T>)

AbstractMessageLite.Builder.<T>addAll(Iterable<T>,List<? super T>)

AbstractMessageLite.Builder.internalMergeFrom(MessageType)

AbstractMessageLite.Builder.mergeDelimitedFrom(InputStream)

AbstractMessageLite.Builder.mergeDelimitedFrom(InputStream,ExtensionRegistryLite)

AbstractMessageLite.Builder.mergeFrom(MessageLite)

AbstractMessageLite.Builder.newUninitializedMessageException(MessageLite)

GeneratedMessageV3.Builder.addRepeatedField(Descriptors.FieldDescriptor,Object)

GeneratedMessageV3.Builder.clear()

GeneratedMessageV3.Builder.clearField(Descriptors.FieldDescriptor)

GeneratedMessageV3.Builder.clearOneof(Descriptors.OneofDescriptor)

GeneratedMessageV3.Builder.clone()

GeneratedMessageV3.Builder.getAllFields()

GeneratedMessageV3.Builder.getDescriptorForType()

GeneratedMessageV3.Builder.getField(Descriptors.FieldDescriptor)

GeneratedMessageV3.Builder.getFieldBuilder(Descriptors.FieldDescriptor)

GeneratedMessageV3.Builder.getOneofFieldDescriptor(Descriptors.OneofDescriptor)

GeneratedMessageV3.Builder.getParentForChildren()

GeneratedMessageV3.Builder.getRepeatedField(Descriptors.FieldDescriptor,int)

GeneratedMessageV3.Builder.getRepeatedFieldBuilder(Descriptors.FieldDescriptor,int)

GeneratedMessageV3.Builder.getRepeatedFieldCount(Descriptors.FieldDescriptor)

com.google.protobuf.GeneratedMessageV3.Builder.getUnknownFieldSetBuilder()

GeneratedMessageV3.Builder.getUnknownFields()

GeneratedMessageV3.Builder.hasField(Descriptors.FieldDescriptor)

GeneratedMessageV3.Builder.hasOneof(Descriptors.OneofDescriptor)

GeneratedMessageV3.Builder.internalGetFieldAccessorTable()

GeneratedMessageV3.Builder.internalGetMapField(int)

com.google.protobuf.GeneratedMessageV3.Builder.internalGetMapFieldReflection(int)

GeneratedMessageV3.Builder.internalGetMutableMapField(int)

com.google.protobuf.GeneratedMessageV3.Builder.internalGetMutableMapFieldReflection(int)

GeneratedMessageV3.Builder.isClean()

GeneratedMessageV3.Builder.isInitialized()

GeneratedMessageV3.Builder.markClean()

GeneratedMessageV3.Builder.mergeUnknownFields(UnknownFieldSet)

com.google.protobuf.GeneratedMessageV3.Builder.mergeUnknownLengthDelimitedField(int,com.google.protobuf.ByteString)

com.google.protobuf.GeneratedMessageV3.Builder.mergeUnknownVarintField(int,int)

GeneratedMessageV3.Builder.newBuilderForField(Descriptors.FieldDescriptor)

GeneratedMessageV3.Builder.onBuilt()

GeneratedMessageV3.Builder.onChanged()

com.google.protobuf.GeneratedMessageV3.Builder.parseUnknownField(com.google.protobuf.CodedInputStream,com.google.protobuf.ExtensionRegistryLite,int)

GeneratedMessageV3.Builder.setField(Descriptors.FieldDescriptor,Object)

GeneratedMessageV3.Builder.setRepeatedField(Descriptors.FieldDescriptor,int,Object)

com.google.protobuf.GeneratedMessageV3.Builder.setUnknownFieldSetBuilder(com.google.protobuf.UnknownFieldSet.Builder)

GeneratedMessageV3.Builder.setUnknownFields(UnknownFieldSet)

GeneratedMessageV3.Builder.setUnknownFieldsProto3(UnknownFieldSet)

Object.equals(Object)

Object.finalize()

Object.getClass()

Object.hashCode()

Object.notify()

Object.notifyAll()

Object.wait()

Object.wait(long)

Object.wait(long,int)

Static Methods

getDescriptor()

public static final Descriptors.Descriptor getDescriptor()

Returns
Type	Description
Descriptor

Methods

addAllAuditConfigs(Iterable<? extends AuditConfig> values)

public Policy.Builder addAllAuditConfigs(Iterable<? extends AuditConfig> values)

Specifies cloud audit logging configuration for this policy.

repeated .google.cloud.compute.v1.AuditConfig audit_configs = 328080653;

Parameter
Name	Description
values	Iterable<? extends com.google.cloud.compute.v1.AuditConfig>

Returns
Type	Description
Policy.Builder

addAllBindings(Iterable<? extends Binding> values)

public Policy.Builder addAllBindings(Iterable<? extends Binding> values)

Associates a list of members, or principals, with a role. Optionally, may specify a condition that determines how and when the bindings are applied. Each of the bindings must contain at least one principal.

