- 1.41.0 (latest)
- 1.40.0
- 1.39.0
- 1.38.0
- 1.37.0
- 1.36.0
- 1.35.0
- 1.34.0
- 1.33.0
- 1.32.0
- 1.31.0
- 1.30.0
- 1.29.0
- 1.28.0
- 1.27.0
- 1.26.0
- 1.25.0
- 1.24.0
- 1.23.0
- 1.22.0
- 1.21.0
- 1.20.1
- 1.19.2
- 1.18.0
- 1.17.0
- 1.16.1
- 1.15.0
- 1.14.1
- 1.13.0
- 1.12.1
- 1.11.0
- 1.10.1
- 1.9.0
- 1.8.0
- 1.7.0
- 1.6.1
- 1.5.2
- 1.4.0
- 1.3.2
- 1.2.0
- 1.1.0
- 1.0.0
- 0.9.0
- 0.8.0
- 0.7.0
- 0.6.0
- 0.5.0
- 0.4.2
- 0.3.0
- 0.2.1
- 0.1.0
Binding
(
mapping
=
None
,
*
,
ignore_unknown_fields
=
False
,
**
kwargs
)
Associates members
, or principals, with a role
.
.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields
Attributes
Name
Description
binding_id
str
This field is a member of
oneof
_ _binding_id
.condition
google.cloud.compute_v1.types.Expr
The condition that is associated with this binding. If the condition evaluates to
true
, then this binding applies
to the current request. If the condition evaluates to false
, then this binding does not apply to the current
request. However, a different role binding might grant the
same role to one or more of the principals in this binding.
To learn which resources support conditions in their IAM
policies, see the `IAM
documentationmembers
MutableSequence[str]
Specifies the principals requesting access for a Google Cloud resource.
members
can have the following values:
\* allUsers
: A special identifier that represents anyone
who is on the internet; with or without a Google account. \* allAuthenticatedUsers
: A special identifier that
represents anyone who is authenticated with a Google account
or a service account. Does not include identities that come
from external identity providers (IdPs) through identity
federation. \* user:{emailid}
: An email address that
represents a specific Google account. For example, alice@example.com
. \* serviceAccount:{emailid}
: An
email address that represents a Google service account. For
example, my-other-app@appspot.gserviceaccount.com
. \* serviceAccount:{projectid}.svc.id.goog[{namespace}/{kubernetes-sa}]
:
An identifier for a `Kubernetes service
accountrole
str
Role that is assigned to the list of
members
, or
principals. For example, roles/viewer
, roles/editor
,
or roles/owner
. For an overview of the IAM roles and
permissions, see the `IAM
documentation