Access Context Manager API (accesscontextmanager:v1)

2023-05-20

37 new methods | New API

Additions

    Methods
  • accesscontextmanager.operations.cancel

      HTTP Method: POST

      Path: v1/{+name}:cancel

      Parameter Order: name

      Scopes: https://www.googleapis.com/auth/cloud-platform

      Parameters:

        name

          Type: string

          Pattern: ^operations/.*$

          Location: path

          Required: Yes

          Description: The name of the operation resource to be cancelled.

      Flat Path: v1/operations/{operationsId}:cancel

      Description: Starts asynchronous cancellation on a long-running operation. The server makes a best effort to cancel the operation, but success is not guaranteed. If the server doesn't support this method, it returns `google.rpc.Code.UNIMPLEMENTED`. Clients can use Operations.GetOperation or other methods to check whether the cancellation succeeded or whether the operation completed despite cancellation. On successful cancellation, the operation is not deleted; instead, it becomes an operation with an Operation.error value with a google.rpc.Status.code of 1, corresponding to `Code.CANCELLED`.

  • accesscontextmanager.operations.list

      Description: Lists operations that match the specified filter in the request. If the server doesn't support this method, it returns `UNIMPLEMENTED`.

      Parameters:

        pageSize

          Description: The standard list page size.

          Location: query

          Type: integer

          Format: int32

        filter

          Description: The standard list filter.

          Type: string

          Location: query

        pageToken

          Location: query

          Description: The standard list page token.

          Type: string

        name

          Pattern: ^operations$

          Location: path

          Type: string

          Required: Yes

          Description: The name of the operation's parent resource.

      Path: v1/{+name}

      Parameter Order: name

      Scopes: https://www.googleapis.com/auth/cloud-platform

      Flat Path: v1/operations

      HTTP Method: GET

  • accesscontextmanager.operations.delete

      Parameters:

        name

          Description: The name of the operation resource to be deleted.

          Required: Yes

          Type: string

          Pattern: ^operations/.*$

          Location: path

      Flat Path: v1/operations/{operationsId}

      Path: v1/{+name}

      Description: Deletes a long-running operation. This method indicates that the client is no longer interested in the operation result. It does not cancel the operation. If the server doesn't support this method, it returns `google.rpc.Code.UNIMPLEMENTED`.

      Scopes: https://www.googleapis.com/auth/cloud-platform

      Parameter Order: name

      HTTP Method: DELETE

  • accesscontextmanager.operations.get

      Flat Path: v1/operations/{operationsId}

      HTTP Method: GET

      Parameters:

        name

          Required: Yes

          Description: The name of the operation resource.

          Type: string

          Location: path

          Pattern: ^operations/.*$

      Parameter Order: name

      Scopes: https://www.googleapis.com/auth/cloud-platform

      Path: v1/{+name}

      Description: Gets the latest state of a long-running operation. Clients can use this method to poll the operation result at intervals as recommended by the API service.

  • accesscontextmanager.organizations.gcpUserAccessBindings.delete

      Flat Path: v1/organizations/{organizationsId}/gcpUserAccessBindings/{gcpUserAccessBindingsId}

      HTTP Method: DELETE

      Scopes: https://www.googleapis.com/auth/cloud-platform

      Description: Deletes a GcpUserAccessBinding. Completion of this long-running operation does not necessarily signify that the binding deletion is deployed onto all affected users, which may take more time.

      Parameters:

        name

          Pattern: ^organizations/[^/]+/gcpUserAccessBindings/[^/]+$

          Required: Yes

          Type: string

          Location: path

          Description: Required. Example: "organizations/256/gcpUserAccessBindings/b3-BhcX_Ud5N"

      Path: v1/{+name}

      Parameter Order: name

  • accesscontextmanager.organizations.gcpUserAccessBindings.list

      Parameter Order: parent

      Path: v1/{+parent}/gcpUserAccessBindings

      HTTP Method: GET

      Description: Lists all GcpUserAccessBindings for a Google Cloud organization.

      Parameters:

        pageSize

          Location: query

          Description: Optional. Maximum number of items to return. The server may return fewer items. If left blank, the server may return any number of items.

