Class: Google::Cloud::PolicyTroubleshooter::V1::ExplainedPolicy

Inherits:
Object
  • Object
show all
Extended by:
Protobuf::MessageExts::ClassMethods
Includes:
Protobuf::MessageExts
Defined in:
proto_docs/google/cloud/policytroubleshooter/v1/explanations.rb

Overview

Details about how a specific IAM Policy contributed to the access check.

Instance Attribute Summary collapse

Instance Attribute Details

#access ⇒ ::Google::Cloud::PolicyTroubleshooter::V1::AccessState

Returns Indicates whether this policy provides the specified permission to the specified member for the specified resource.

This field does not indicate whether the member actually has the permission for the resource. There might be another policy that overrides this policy. To determine whether the member actually has the permission, use the access field in the [TroubleshootIamPolicyResponse][IamChecker.TroubleshootIamPolicyResponse].

Returns:

  • (::Google::Cloud::PolicyTroubleshooter::V1::AccessState) —

    Indicates whether this policy provides the specified permission to the specified member for the specified resource.

    This field does not indicate whether the member actually has the permission for the resource. There might be another policy that overrides this policy. To determine whether the member actually has the permission, use the access field in the [TroubleshootIamPolicyResponse][IamChecker.TroubleshootIamPolicyResponse].



97
98
99
100
 
# File 'proto_docs/google/cloud/policytroubleshooter/v1/explanations.rb', line 97

class ExplainedPolicy
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods
end

#binding_explanations ⇒ ::Array<::Google::Cloud::PolicyTroubleshooter::V1::BindingExplanation>

Returns Details about how each binding in the policy affects the member's ability, or inability, to use the permission for the resource.

If the sender of the request does not have access to the policy, this field is omitted.

Returns:



97
98
99
100
 
# File 'proto_docs/google/cloud/policytroubleshooter/v1/explanations.rb', line 97

class ExplainedPolicy
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods
end

#full_resource_name ⇒ ::String

Returns The full resource name that identifies the resource. For example, //compute.googleapis.com/projects/my-project/zones/us-central1-a/instances/my-instance.

If the sender of the request does not have access to the policy, this field is omitted.

For examples of full resource names for Google Cloud services, see https://cloud.google.com/iam/help/troubleshooter/full-resource-names.

Returns:

  • (::String) —

    The full resource name that identifies the resource. For example, //compute.googleapis.com/projects/my-project/zones/us-central1-a/instances/my-instance.

    If the sender of the request does not have access to the policy, this field is omitted.

    For examples of full resource names for Google Cloud services, see https://cloud.google.com/iam/help/troubleshooter/full-resource-names.



97
98
99
100
 
# File 'proto_docs/google/cloud/policytroubleshooter/v1/explanations.rb', line 97

class ExplainedPolicy
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods
end

#policy ⇒ ::Google::Iam::V1::Policy

Returns The IAM policy attached to the resource.

If the sender of the request does not have access to the policy, this field is empty.

Returns:

  • (::Google::Iam::V1::Policy) —

    The IAM policy attached to the resource.

    If the sender of the request does not have access to the policy, this field is empty.



97
98
99
100
 
# File 'proto_docs/google/cloud/policytroubleshooter/v1/explanations.rb', line 97

class ExplainedPolicy
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods
end

#relevance ⇒ ::Google::Cloud::PolicyTroubleshooter::V1::HeuristicRelevance

Returns The relevance of this policy to the overall determination in the [TroubleshootIamPolicyResponse][IamChecker.TroubleshootIamPolicyResponse].

If the sender of the request does not have access to the policy, this field is omitted.

Returns:



97
98
99
100
 
# File 'proto_docs/google/cloud/policytroubleshooter/v1/explanations.rb', line 97

class ExplainedPolicy
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods
end