Reference documentation and code samples for the Policy Troubleshooter V3 API class Google::Cloud::PolicyTroubleshooter::Iam::V3::AccessTuple.
Information about the principal, resource, and permission to check.
Inherits
- Object
Extended By
- Google::Protobuf::MessageExts::ClassMethods
Includes
- Google::Protobuf::MessageExts
Methods
#condition_context
def condition_context() -> ::Google::Cloud::PolicyTroubleshooter::Iam::V3::ConditionContext- (::Google::Cloud::PolicyTroubleshooter::Iam::V3::ConditionContext) — Optional. Additional context for the request, such as the request time or IP address. This context allows Policy Troubleshooter to troubleshoot conditional role bindings and deny rules.
#condition_context=
def condition_context=(value) -> ::Google::Cloud::PolicyTroubleshooter::Iam::V3::ConditionContext- value (::Google::Cloud::PolicyTroubleshooter::Iam::V3::ConditionContext) — Optional. Additional context for the request, such as the request time or IP address. This context allows Policy Troubleshooter to troubleshoot conditional role bindings and deny rules.
- (::Google::Cloud::PolicyTroubleshooter::Iam::V3::ConditionContext) — Optional. Additional context for the request, such as the request time or IP address. This context allows Policy Troubleshooter to troubleshoot conditional role bindings and deny rules.
#full_resource_name
def full_resource_name() -> ::String-
(::String) — Required. The full resource name that identifies the resource. For example,
//compute.googleapis.com/projects/my-project/zones/us-central1-a/instances/my-instance.For examples of full resource names for Google Cloud services, see https://cloud.google.com/iam/help/troubleshooter/full-resource-names.
#full_resource_name=
def full_resource_name=(value) -> ::String-
value (::String) — Required. The full resource name that identifies the resource. For example,
//compute.googleapis.com/projects/my-project/zones/us-central1-a/instances/my-instance.For examples of full resource names for Google Cloud services, see https://cloud.google.com/iam/help/troubleshooter/full-resource-names.
-
(::String) — Required. The full resource name that identifies the resource. For example,
//compute.googleapis.com/projects/my-project/zones/us-central1-a/instances/my-instance.For examples of full resource names for Google Cloud services, see https://cloud.google.com/iam/help/troubleshooter/full-resource-names.
#permission
def permission() -> ::String-
(::String) — Required. The IAM permission to check for, either in the
v1permission format or thev2permission format.For a complete list of IAM permissions in the
v1format, see https://cloud.google.com/iam/help/permissions/reference.For a list of IAM permissions in the
v2format, see https://cloud.google.com/iam/help/deny/supported-permissions.For a complete list of predefined IAM roles and the permissions in each role, see https://cloud.google.com/iam/help/roles/reference.
#permission=
def permission=(value) -> ::String-
value (::String) — Required. The IAM permission to check for, either in the
v1permission format or thev2permission format.For a complete list of IAM permissions in the
v1format, see https://cloud.google.com/iam/help/permissions/reference.For a list of IAM permissions in the
v2format, see https://cloud.google.com/iam/help/deny/supported-permissions.For a complete list of predefined IAM roles and the permissions in each role, see https://cloud.google.com/iam/help/roles/reference.
-
(::String) — Required. The IAM permission to check for, either in the
v1permission format or thev2permission format.For a complete list of IAM permissions in the
v1format, see https://cloud.google.com/iam/help/permissions/reference.For a list of IAM permissions in the
v2format, see https://cloud.google.com/iam/help/deny/supported-permissions.For a complete list of predefined IAM roles and the permissions in each role, see https://cloud.google.com/iam/help/roles/reference.
#permission_fqdn
def permission_fqdn() -> ::String-
(::String) — Output only. The permission that Policy Troubleshooter checked for, in
the
v2format.
#principal
def principal() -> ::String-
(::String) — Required. The email address of the principal whose access you want to
check. For example,
alice@example.comormy-service-account@my-project.iam.gserviceaccount.com.The principal must be a Google Account or a service account. Other types of principals are not supported.
#principal=
def principal=(value) -> ::String-
value (::String) — Required. The email address of the principal whose access you want to
check. For example,
alice@example.comormy-service-account@my-project.iam.gserviceaccount.com.The principal must be a Google Account or a service account. Other types of principals are not supported.
-
(::String) — Required. The email address of the principal whose access you want to
check. For example,
alice@example.comormy-service-account@my-project.iam.gserviceaccount.com.The principal must be a Google Account or a service account. Other types of principals are not supported.