          Type: integer

          Format: int32

        pageToken

          Type: string

          Location: query

          Description: Optional. If left blank, returns the first page. To enumerate all items, use the next_page_token from your previous list operation.

        parent

          Location: path

          Type: string

          Required: Yes

          Description: Required. Example: "organizations/256"

          Pattern: ^organizations/[^/]+$

      Scopes: https://www.googleapis.com/auth/cloud-platform

      Flat Path: v1/organizations/{organizationsId}/gcpUserAccessBindings

  • accesscontextmanager.organizations.gcpUserAccessBindings.patch

      Description: Updates a GcpUserAccessBinding. Completion of this long-running operation does not necessarily signify that the changed binding is deployed onto all affected users, which may take more time.

      Path: v1/{+name}

      HTTP Method: PATCH

      Scopes: https://www.googleapis.com/auth/cloud-platform

      Parameter Order: name

      Parameters:

        updateMask

          Format: google-fieldmask

          Type: string

          Location: query

          Description: Required. Only the fields specified in this mask are updated. Because name and group_key cannot be changed, update_mask is required and may only contain the following fields: `access_levels`, `dry_run_access_levels`. update_mask { paths: "access_levels" }

        name

          Description: Immutable. Assigned by the server during creation. The last segment has an arbitrary length and has only URI unreserved characters (as defined by [RFC 3986 Section 2.3](https://tools.ietf.org/html/rfc3986#section-2.3)). Should not be specified by the client during creation. Example: "organizations/256/gcpUserAccessBindings/b3-BhcX_Ud5N"

          Location: path

          Required: Yes

          Type: string

          Pattern: ^organizations/[^/]+/gcpUserAccessBindings/[^/]+$

      Flat Path: v1/organizations/{organizationsId}/gcpUserAccessBindings/{gcpUserAccessBindingsId}

  • accesscontextmanager.organizations.gcpUserAccessBindings.get

      Parameter Order: name

      Description: Gets the GcpUserAccessBinding with the given name.

      Path: v1/{+name}

      HTTP Method: GET

      Flat Path: v1/organizations/{organizationsId}/gcpUserAccessBindings/{gcpUserAccessBindingsId}

      Parameters:

        name

          Required: Yes

          Type: string

          Pattern: ^organizations/[^/]+/gcpUserAccessBindings/[^/]+$

          Location: path

          Description: Required. Example: "organizations/256/gcpUserAccessBindings/b3-BhcX_Ud5N"

      Scopes: https://www.googleapis.com/auth/cloud-platform

  • accesscontextmanager.organizations.gcpUserAccessBindings.create

      Parameters:

        parent

          Pattern: ^organizations/[^/]+$

          Type: string

          Required: Yes

          Location: path

          Description: Required. Example: "organizations/256"

      HTTP Method: POST

      Path: v1/{+parent}/gcpUserAccessBindings

      Flat Path: v1/organizations/{organizationsId}/gcpUserAccessBindings

      Scopes: https://www.googleapis.com/auth/cloud-platform

      Parameter Order: parent

      Description: Creates a GcpUserAccessBinding. If the client specifies a name, the server ignores it. Fails if a resource already exists with the same group_key. Completion of this long-running operation does not necessarily signify that the new binding is deployed onto all affected users, which may take more time.

  • accesscontextmanager.accessPolicies.get

      Flat Path: v1/accessPolicies/{accessPoliciesId}

      Parameters:

        name

          Required: Yes

          Location: path

          Pattern: ^accessPolicies/[^/]+$

          Description: Required. Resource name for the access policy to get. Format `accessPolicies/{policy_id}`

          Type: string

      Scopes: https://www.googleapis.com/auth/cloud-platform

      Path: v1/{+name}

      Parameter Order: name

      HTTP Method: GET

      Description: Returns an access policy based on the name.

  • accesscontextmanager.accessPolicies.setIamPolicy

      Parameter Order: resource

      Description: Sets the IAM policy for the specified Access Context Manager access policy. This method replaces the existing IAM policy on the access policy. The IAM policy controls the set of users who can perform specific operations on the Access Context Manager access policy.