The bindings in a Policy can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the bindings grant 50 different roles to user:[e-mail], and not to any other principal, then you can add another 1,450 principals to the bindings in the Policy.

repeated .google.cloud.compute.v1.Binding bindings = 403251854;

Parameter
Name	Description
values	Iterable<? extends com.google.cloud.compute.v1.Binding>

Returns
Type	Description
Policy.Builder

addAuditConfigs(AuditConfig value)

public Policy.Builder addAuditConfigs(AuditConfig value)

Specifies cloud audit logging configuration for this policy.

repeated .google.cloud.compute.v1.AuditConfig audit_configs = 328080653;

Parameter
Name	Description
value	AuditConfig

Returns
Type	Description
Policy.Builder

addAuditConfigs(AuditConfig.Builder builderForValue)

public Policy.Builder addAuditConfigs(AuditConfig.Builder builderForValue)

Specifies cloud audit logging configuration for this policy.

repeated .google.cloud.compute.v1.AuditConfig audit_configs = 328080653;

Parameter
Name	Description
builderForValue	AuditConfig.Builder

Returns
Type	Description
Policy.Builder

addAuditConfigs(int index, AuditConfig value)

public Policy.Builder addAuditConfigs(int index, AuditConfig value)

Specifies cloud audit logging configuration for this policy.

repeated .google.cloud.compute.v1.AuditConfig audit_configs = 328080653;

Parameters
Name	Description
index	int
value	AuditConfig

Returns
Type	Description
Policy.Builder

addAuditConfigs(int index, AuditConfig.Builder builderForValue)

public Policy.Builder addAuditConfigs(int index, AuditConfig.Builder builderForValue)

Specifies cloud audit logging configuration for this policy.

repeated .google.cloud.compute.v1.AuditConfig audit_configs = 328080653;

Parameters
Name	Description
index	int
builderForValue	AuditConfig.Builder

Returns
Type	Description
Policy.Builder

addAuditConfigsBuilder()

public AuditConfig.Builder addAuditConfigsBuilder()

Specifies cloud audit logging configuration for this policy.

repeated .google.cloud.compute.v1.AuditConfig audit_configs = 328080653;

Returns
Type	Description
AuditConfig.Builder

addAuditConfigsBuilder(int index)

public AuditConfig.Builder addAuditConfigsBuilder(int index)

Specifies cloud audit logging configuration for this policy.

repeated .google.cloud.compute.v1.AuditConfig audit_configs = 328080653;

Parameter
Name	Description
index	int

Returns
Type	Description
AuditConfig.Builder

addBindings(Binding value)

public Policy.Builder addBindings(Binding value)

Associates a list of members, or principals, with a role. Optionally, may specify a condition that determines how and when the bindings are applied. Each of the bindings must contain at least one principal.

The bindings in a Policy can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the bindings grant 50 different roles to user:[e-mail], and not to any other principal, then you can add another 1,450 principals to the bindings in the Policy.

repeated .google.cloud.compute.v1.Binding bindings = 403251854;

Parameter
Name	Description
value	Binding

Returns
Type	Description
Policy.Builder

addBindings(Binding.Builder builderForValue)

public Policy.Builder addBindings(Binding.Builder builderForValue)

Associates a list of members, or principals, with a role. Optionally, may specify a condition that determines how and when the bindings are applied. Each of the bindings must contain at least one principal.

The bindings in a Policy can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the bindings grant 50 different roles to user:[e-mail], and not to any other principal, then you can add another 1,450 principals to the bindings in the Policy.

repeated .google.cloud.compute.v1.Binding bindings = 403251854;

Parameter
Name	Description
builderForValue	Binding.Builder

Returns
Type	Description
Policy.Builder

addBindings(int index, Binding value)

public Policy.Builder addBindings(int index, Binding value)

Associates a list of members, or principals, with a role. Optionally, may specify a condition that determines how and when the bindings are applied. Each of the bindings must contain at least one principal.

