Method: projects.locations.instances.users.approveRoleChange

Records an Admin's approval of the User's pending role change: the roles in PENDING_ACTIVE or PENDING_DISABLED in roleStatuses. One approval, signed over every pending role change, covers all of them. When enough Admins have approved, all of those roles take effect in the same transaction.

Fails with FAILED_PRECONDITION if the User has no pending change or it expired, with PERMISSION_DENIED if the caller is the User being changed, and with ALREADY_EXISTS if the calling Admin already approved it.

HTTP request

POST https://mpc.googleapis.com/v1beta/{name=projects/*/locations/*/instances/*/users/*}:approveRoleChange

The URL uses gRPC Transcoding syntax.

Path parameters

Parameters
name

string

Required. The name of the User whose pending change to approve. Format: projects/{project}/locations/{location}/instances/{instance}/users/{user} It takes the form projects/{project}/locations/{location}/instances/{instance}/users/{user}.

Request body

The request body contains data with the following structure:

JSON representation 
{
  "authorizationInfo": {
    object (AuthorizationInfo)
  }
}
Fields
authorizationInfo

object (AuthorizationInfo)

Required. The calling Admin's signature over a UserSigningPayload with the User's pending role changes.

Response body

If successful, the response body contains an instance of User.

Authorization scopes

Requires the following OAuth scope:

  • https://www.googleapis.com/auth/cloud-platform

For more information, see the Authentication Overview.