      HTTP Method: POST

      Scopes: https://www.googleapis.com/auth/cloud-platform

      Path: v1/{+resource}:setIamPolicy

      Flat Path: v1/accessPolicies/{accessPoliciesId}:setIamPolicy

      Parameters:

        resource

          Description: REQUIRED: The resource for which the policy is being specified. See [Resource names](https://cloud.google.com/apis/design/resource_names) for the appropriate value for this field.

          Pattern: ^accessPolicies/[^/]+$

          Type: string

          Required: Yes

          Location: path

  • accesscontextmanager.accessPolicies.list

      Scopes: https://www.googleapis.com/auth/cloud-platform

      Description: Lists all access policies in an organization.

      Parameters:

        pageSize

          Description: Number of AccessPolicy instances to include in the list. Default 100.

          Format: int32

          Location: query

          Type: integer

        parent

          Description: Required. Resource name for the container to list AccessPolicy instances from. Format: `organizations/{org_id}`

          Location: query

          Type: string

        pageToken

          Type: string

          Location: query

          Description: Next page token for the next batch of AccessPolicy instances. Defaults to the first page of results.

      Path: v1/accessPolicies

      HTTP Method: GET

      Flat Path: v1/accessPolicies

  • accesscontextmanager.accessPolicies.testIamPermissions

      Parameters:

        resource

          Pattern: ^accessPolicies/[^/]+$

          Type: string

          Required: Yes

          Location: path

          Description: REQUIRED: The resource for which the policy detail is being requested. See [Resource names](https://cloud.google.com/apis/design/resource_names) for the appropriate value for this field.

      HTTP Method: POST

      Description: Returns the IAM permissions that the caller has on the specified Access Context Manager resource. The resource can be an AccessPolicy, AccessLevel, or ServicePerimeter. This method does not support other resources.

      Path: v1/{+resource}:testIamPermissions

      Scopes: https://www.googleapis.com/auth/cloud-platform

      Flat Path: v1/accessPolicies/{accessPoliciesId}:testIamPermissions

      Parameter Order: resource

  • accesscontextmanager.accessPolicies.patch

      Flat Path: v1/accessPolicies/{accessPoliciesId}

      Scopes: https://www.googleapis.com/auth/cloud-platform

      Parameter Order: name

      Description: Updates an access policy. The long-running operation from this RPC has a successful status after the changes to the access policy propagate to long-lasting storage.

      Path: v1/{+name}

      HTTP Method: PATCH

      Parameters:

        name

          Pattern: ^accessPolicies/[^/]+$

          Location: path

          Description: Output only. Resource name of the `AccessPolicy`. Format: `accessPolicies/{access_policy}`

          Required: Yes

          Type: string

        updateMask

          Format: google-fieldmask

          Type: string

          Location: query

          Description: Required. Mask to control which fields get updated. Must be non-empty.

  • accesscontextmanager.accessPolicies.getIamPolicy

      Scopes: https://www.googleapis.com/auth/cloud-platform

      Parameter Order: resource

      HTTP Method: POST

      Path: v1/{+resource}:getIamPolicy

      Flat Path: v1/accessPolicies/{accessPoliciesId}:getIamPolicy

      Parameters:

        resource

          Type: string

          Location: path

          Pattern: ^accessPolicies/[^/]+$

          Required: Yes

          Description: REQUIRED: The resource for which the policy is being requested. See [Resource names](https://cloud.google.com/apis/design/resource_names) for the appropriate value for this field.

      Description: Gets the IAM policy for the specified Access Context Manager access policy.

  • accesscontextmanager.accessPolicies.delete

      Flat Path: v1/accessPolicies/{accessPoliciesId}

      HTTP Method: DELETE

      Path: v1/{+name}

      Description: Deletes an access policy based on the resource name. The long-running operation has a successful status after the access policy is removed from long-lasting storage.

