Class: Google::Cloud::PolicyTroubleshooter::Iam::V3::AccessTuple

Inherits:
Object
  • Object
show all
Extended by:
Protobuf::MessageExts::ClassMethods
Includes:
Protobuf::MessageExts
Defined in:
proto_docs/google/cloud/policytroubleshooter/iam/v3/troubleshooter.rb

Overview

Information about the principal, resource, and permission to check.

Instance Attribute Summary collapse

Instance Attribute Details

#condition_context ⇒ ::Google::Cloud::PolicyTroubleshooter::Iam::V3::ConditionContext

Returns Optional. Additional context for the request, such as the request time or IP address. This context allows Policy Troubleshooter to troubleshoot conditional role bindings and deny rules.

Returns:



119
120
121
122
 
# File 'proto_docs/google/cloud/policytroubleshooter/iam/v3/troubleshooter.rb', line 119

class AccessTuple
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods
end

#full_resource_name ⇒ ::String

Returns Required. The full resource name that identifies the resource. For example, //compute.googleapis.com/projects/my-project/zones/us-central1-a/instances/my-instance.

For examples of full resource names for Google Cloud services, see https://cloud.google.com/iam/help/troubleshooter/full-resource-names.

Returns:



119
120
121
122
 
# File 'proto_docs/google/cloud/policytroubleshooter/iam/v3/troubleshooter.rb', line 119

class AccessTuple
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods
end

#permission ⇒ ::String

Returns Required. The IAM permission to check for, either in the v1 permission format or the v2 permission format.

For a complete list of IAM permissions in the v1 format, see https://cloud.google.com/iam/help/permissions/reference.

For a list of IAM permissions in the v2 format, see https://cloud.google.com/iam/help/deny/supported-permissions.

For a complete list of predefined IAM roles and the permissions in each role, see https://cloud.google.com/iam/help/roles/reference.

Returns:



119
120
121
122
 
# File 'proto_docs/google/cloud/policytroubleshooter/iam/v3/troubleshooter.rb', line 119

class AccessTuple
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods
end

#permission_fqdn ⇒ ::String (readonly)

Returns Output only. The permission that Policy Troubleshooter checked for, in the v2 format.

Returns:

  • (::String) —

    Output only. The permission that Policy Troubleshooter checked for, in the v2 format.



119
120
121
122
 
# File 'proto_docs/google/cloud/policytroubleshooter/iam/v3/troubleshooter.rb', line 119

class AccessTuple
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods
end

#principal ⇒ ::String

Returns Required. The email address of the principal whose access you want to check. For example, [email protected] or [email protected].

The principal must be a Google Account or a service account. Other types of principals are not supported.

Returns:

  • (::String) —

    Required. The email address of the principal whose access you want to check. For example, [email protected] or [email protected].

    The principal must be a Google Account or a service account. Other types of principals are not supported.



119
120
121
122
 
# File 'proto_docs/google/cloud/policytroubleshooter/iam/v3/troubleshooter.rb', line 119

class AccessTuple
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods
end