Reference documentation and code samples for the Google Cloud Privileged Access Manager V1 Client class Grant.
A grant represents a request from a user for obtaining the access specified in an entitlement they are eligible for.
Generated from protobuf message google.cloud.privilegedaccessmanager.v1.Grant
Namespace
Google \ Cloud \ PrivilegedAccessManager \ V1Methods
__construct
Constructor.
data
array
Optional. Data for populating the Message object.
↳ name
string
Identifier. Name of this grant. Possible formats: * * organizations/{organization-number}/locations/{region}/entitlements/{entitlement-id}/grants/{grant-id}
* * folders/{folder-number}/locations/{region}/entitlements/{entitlement-id}/grants/{grant-id}
* * projects/{project-id|project-number}/locations/{region}/entitlements/{entitlement-id}/grants/{grant-id}
The last segment of this name ( {grant-id}
) is autogenerated.
↳ create_time
↳ update_time
↳ requester
string
Output only. Username of the user who created this grant.
↳ requested_duration
Google\Protobuf\Duration
Required. The amount of time access is needed for. This value should be less than the max_request_duration
value of the entitlement.
↳ justification
↳ state
int
Output only. Current state of this grant.
↳ timeline
↳ privileged_access
↳ audit_trail
Grant\AuditTrail
Output only. Audit trail of access provided by this grant. If unspecified then access was never granted.
↳ additional_email_recipients
array
Optional. Additional email addresses to notify for all the actions performed on the grant.
↳ externally_modified
bool
Output only. Flag set by the PAM system to indicate that policy bindings made by this grant have been modified from outside PAM. After it is set, this flag remains set forever irrespective of the grant state. A true
value here indicates that PAM no longer has any certainty on the access a user has because of this grant.
getName
Identifier. Name of this grant.
Possible formats:
-
organizations/{organization-number}/locations/{region}/entitlements/{entitlement-id}/grants/{grant-id}
-
folders/{folder-number}/locations/{region}/entitlements/{entitlement-id}/grants/{grant-id}
-
projects/{project-id|project-number}/locations/{region}/entitlements/{entitlement-id}/grants/{grant-id}
The last segment of this name ({grant-id}
) is autogenerated.
string
setName
Identifier. Name of this grant.
Possible formats:
-
organizations/{organization-number}/locations/{region}/entitlements/{entitlement-id}/grants/{grant-id}
-
folders/{folder-number}/locations/{region}/entitlements/{entitlement-id}/grants/{grant-id}
-
projects/{project-id|project-number}/locations/{region}/entitlements/{entitlement-id}/grants/{grant-id}
The last segment of this name ({grant-id}
) is autogenerated.
var
string
$this
getCreateTime
Output only. Create time stamp.
hasCreateTime
clearCreateTime
setCreateTime
Output only. Create time stamp.
$this
getUpdateTime
Output only. Update time stamp.
hasUpdateTime
clearUpdateTime
setUpdateTime
Output only. Update time stamp.
$this
getRequester
Output only. Username of the user who created this grant.
string
setRequester
Output only. Username of the user who created this grant.
var
string
$this
getRequestedDuration
Required. The amount of time access is needed for. This value should be
less than the max_request_duration
value of the entitlement.
hasRequestedDuration
clearRequestedDuration
setRequestedDuration
Required. The amount of time access is needed for. This value should be
less than the max_request_duration
value of the entitlement.
$this
getJustification
Optional. Justification of why this access is needed.
hasJustification
clearJustification
setJustification
Optional. Justification of why this access is needed.
$this
getState
Output only. Current state of this grant.
int
setState
Output only. Current state of this grant.
var
int
$this
getTimeline
Output only. Timeline of this grant.
hasTimeline
clearTimeline
setTimeline
Output only. Timeline of this grant.
$this
getPrivilegedAccess
Output only. The access that would be granted by this grant.
hasPrivilegedAccess
clearPrivilegedAccess
setPrivilegedAccess
Output only. The access that would be granted by this grant.
$this
getAuditTrail
Output only. Audit trail of access provided by this grant. If unspecified then access was never granted.
hasAuditTrail
clearAuditTrail
setAuditTrail
Output only. Audit trail of access provided by this grant. If unspecified then access was never granted.
$this
getAdditionalEmailRecipients
Optional. Additional email addresses to notify for all the actions performed on the grant.
setAdditionalEmailRecipients
Optional. Additional email addresses to notify for all the actions performed on the grant.
var
string[]
$this
getExternallyModified
Output only. Flag set by the PAM system to indicate that policy bindings made by this grant have been modified from outside PAM.
After it is set, this flag remains set forever irrespective of the grant
state. A true
value here indicates that PAM no longer has any certainty
on the access a user has because of this grant.
bool
setExternallyModified
Output only. Flag set by the PAM system to indicate that policy bindings made by this grant have been modified from outside PAM.
After it is set, this flag remains set forever irrespective of the grant
state. A true
value here indicates that PAM no longer has any certainty
on the access a user has because of this grant.
var
bool
$this