Class: Google::Cloud::PrivilegedAccessManager::V1::CheckOnboardingStatusResponse

Inherits:
Object
  • Object
show all
Extended by:
Protobuf::MessageExts::ClassMethods
Includes:
Protobuf::MessageExts
Defined in:
proto_docs/google/cloud/privilegedaccessmanager/v1/privilegedaccessmanager.rb

Overview

Response message for CheckOnboardingStatus method.

Defined Under Namespace

Classes: Finding

Instance Attribute Summary collapse

Instance Attribute Details

#findings ⇒ ::Array<::Google::Cloud::PrivilegedAccessManager::V1::CheckOnboardingStatusResponse::Finding>

Returns List of issues that are preventing PAM from functioning for this resource and need to be fixed to complete onboarding. Some issues might not be detected or reported.

Returns:



47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
 
# File 'proto_docs/google/cloud/privilegedaccessmanager/v1/privilegedaccessmanager.rb', line 47

class CheckOnboardingStatusResponse
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # Finding represents an issue which prevents PAM from functioning properly
  # for this resource.
  # @!attribute [rw] iam_access_denied
  #   @return [::Google::Cloud::PrivilegedAccessManager::V1::CheckOnboardingStatusResponse::Finding::IAMAccessDenied]
  #     PAM's service account is being denied access by Cloud IAM.
  class Finding
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods

    # PAM's service account is being denied access by Cloud IAM.
    # This can be fixed by granting a role that contains the missing
    # permissions to the service account or exempting it from deny policies if
    # they are blocking the access.
    # @!attribute [rw] missing_permissions
    #   @return [::Array<::String>]
    #     List of permissions that are being denied.
    class IAMAccessDenied
      include ::Google::Protobuf::MessageExts
      extend ::Google::Protobuf::MessageExts::ClassMethods
    end
  end
end

#service_account ⇒ ::String

Returns The service account that PAM uses to act on this resource.

Returns:

  • (::String) —

    The service account that PAM uses to act on this resource.



47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
 
# File 'proto_docs/google/cloud/privilegedaccessmanager/v1/privilegedaccessmanager.rb', line 47

class CheckOnboardingStatusResponse
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # Finding represents an issue which prevents PAM from functioning properly
  # for this resource.
  # @!attribute [rw] iam_access_denied
  #   @return [::Google::Cloud::PrivilegedAccessManager::V1::CheckOnboardingStatusResponse::Finding::IAMAccessDenied]
  #     PAM's service account is being denied access by Cloud IAM.
  class Finding
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods

    # PAM's service account is being denied access by Cloud IAM.
    # This can be fixed by granting a role that contains the missing
    # permissions to the service account or exempting it from deny policies if
    # they are blocking the access.
    # @!attribute [rw] missing_permissions
    #   @return [::Array<::String>]
    #     List of permissions that are being denied.
    class IAMAccessDenied
      include ::Google::Protobuf::MessageExts
      extend ::Google::Protobuf::MessageExts::ClassMethods
    end
  end
end