google-iam-admin overview (1.2.5)

The interfaces provided are listed below, along with usage samples.

IAMClient

Service Description: Creates and manages Identity and Access Management (IAM) resources.

You can use this service to work with all of the following resources:

• **Service accounts**, which identify an application or a virtual machine (VM) instance rather than a person
• **Service account keys**, which service accounts use to authenticate with Google APIs
• **IAM policies for service accounts**, which specify the roles that a member has for the service account
• **IAM custom roles**, which help you limit the number of permissions that you grant to members

In addition, you can use this service to complete the following tasks, among others:

• Test whether a service account can use specific permissions
• Check which roles you can grant for a specific resource
• Lint, or validate, condition expressions in an IAM policy

Sample for IAMClient:

   
 // This snippet has been automatically generated and should be regarded as a code template only. 
  
 // It will require modifications to work: 
  
 // - It may require correct/in-range values for request initialization. 
  
 // - It may require specifying regional endpoints when creating the service client as shown in 
  
 // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library 
  
 try 
  
 ( 
 IAMClient 
  
 iAMClient 
  
 = 
  
 IAMClient 
 . 
 create 
 ()) 
  
 { 
  
 ServiceAccountName 
  
 name 
  
 = 
  
 ServiceAccountName 
 . 
 of 
 ( 
 "[PROJECT]" 
 , 
  
 "[SERVICE_ACCOUNT]" 
 ); 
  
 ServiceAccount 
  
 response 
  
 = 
  
 iAMClient 
 . 
 getServiceAccount 
 ( 
 name 
 ); 
  
 }