- Resource: User
- SqlUserType
- UserPasswordValidationPolicy
- PasswordStatus
- DualPasswordType
- IamStatus
- Methods
Resource: User
A Cloud SQL user resource.
| JSON representation |
|---|
{ "kind" : string , "password" : string , "etag" : string , "name" : string , "host" : string , "instance" : string , "project" : string , "type" : enum ( |
| Fields | |
|---|---|
kind
|
This is always |
password
|
The password for the user. |
etag
|
This field is deprecated and will be removed from a future version of the API. |
name
|
The name of the user in the Cloud SQL instance. Can be omitted for |
host
|
Optional. The host from which the user can connect. For |
instance
|
The name of the Cloud SQL instance. This does not include the project ID. Can be omitted for |
project
|
The project ID of the project containing the Cloud SQL database. The Google apps domain is prefixed if applicable. Can be omitted for |
type
|
The user type. It determines the method to authenticate the user during login. The default is the database's built-in user type. |
iamEmail
|
Optional. The full email for an IAM user. For normal database users, this will not be filled. Only applicable to MySQL database users. |
passwordPolicy
|
User level password validation policy. |
dualPasswordType
|
Dual password status for the user. |
iamStatus
|
Indicates if a group is active or inactive for IAM database authentication. |
SqlUserType
The user type.
| Enums | |
|---|---|
BUILT_IN
|
The database's built-in user type. |
CLOUD_IAM_USER
|
Cloud IAM user. |
CLOUD_IAM_SERVICE_ACCOUNT
|
Cloud IAM service account. |
CLOUD_IAM_GROUP
|
Cloud IAM group. Not used for login. |
CLOUD_IAM_GROUP_USER
|
Read-only. Login for a user that belongs to the Cloud IAM group. |
CLOUD_IAM_GROUP_SERVICE_ACCOUNT
|
Read-only. Login for a service account that belongs to the Cloud IAM group. |
UserPasswordValidationPolicy
User level password validation policy.
| JSON representation |
|---|
{
"allowedFailedAttempts"
:
integer
,
"passwordExpirationDuration"
:
string
,
"enableFailedAttemptsCheck"
:
boolean
,
"status"
:
{
object (
|
| Fields | |
|---|---|
allowedFailedAttempts
|
Number of failed login attempts allowed before user get locked. |
passwordExpirationDuration
|
Expiration duration after password is updated. A duration in seconds with up to nine fractional digits, ending with ' |
enableFailedAttemptsCheck
|
If true, failed login attempts check will be enabled. |
status
|
Output only. Read-only password status. |
enablePasswordVerification
|
If true, the user must specify the current password before changing the password. This flag is supported only for MySQL. |
PasswordStatus
Read-only password status.
| JSON representation |
|---|
{ "locked" : boolean , "passwordExpirationTime" : string } |
| Fields | |
|---|---|
locked
|
If true, user does not have login privileges. |
passwordExpirationTime
|
The expiration time of the current password. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: |
DualPasswordType
The type of retained password.
| Enums | |
|---|---|
DUAL_PASSWORD_TYPE_UNSPECIFIED
|
The default value. |
NO_MODIFY_DUAL_PASSWORD
|
Do not update the user's dual password status. |
NO_DUAL_PASSWORD
|
No dual password usable for connecting using this user. |
DUAL_PASSWORD
|
Dual password usable for connecting using this user. |
IamStatus
Indicates if a group is available for IAM database authentication.
| Enums | |
|---|---|
IAM_STATUS_UNSPECIFIED
|
The default value for users that are not of type CLOUD_IAM_GROUP. Only CLOUD_IAM_GROUP users will be inactive or active. Users with an IamStatus of IAM_STATUS_UNSPECIFIED will not display whether they are active or inactive as that is not applicable to them. |
INACTIVE
|
INACTIVE indicates a group is not available for IAM database authentication. |
ACTIVE
|
ACTIVE indicates a group is available for IAM database authentication. |
Methods |
|
|---|---|
|
Deletes a user from a Cloud SQL instance. |
|
Retrieves a resource containing information about a user. |
|
Creates a new user in a Cloud SQL instance. |
|
Lists users in the specified Cloud SQL instance. |
|
Updates an existing user in a Cloud SQL instance. |