      Scopes: https://www.googleapis.com/auth/cloud-platform

      Parameter Order: name

      Parameters:

        name

          Description: Required. Resource name for the access policy to delete. Format `accessPolicies/{policy_id}`

          Type: string

          Location: path

          Pattern: ^accessPolicies/[^/]+$

          Required: Yes

  • accesscontextmanager.accessPolicies.create

      Flat Path: v1/accessPolicies

      Description: Creates an access policy. This method fails if the organization already has an access policy. The long-running operation has a successful status after the access policy propagates to long-lasting storage. Syntactic and basic semantic errors are returned in `metadata` as a BadRequest proto.

      HTTP Method: POST

      Scopes: https://www.googleapis.com/auth/cloud-platform

      Path: v1/accessPolicies

  • accesscontextmanager.accessPolicies.servicePerimeters.get

      Parameter Order: name

      Path: v1/{+name}

      HTTP Method: GET

      Description: Gets a service perimeter based on the resource name.

      Parameters:

        name

          Description: Required. Resource name for the Service Perimeter. Format: `accessPolicies/{policy_id}/servicePerimeters/{service_perimeters_id}`

          Location: path

          Required: Yes

          Type: string

          Pattern: ^accessPolicies/[^/]+/servicePerimeters/[^/]+$

      Scopes: https://www.googleapis.com/auth/cloud-platform

      Flat Path: v1/accessPolicies/{accessPoliciesId}/servicePerimeters/{servicePerimetersId}

  • accesscontextmanager.accessPolicies.servicePerimeters.testIamPermissions

      Path: v1/{+resource}:testIamPermissions

      Parameter Order: resource

      Flat Path: v1/accessPolicies/{accessPoliciesId}/servicePerimeters/{servicePerimetersId}:testIamPermissions

      Parameters:

        resource

          Required: Yes

          Description: REQUIRED: The resource for which the policy detail is being requested. See [Resource names](https://cloud.google.com/apis/design/resource_names) for the appropriate value for this field.

          Type: string

          Location: path

          Pattern: ^accessPolicies/[^/]+/servicePerimeters/[^/]+$

      Description: Returns the IAM permissions that the caller has on the specified Access Context Manager resource. The resource can be an AccessPolicy, AccessLevel, or ServicePerimeter. This method does not support other resources.

      HTTP Method: POST

      Scopes: https://www.googleapis.com/auth/cloud-platform

  • accesscontextmanager.accessPolicies.servicePerimeters.create

      Description: Creates a service perimeter. The long-running operation from this RPC has a successful status after the service perimeter propagates to long-lasting storage. If a service perimeter contains errors, an error response is returned for the first error encountered.

      HTTP Method: POST

      Flat Path: v1/accessPolicies/{accessPoliciesId}/servicePerimeters

      Scopes: https://www.googleapis.com/auth/cloud-platform

      Parameter Order: parent

      Path: v1/{+parent}/servicePerimeters

      Parameters:

        parent

          Description: Required. Resource name for the access policy which owns this Service Perimeter. Format: `accessPolicies/{policy_id}`

          Required: Yes

          Pattern: ^accessPolicies/[^/]+$

          Type: string

          Location: path

  • accesscontextmanager.accessPolicies.servicePerimeters.list

      Scopes: https://www.googleapis.com/auth/cloud-platform

      Description: Lists all service perimeters for an access policy.

      Parameter Order: parent

      Parameters:

        pageToken

          Location: query

          Description: Next page token for the next batch of Service Perimeter instances. Defaults to the first page of results.

          Type: string

        pageSize

          Description: Number of Service Perimeters to include in the list. Default 100.

          Location: query

          Type: integer

          Format: int32

        parent

          Location: path

          Description: Required. Resource name for the access policy to list Service Perimeters from. Format: `accessPolicies/{policy_id}`

          Pattern: ^accessPolicies/[^/]+$

          Type: string

          Required: Yes

      Path: v1/{+parent}/servicePerimeters

      HTTP Method: GET

      Flat Path: v1/accessPolicies/{accessPoliciesId}/servicePerimeters

  • accesscontextmanager.accessPolicies.servicePerimeters.commit

      Path: v1/{+parent}/servicePerimeters:commit

      Description: Commits the dry-run specification for all the service perimeters in an access policy. A commit operation on a service perimeter involves copying its `spec` field to the `status` field of the service perimeter. Only service perimeters with `use_explicit_dry_run_spec` field set to true are affected by a commit operation. The long-running operation from this RPC has a successful status after the dry-run specifications for all the service perimeters have been committed. If a commit fails, it causes the long-running operation to return an error response and the entire commit operation is cancelled. When successful, the Operation.response field contains CommitServicePerimetersResponse. The `dry_run` and the `spec` fields are cleared after a successful commit operation.

