Package google.cloud.policytroubleshooter.v1

Interface Explanations.ExplainedPolicyOrBuilder

    • Method Detail

      • getAccessValue

        int getAccessValue()
         Indicates whether _this policy_ provides the specified permission to the
 specified principal for the specified resource.

 This field does _not_ indicate whether the principal actually has the
 permission for the resource. There might be another policy that overrides
 this policy. To determine whether the principal actually has the
 permission, use the `access` field in the
 [TroubleshootIamPolicyResponse][IamChecker.TroubleshootIamPolicyResponse].
        .google.cloud.policytroubleshooter.v1.AccessState access = 1;
        Returns:
        The enum numeric value on the wire for access.

      • getAccess

        Explanations.AccessState getAccess()
         Indicates whether _this policy_ provides the specified permission to the
 specified principal for the specified resource.

 This field does _not_ indicate whether the principal actually has the
 permission for the resource. There might be another policy that overrides
 this policy. To determine whether the principal actually has the
 permission, use the `access` field in the
 [TroubleshootIamPolicyResponse][IamChecker.TroubleshootIamPolicyResponse].
        .google.cloud.policytroubleshooter.v1.AccessState access = 1;
        Returns:
        The access.

      • getFullResourceName

        String getFullResourceName()
         The full resource name that identifies the resource. For example,
 `//compute.googleapis.com/projects/my-project/zones/us-central1-a/instances/my-instance`.

 If the sender of the request does not have access to the policy, this field
 is omitted.

 For examples of full resource names for Google Cloud services, see
 https://cloud.google.com/iam/help/troubleshooter/full-resource-names.
        string full_resource_name = 2;
        Returns:
        The fullResourceName.

      • getFullResourceNameBytes

        com.google.protobuf.ByteString getFullResourceNameBytes()
         The full resource name that identifies the resource. For example,
 `//compute.googleapis.com/projects/my-project/zones/us-central1-a/instances/my-instance`.

 If the sender of the request does not have access to the policy, this field
 is omitted.

 For examples of full resource names for Google Cloud services, see
 https://cloud.google.com/iam/help/troubleshooter/full-resource-names.
        string full_resource_name = 2;
        Returns:
        The bytes for fullResourceName.

      • hasPolicy

        boolean hasPolicy()
         The IAM policy attached to the resource.

 If the sender of the request does not have access to the policy, this field
 is empty.
        .google.iam.v1.Policy policy = 3;
        Returns:
        Whether the policy field is set.

      • getPolicy

        com.google.iam.v1.Policy getPolicy()
         The IAM policy attached to the resource.

 If the sender of the request does not have access to the policy, this field
 is empty.
        .google.iam.v1.Policy policy = 3;
        Returns:
        The policy.

      • getPolicyOrBuilder

        com.google.iam.v1.PolicyOrBuilder getPolicyOrBuilder()
         The IAM policy attached to the resource.

 If the sender of the request does not have access to the policy, this field
 is empty.
        .google.iam.v1.Policy policy = 3;

      • getBindingExplanationsList

        List<Explanations.BindingExplanation> getBindingExplanationsList()
         Details about how each binding in the policy affects the principal's
 ability, or inability, to use the permission for the resource.

 If the sender of the request does not have access to the policy, this field
 is omitted.
        repeated .google.cloud.policytroubleshooter.v1.BindingExplanation binding_explanations = 4;

      • getBindingExplanations

        Explanations.BindingExplanation getBindingExplanations​(int index)
         Details about how each binding in the policy affects the principal's
 ability, or inability, to use the permission for the resource.

 If the sender of the request does not have access to the policy, this field
 is omitted.
        repeated .google.cloud.policytroubleshooter.v1.BindingExplanation binding_explanations = 4;

      • getBindingExplanationsCount

        int getBindingExplanationsCount()
         Details about how each binding in the policy affects the principal's
 ability, or inability, to use the permission for the resource.

 If the sender of the request does not have access to the policy, this field
 is omitted.
        repeated .google.cloud.policytroubleshooter.v1.BindingExplanation binding_explanations = 4;

      • getBindingExplanationsOrBuilderList

        List<? extends Explanations.BindingExplanationOrBuilder> getBindingExplanationsOrBuilderList()
         Details about how each binding in the policy affects the principal's
 ability, or inability, to use the permission for the resource.

 If the sender of the request does not have access to the policy, this field
 is omitted.
        repeated .google.cloud.policytroubleshooter.v1.BindingExplanation binding_explanations = 4;

      • getBindingExplanationsOrBuilder

        Explanations.BindingExplanationOrBuilder getBindingExplanationsOrBuilder​(int index)
         Details about how each binding in the policy affects the principal's
 ability, or inability, to use the permission for the resource.

 If the sender of the request does not have access to the policy, this field
 is omitted.
        repeated .google.cloud.policytroubleshooter.v1.BindingExplanation binding_explanations = 4;

      • getRelevanceValue

        int getRelevanceValue()
         The relevance of this policy to the overall determination in the
 [TroubleshootIamPolicyResponse][IamChecker.TroubleshootIamPolicyResponse].

 If the sender of the request does not have access to the policy, this field
 is omitted.
        .google.cloud.policytroubleshooter.v1.HeuristicRelevance relevance = 5;
        Returns:
        The enum numeric value on the wire for relevance.

      • getRelevance

        Explanations.HeuristicRelevance getRelevance()
         The relevance of this policy to the overall determination in the
 [TroubleshootIamPolicyResponse][IamChecker.TroubleshootIamPolicyResponse].

 If the sender of the request does not have access to the policy, this field
 is omitted.
        .google.cloud.policytroubleshooter.v1.HeuristicRelevance relevance = 5;
        Returns:
        The relevance.