Reference documentation and code samples for the Google Cloud Asset V1 Client class IamPolicyAnalysisQuery.
IAM policy analysis query message.
Generated from protobuf message google.cloud.asset.v1.IamPolicyAnalysisQuery
Methods
__construct
Constructor.
data
array
Optional. Data for populating the Message object.
↳ scope
string
Required. The relative name of the root asset. Only resources and IAM policies within the scope will be analyzed. This can only be an organization number (such as "organizations/123"), a folder number (such as "folders/123"), a project ID (such as "projects/my-project-id"), or a project number (such as "projects/12345"). To know how to get organization id, visit here . To know how to get folder or project id, visit here .
↳ resource_selector
Google\Cloud\Asset\V1\IamPolicyAnalysisQuery\ResourceSelector
Optional. Specifies a resource for analysis.
↳ identity_selector
Google\Cloud\Asset\V1\IamPolicyAnalysisQuery\IdentitySelector
Optional. Specifies an identity for analysis.
↳ access_selector
Google\Cloud\Asset\V1\IamPolicyAnalysisQuery\AccessSelector
Optional. Specifies roles or permissions for analysis. This is optional.
↳ options
↳ condition_context
Google\Cloud\Asset\V1\IamPolicyAnalysisQuery\ConditionContext
Optional. The hypothetical context for IAM conditions evaluation.
getScope
Required. The relative name of the root asset. Only resources and IAM policies within the scope will be analyzed.
This can only be an organization number (such as "organizations/123"), a folder number (such as "folders/123"), a project ID (such as "projects/my-project-id"), or a project number (such as "projects/12345"). To know how to get organization id, visit here . To know how to get folder or project id, visit here .
Generated from protobuf field string scope = 1 [(.google.api.field_behavior) = REQUIRED];
string
setScope
Required. The relative name of the root asset. Only resources and IAM policies within the scope will be analyzed.
This can only be an organization number (such as "organizations/123"), a folder number (such as "folders/123"), a project ID (such as "projects/my-project-id"), or a project number (such as "projects/12345"). To know how to get organization id, visit here . To know how to get folder or project id, visit here .
Generated from protobuf field string scope = 1 [(.google.api.field_behavior) = REQUIRED];
var
string
$this
getResourceSelector
Optional. Specifies a resource for analysis.
Generated from protobuf field .google.cloud.asset.v1.IamPolicyAnalysisQuery.ResourceSelector resource_selector = 2 [(.google.api.field_behavior) = OPTIONAL];
hasResourceSelector
clearResourceSelector
setResourceSelector
Optional. Specifies a resource for analysis.
Generated from protobuf field .google.cloud.asset.v1.IamPolicyAnalysisQuery.ResourceSelector resource_selector = 2 [(.google.api.field_behavior) = OPTIONAL];
$this
getIdentitySelector
Optional. Specifies an identity for analysis.
Generated from protobuf field .google.cloud.asset.v1.IamPolicyAnalysisQuery.IdentitySelector identity_selector = 3 [(.google.api.field_behavior) = OPTIONAL];
hasIdentitySelector
clearIdentitySelector
setIdentitySelector
Optional. Specifies an identity for analysis.
Generated from protobuf field .google.cloud.asset.v1.IamPolicyAnalysisQuery.IdentitySelector identity_selector = 3 [(.google.api.field_behavior) = OPTIONAL];
$this
getAccessSelector
Optional. Specifies roles or permissions for analysis. This is optional.
Generated from protobuf field .google.cloud.asset.v1.IamPolicyAnalysisQuery.AccessSelector access_selector = 4 [(.google.api.field_behavior) = OPTIONAL];
hasAccessSelector
clearAccessSelector
setAccessSelector
Optional. Specifies roles or permissions for analysis. This is optional.
Generated from protobuf field .google.cloud.asset.v1.IamPolicyAnalysisQuery.AccessSelector access_selector = 4 [(.google.api.field_behavior) = OPTIONAL];
$this
getOptions
Optional. The query options.
Generated from protobuf field .google.cloud.asset.v1.IamPolicyAnalysisQuery.Options options = 5 [(.google.api.field_behavior) = OPTIONAL];
hasOptions
clearOptions
setOptions
Optional. The query options.
Generated from protobuf field .google.cloud.asset.v1.IamPolicyAnalysisQuery.Options options = 5 [(.google.api.field_behavior) = OPTIONAL];
$this
getConditionContext
Optional. The hypothetical context for IAM conditions evaluation.
Generated from protobuf field .google.cloud.asset.v1.IamPolicyAnalysisQuery.ConditionContext condition_context = 6 [(.google.api.field_behavior) = OPTIONAL];
hasConditionContext
clearConditionContext
setConditionContext
Optional. The hypothetical context for IAM conditions evaluation.
Generated from protobuf field .google.cloud.asset.v1.IamPolicyAnalysisQuery.ConditionContext condition_context = 6 [(.google.api.field_behavior) = OPTIONAL];
$this