      HTTP Method: POST

      Parameter Order: parent

      Scopes: https://www.googleapis.com/auth/cloud-platform

      Parameters:

        parent

          Location: path

          Description: Required. Resource name for the parent Access Policy which owns all Service Perimeters in scope for the commit operation. Format: `accessPolicies/{policy_id}`

          Type: string

          Required: Yes

          Pattern: ^accessPolicies/[^/]+$

      Flat Path: v1/accessPolicies/{accessPoliciesId}/servicePerimeters:commit

  • accesscontextmanager.accessPolicies.servicePerimeters.delete

      Parameters:

        name

          Pattern: ^accessPolicies/[^/]+/servicePerimeters/[^/]+$

          Type: string

          Description: Required. Resource name for the Service Perimeter. Format: `accessPolicies/{policy_id}/servicePerimeters/{service_perimeter_id}`

          Required: Yes

          Location: path

      HTTP Method: DELETE

      Scopes: https://www.googleapis.com/auth/cloud-platform

      Path: v1/{+name}

      Parameter Order: name

      Description: Deletes a service perimeter based on the resource name. The long-running operation from this RPC has a successful status after the service perimeter is removed from long-lasting storage.

      Flat Path: v1/accessPolicies/{accessPoliciesId}/servicePerimeters/{servicePerimetersId}

  • accesscontextmanager.accessPolicies.servicePerimeters.patch

      Parameters:

        updateMask

          Format: google-fieldmask

          Description: Required. Mask to control which fields get updated. Must be non-empty.

          Location: query

          Type: string

        name

          Location: path

          Required: Yes

          Pattern: ^accessPolicies/[^/]+/servicePerimeters/[^/]+$

          Description: Resource name for the `ServicePerimeter`. Format: `accessPolicies/{access_policy}/servicePerimeters/{service_perimeter}`. The `service_perimeter` component must begin with a letter, followed by alphanumeric characters or `_`. After you create a `ServicePerimeter`, you cannot change its `name`.

          Type: string

      Parameter Order: name

      Description: Updates a service perimeter. The long-running operation from this RPC has a successful status after the service perimeter propagates to long-lasting storage. If a service perimeter contains errors, an error response is returned for the first error encountered.

      Flat Path: v1/accessPolicies/{accessPoliciesId}/servicePerimeters/{servicePerimetersId}

      Scopes: https://www.googleapis.com/auth/cloud-platform

      Path: v1/{+name}

      HTTP Method: PATCH

  • accesscontextmanager.accessPolicies.servicePerimeters.replaceAll

      Path: v1/{+parent}/servicePerimeters:replaceAll

      Scopes: https://www.googleapis.com/auth/cloud-platform

      Flat Path: v1/accessPolicies/{accessPoliciesId}/servicePerimeters:replaceAll

      Parameters:

        parent

          Required: Yes

          Pattern: ^accessPolicies/[^/]+$

          Type: string

          Location: path

          Description: Required. Resource name for the access policy which owns these Service Perimeters. Format: `accessPolicies/{policy_id}`

      Description: Replace all existing service perimeters in an access policy with the service perimeters provided. This is done atomically. The long-running operation from this RPC has a successful status after all replacements propagate to long-lasting storage. Replacements containing errors result in an error response for the first error encountered. Upon an error, replacement are cancelled and existing service perimeters are not affected. The Operation.response field contains ReplaceServicePerimetersResponse.

      Parameter Order: parent

      HTTP Method: POST

  • accesscontextmanager.accessPolicies.accessLevels.list

      Description: Lists all access levels for an access policy.