The bindings in a Policy can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the bindings grant 50 different roles to user:[e-mail], and not to any other principal, then you can add another 1,450 principals to the bindings in the Policy.

repeated .google.cloud.compute.v1.Binding bindings = 403251854;

Parameters
Name	Description
index	int
value	Binding

Returns
Type	Description
Policy.Builder

addBindings(int index, Binding.Builder builderForValue)

public Policy.Builder addBindings(int index, Binding.Builder builderForValue)

Associates a list of members, or principals, with a role. Optionally, may specify a condition that determines how and when the bindings are applied. Each of the bindings must contain at least one principal.

The bindings in a Policy can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the bindings grant 50 different roles to user:[e-mail], and not to any other principal, then you can add another 1,450 principals to the bindings in the Policy.

repeated .google.cloud.compute.v1.Binding bindings = 403251854;

Parameters
Name	Description
index	int
builderForValue	Binding.Builder

Returns
Type	Description
Policy.Builder

addBindingsBuilder()

public Binding.Builder addBindingsBuilder()

Associates a list of members, or principals, with a role. Optionally, may specify a condition that determines how and when the bindings are applied. Each of the bindings must contain at least one principal.

The bindings in a Policy can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the bindings grant 50 different roles to user:[e-mail], and not to any other principal, then you can add another 1,450 principals to the bindings in the Policy.

repeated .google.cloud.compute.v1.Binding bindings = 403251854;

Returns
Type	Description
Binding.Builder

addBindingsBuilder(int index)

public Binding.Builder addBindingsBuilder(int index)

Associates a list of members, or principals, with a role. Optionally, may specify a condition that determines how and when the bindings are applied. Each of the bindings must contain at least one principal.

The bindings in a Policy can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the bindings grant 50 different roles to user:[e-mail], and not to any other principal, then you can add another 1,450 principals to the bindings in the Policy.

repeated .google.cloud.compute.v1.Binding bindings = 403251854;

Parameter
Name	Description
index	int

Returns
Type	Description
Binding.Builder

addRepeatedField(Descriptors.FieldDescriptor field, Object value)

public Policy.Builder addRepeatedField(Descriptors.FieldDescriptor field, Object value)

Parameters
Name	Description
field	FieldDescriptor
value	Object

Returns
Type	Description
Policy.Builder

Overrides

GeneratedMessageV3.Builder<BuilderType>.addRepeatedField(Descriptors.FieldDescriptor field, Object value)

build()

public Policy build()

Returns
Type	Description
Policy

buildPartial()

public Policy buildPartial()

Returns
Type	Description
Policy

clear()

public Policy.Builder clear()

Returns
Type	Description
Policy.Builder

Overrides

GeneratedMessageV3.Builder<BuilderType>.clear()

clearAuditConfigs()

public Policy.Builder clearAuditConfigs()

Specifies cloud audit logging configuration for this policy.

repeated .google.cloud.compute.v1.AuditConfig audit_configs = 328080653;

Returns
Type	Description
Policy.Builder

clearBindings()

public Policy.Builder clearBindings()

Associates a list of members, or principals, with a role. Optionally, may specify a condition that determines how and when the bindings are applied. Each of the bindings must contain at least one principal.

The bindings in a Policy can refer to up to 1,500 principals; up to 250 of these principals can be Google groups. Each occurrence of a principal counts towards these limits. For example, if the bindings grant 50 different roles to user:[e-mail], and not to any other principal, then you can add another 1,450 principals to the bindings in the Policy.

repeated .google.cloud.compute.v1.Binding bindings = 403251854;

Returns
Type	Description
Policy.Builder

clearEtag()

public Policy.Builder clearEtag()

etag is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the etag in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An etag is returned in the response to getIamPolicy, and systems are expected to put that etag in the request to setIamPolicy to ensure that their change will be applied to the same version of the policy.

Important: If you use IAM Conditions, you must include the etag field whenever you call setIamPolicy. If you omit this field, then IAM allows you to overwrite a version 3 policy with a version 1 policy, and all of the conditions in the version 3 policy are lost.

optional string etag = 3123477;