      Path: v1/{+parent}/accessLevels

      Flat Path: v1/accessPolicies/{accessPoliciesId}/accessLevels

      Scopes: https://www.googleapis.com/auth/cloud-platform

      HTTP Method: GET

      Parameters:

        pageToken

          Description: Next page token for the next batch of Access Level instances. Defaults to the first page of results.

          Location: query

          Type: string

        parent

          Location: path

          Pattern: ^accessPolicies/[^/]+$

          Description: Required. Resource name for the access policy to list Access Levels from. Format: `accessPolicies/{policy_id}`

          Type: string

          Required: Yes

        pageSize

          Description: Number of Access Levels to include in the list. Default 100.

          Type: integer

          Format: int32

          Location: query

        accessLevelFormat

          Description: Whether to return `BasicLevels` in the Cloud Common Expression language, as `CustomLevels`, rather than as `BasicLevels`. Defaults to returning `AccessLevels` in the format they were defined.

          Enum Descriptions:

        • The format was not specified.
        • Uses the format the resource was defined in. BasicLevels are returned as BasicLevels, CustomLevels are returned as CustomLevels.
        • Use Cloud Common Expression Language when returning the resource. Both BasicLevels and CustomLevels are returned as CustomLevels.
        • Location: query

          Enum:

        • LEVEL_FORMAT_UNSPECIFIED
        • AS_DEFINED
        • CEL
        • Type: string

      Parameter Order: parent

  • accesscontextmanager.accessPolicies.accessLevels.delete

      Parameter Order: name

      Flat Path: v1/accessPolicies/{accessPoliciesId}/accessLevels/{accessLevelsId}

      Path: v1/{+name}

      Description: Deletes an access level based on the resource name. The long-running operation from this RPC has a successful status after the access level has been removed from long-lasting storage.

      Parameters:

        name

          Required: Yes

          Type: string

          Description: Required. Resource name for the Access Level. Format: `accessPolicies/{policy_id}/accessLevels/{access_level_id}`

          Pattern: ^accessPolicies/[^/]+/accessLevels/[^/]+$

          Location: path

      Scopes: https://www.googleapis.com/auth/cloud-platform

      HTTP Method: DELETE

  • accesscontextmanager.accessPolicies.accessLevels.get

      Description: Gets an access level based on the resource name.

      Parameters:

        name

          Location: path

          Required: Yes

          Type: string

          Pattern: ^accessPolicies/[^/]+/accessLevels/[^/]+$

          Description: Required. Resource name for the Access Level. Format: `accessPolicies/{policy_id}/accessLevels/{access_level_id}`

        accessLevelFormat

          Location: query

          Enum:

        • LEVEL_FORMAT_UNSPECIFIED
        • AS_DEFINED
        • CEL
        • Type: string

          Description: Whether to return `BasicLevels` in the Cloud Common Expression Language rather than as `BasicLevels`. Defaults to AS_DEFINED, where Access Levels are returned as `BasicLevels` or `CustomLevels` based on how they were created. If set to CEL, all Access Levels are returned as `CustomLevels`. In the CEL case, `BasicLevels` are translated to equivalent `CustomLevels`.

          Enum Descriptions:

        • The format was not specified.
        • Uses the format the resource was defined in. BasicLevels are returned as BasicLevels, CustomLevels are returned as CustomLevels.
        • Use Cloud Common Expression Language when returning the resource. Both BasicLevels and CustomLevels are returned as CustomLevels.

      Scopes: https://www.googleapis.com/auth/cloud-platform

      HTTP Method: GET

      Parameter Order: name

      Path: v1/{+name}

      Flat Path: v1/accessPolicies/{accessPoliciesId}/accessLevels/{accessLevelsId}

  • accesscontextmanager.accessPolicies.accessLevels.create

      Path: v1/{+parent}/accessLevels

      Scopes: https://www.googleapis.com/auth/cloud-platform

      HTTP Method: POST

      Flat Path: v1/accessPolicies/{accessPoliciesId}/accessLevels

      Parameters:

        parent

          Required: Yes

          Description: Required. Resource name for the access policy which owns this Access Level. Format: `accessPolicies/{policy_id}`

          Location: path

          Pattern: ^accessPolicies/[^/]+$

          Type: string

      Parameter Order: parent

      Description: Creates an access level. The long-running operation from this RPC has a successful status after the access level propagates to long-lasting storage. If access levels contain errors, an error response is returned for the first error encountered.

  • accesscontextmanager.accessPolicies.accessLevels.replaceAll

      Flat Path: v1/accessPolicies/{accessPoliciesId}/accessLevels:replaceAll

      Scopes: https://www.googleapis.com/auth/cloud-platform

      Parameter Order: parent

      HTTP Method: POST

      Description: Replaces all existing access levels in an access policy with the access levels provided. This is done atomically. The long-running operation from this RPC has a successful status after all replacements propagate to long-lasting storage. If the replacement contains errors, an error response is returned for the first error encountered. Upon error, the replacement is cancelled, and existing access levels are not affected. The Operation.response field contains ReplaceAccessLevelsResponse. Removing access levels contained in existing service perimeters result in an error.

      Path: v1/{+parent}/accessLevels:replaceAll

      Parameters:

        parent

          Required: Yes

          Location: path

          Pattern: ^accessPolicies/[^/]+$

          Description: Required. Resource name for the access policy which owns these Access Levels. Format: `accessPolicies/{policy_id}`

          Type: string

  • accesscontextmanager.accessPolicies.accessLevels.testIamPermissions

      Flat Path: v1/accessPolicies/{accessPoliciesId}/accessLevels/{accessLevelsId}:testIamPermissions

      Scopes: https://www.googleapis.com/auth/cloud-platform

      Path: v1/{+resource}:testIamPermissions

      HTTP Method: POST

      Parameter Order: resource

      Parameters:

        resource

          Pattern: ^accessPolicies/[^/]+/accessLevels/[^/]+$

          Description: REQUIRED: The resource for which the policy detail is being requested. See [Resource names](https://cloud.google.com/apis/design/resource_names) for the appropriate value for this field.

          Required: Yes

          Type: string

          Location: path

      Description: Returns the IAM permissions that the caller has on the specified Access Context Manager resource. The resource can be an AccessPolicy, AccessLevel, or ServicePerimeter. This method does not support other resources.

  • accesscontextmanager.accessPolicies.accessLevels.patch

      Path: v1/{+name}

      Description: Updates an access level. The long-running operation from this RPC has a successful status after the changes to the access level propagate to long-lasting storage. If access levels contain errors, an error response is returned for the first error encountered.

      Parameters:

        name

          Description: Resource name for the `AccessLevel`. Format: `accessPolicies/{access_policy}/accessLevels/{access_level}`. The `access_level` component must begin with a letter, followed by alphanumeric characters or `_`. Its maximum length is 50 characters. After you create an `AccessLevel`, you cannot change its `name`.

          Pattern: ^accessPolicies/[^/]+/accessLevels/[^/]+$

          Type: string

          Location: path

          Required: Yes

        updateMask

          Type: string

          Format: google-fieldmask

          Description: Required. Mask to control which fields get updated. Must be non-empty.

          Location: query

      HTTP Method: PATCH

      Scopes: https://www.googleapis.com/auth/cloud-platform

      Flat Path: v1/accessPolicies/{accessPoliciesId}/accessLevels/{accessLevelsId}

      Parameter Order: name

  • accesscontextmanager.accessPolicies.authorizedOrgsDescs.get

      HTTP Method: GET

      Scopes: https://www.googleapis.com/auth/cloud-platform

      Path: v1/{+name}

      Parameter Order: name

      Description: Gets an authorized orgs desc based on the resource name.

      Flat Path: v1/accessPolicies/{accessPoliciesId}/authorizedOrgsDescs/{authorizedOrgsDescsId}

      Parameters:

        name

          Pattern: ^accessPolicies/[^/]+/authorizedOrgsDescs/[^/]+$

          Type: string

          Required: Yes

          Description: Required. Resource name for the Authorized Orgs Desc. Format: `accessPolicies/{policy_id}/authorizedOrgsDescs/{authorized_orgs_descs_id}`

          Location: path

  • accesscontextmanager.accessPolicies.authorizedOrgsDescs.patch

      Parameter Order: name

      HTTP Method: PATCH

      Parameters:

        updateMask

          Format: google-fieldmask

          Description: Required. Mask to control which fields get updated. Must be non-empty.

          Location: query

          Type: string

        name

          Type: string

          Description: Resource name for the `AuthorizedOrgsDesc`. Format: `accessPolicies/{access_policy}/authorizedOrgsDescs/{authorized_orgs_desc}`. The `authorized_orgs_desc` component must begin with a letter, followed by alphanumeric characters or `_`. After you create an `AuthorizedOrgsDesc`, you cannot change its `name`.

          Required: Yes

          Location: path

          Pattern: ^accessPolicies/[^/]+/authorizedOrgsDescs/[^/]+$

      Flat Path: v1/accessPolicies/{accessPoliciesId}/authorizedOrgsDescs/{authorizedOrgsDescsId}

      Description: Updates an authorized orgs desc. The long-running operation from this RPC has a successful status after the authorized orgs desc propagates to long-lasting storage. If a authorized orgs desc contains errors, an error response is returned for the first error encountered. Only the organization list in `AuthorizedOrgsDesc` can be updated. The name, authorization_type, asset_type and authorization_direction cannot be updated.

      Scopes: https://www.googleapis.com/auth/cloud-platform

      Path: v1/{+name}

  • accesscontextmanager.accessPolicies.authorizedOrgsDescs.list

      Scopes: https://www.googleapis.com/auth/cloud-platform

      Path: v1/{+parent}/authorizedOrgsDescs

      Parameters:

        parent

          Pattern: ^accessPolicies/[^/]+$

          Location: path

          Required: Yes

          Type: string

          Description: Required. Resource name for the access policy to list Authorized Orgs Desc from. Format: `accessPolicies/{policy_id}`

        pageSize

          Description: Number of Authorized Orgs Descs to include in the list. Default 100.

          Location: query

          Format: int32

          Type: integer

        pageToken

          Description: Next page token for the next batch of Authorized Orgs Desc instances. Defaults to the first page of results.

          Type: string

          Location: query

      Parameter Order: parent

      Description: Lists all authorized orgs descs for an access policy.

      Flat Path: v1/accessPolicies/{accessPoliciesId}/authorizedOrgsDescs

      HTTP Method: GET

  • accesscontextmanager.accessPolicies.authorizedOrgsDescs.create

      Parameter Order: parent

      HTTP Method: POST

      Path: v1/{+parent}/authorizedOrgsDescs

      Flat Path: v1/accessPolicies/{accessPoliciesId}/authorizedOrgsDescs

      Parameters:

        parent

          Pattern: ^accessPolicies/[^/]+$

          Required: Yes

          Description: Required. Resource name for the access policy which owns this Authorized Orgs Desc. Format: `accessPolicies/{policy_id}`

          Location: path

          Type: string

      Description: Creates an authorized orgs desc. The long-running operation from this RPC has a successful status after the authorized orgs desc propagates to long-lasting storage. If a authorized orgs desc contains errors, an error response is returned for the first error encountered. The name of this `AuthorizedOrgsDesc` will be assigned during creation.

      Scopes: https://www.googleapis.com/auth/cloud-platform

  • accesscontextmanager.accessPolicies.authorizedOrgsDescs.delete

      Path: v1/{+name}

      Flat Path: v1/accessPolicies/{accessPoliciesId}/authorizedOrgsDescs/{authorizedOrgsDescsId}

      HTTP Method: DELETE

      Scopes: https://www.googleapis.com/auth/cloud-platform

      Description: Deletes an authorized orgs desc based on the resource name. The long-running operation from this RPC has a successful status after the authorized orgs desc is removed from long-lasting storage.

      Parameters:

        name

          Location: path

          Required: Yes

          Type: string

          Description: Required. Resource name for the Authorized Orgs Desc. Format: `accessPolicies/{policy_id}/authorizedOrgsDesc/{authorized_orgs_desc_id}`

          Pattern: ^accessPolicies/[^/]+/authorizedOrgsDescs/[^/]+$

      Parameter Order: name