Package com.google.iam.v1

Interface BindingOrBuilder

  • All Superinterfaces:
    com.google.protobuf.MessageLiteOrBuilder, com.google.protobuf.MessageOrBuilder
    All Known Implementing Classes:
    Binding, Binding.Builder
    public interface BindingOrBuilder
extends com.google.protobuf.MessageOrBuilder

    • Method Summary

      All Methods Instance Methods Abstract Methods 
      Modifier and Type Method Description
      Expr getCondition()
      The condition that is associated with this binding.
      ExprOrBuilder getConditionOrBuilder()
      The condition that is associated with this binding.
      String getMembers​(int index)
      Specifies the principals requesting access for a Cloud Platform resource.
      com.google.protobuf.ByteString getMembersBytes​(int index)
      Specifies the principals requesting access for a Cloud Platform resource.
      int getMembersCount()
      Specifies the principals requesting access for a Cloud Platform resource.
      List<String> getMembersList()
      Specifies the principals requesting access for a Cloud Platform resource.
      String getRole()
      Role that is assigned to the list of `members`, or principals.
      com.google.protobuf.ByteString getRoleBytes()
      Role that is assigned to the list of `members`, or principals.
      boolean hasCondition()
      The condition that is associated with this binding.

      • Methods inherited from interface com.google.protobuf.MessageLiteOrBuilder

        isInitialized

      • Methods inherited from interface com.google.protobuf.MessageOrBuilder

        findInitializationErrors, getAllFields, getDefaultInstanceForType, getDescriptorForType, getField, getInitializationErrorString, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, getUnknownFields, hasField, hasOneof

    • Method Detail

      • getRole

        String getRole()
         Role that is assigned to the list of `members`, or principals.
 For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
        string role = 1;
        Returns:
        The role.

      • getRoleBytes

        com.google.protobuf.ByteString getRoleBytes()
         Role that is assigned to the list of `members`, or principals.
 For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
        string role = 1;
        Returns:
        The bytes for role.

      • getMembersList

        List<String> getMembersList()
         Specifies the principals requesting access for a Cloud Platform resource.
 `members` can have the following values:
 * `allUsers`: A special identifier that represents anyone who is
    on the internet; with or without a Google account.
 * `allAuthenticatedUsers`: A special identifier that represents anyone
    who is authenticated with a Google account or a service account.
 * `user:{emailid}`: An email address that represents a specific Google
    account. For example, `alice@example.com` .
 * `serviceAccount:{emailid}`: An email address that represents a service
    account. For example, `my-other-app@appspot.gserviceaccount.com`.
 * `group:{emailid}`: An email address that represents a Google group.
    For example, `admins@example.com`.
 * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
    identifier) representing a user that has been recently deleted. For
    example, `alice@example.com?uid=123456789012345678901`. If the user is
    recovered, this value reverts to `user:{emailid}` and the recovered user
    retains the role in the binding.
 * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
    unique identifier) representing a service account that has been recently
    deleted. For example,
    `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
    If the service account is undeleted, this value reverts to
    `serviceAccount:{emailid}` and the undeleted service account retains the
    role in the binding.
 * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
    identifier) representing a Google group that has been recently
    deleted. For example, `admins@example.com?uid=123456789012345678901`. If
    the group is recovered, this value reverts to `group:{emailid}` and the
    recovered group retains the role in the binding.
 * `domain:{domain}`: The G Suite domain (primary) that represents all the
    users of that domain. For example, `google.com` or `example.com`.
        repeated string members = 2;
        Returns:
        A list containing the members.

      • getMembersCount

        int getMembersCount()
         Specifies the principals requesting access for a Cloud Platform resource.
 `members` can have the following values:
 * `allUsers`: A special identifier that represents anyone who is
    on the internet; with or without a Google account.
 * `allAuthenticatedUsers`: A special identifier that represents anyone
    who is authenticated with a Google account or a service account.
 * `user:{emailid}`: An email address that represents a specific Google
    account. For example, `alice@example.com` .
 * `serviceAccount:{emailid}`: An email address that represents a service
    account. For example, `my-other-app@appspot.gserviceaccount.com`.
 * `group:{emailid}`: An email address that represents a Google group.
    For example, `admins@example.com`.
 * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
    identifier) representing a user that has been recently deleted. For
    example, `alice@example.com?uid=123456789012345678901`. If the user is
    recovered, this value reverts to `user:{emailid}` and the recovered user
    retains the role in the binding.
 * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
    unique identifier) representing a service account that has been recently
    deleted. For example,
    `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
    If the service account is undeleted, this value reverts to
    `serviceAccount:{emailid}` and the undeleted service account retains the
    role in the binding.
 * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
    identifier) representing a Google group that has been recently
    deleted. For example, `admins@example.com?uid=123456789012345678901`. If
    the group is recovered, this value reverts to `group:{emailid}` and the
    recovered group retains the role in the binding.
 * `domain:{domain}`: The G Suite domain (primary) that represents all the
    users of that domain. For example, `google.com` or `example.com`.
        repeated string members = 2;
        Returns:
        The count of members.

      • getMembers

        String getMembers​(int index)
         Specifies the principals requesting access for a Cloud Platform resource.
 `members` can have the following values:
 * `allUsers`: A special identifier that represents anyone who is
    on the internet; with or without a Google account.
 * `allAuthenticatedUsers`: A special identifier that represents anyone
    who is authenticated with a Google account or a service account.
 * `user:{emailid}`: An email address that represents a specific Google
    account. For example, `alice@example.com` .
 * `serviceAccount:{emailid}`: An email address that represents a service
    account. For example, `my-other-app@appspot.gserviceaccount.com`.
 * `group:{emailid}`: An email address that represents a Google group.
    For example, `admins@example.com`.
 * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
    identifier) representing a user that has been recently deleted. For
    example, `alice@example.com?uid=123456789012345678901`. If the user is
    recovered, this value reverts to `user:{emailid}` and the recovered user
    retains the role in the binding.
 * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
    unique identifier) representing a service account that has been recently
    deleted. For example,
    `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
    If the service account is undeleted, this value reverts to
    `serviceAccount:{emailid}` and the undeleted service account retains the
    role in the binding.
 * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
    identifier) representing a Google group that has been recently
    deleted. For example, `admins@example.com?uid=123456789012345678901`. If
    the group is recovered, this value reverts to `group:{emailid}` and the
    recovered group retains the role in the binding.
 * `domain:{domain}`: The G Suite domain (primary) that represents all the
    users of that domain. For example, `google.com` or `example.com`.
        repeated string members = 2;
        Parameters:
        index - The index of the element to return.
        Returns:
        The members at the given index.

      • getMembersBytes

        com.google.protobuf.ByteString getMembersBytes​(int index)
         Specifies the principals requesting access for a Cloud Platform resource.
 `members` can have the following values:
 * `allUsers`: A special identifier that represents anyone who is
    on the internet; with or without a Google account.
 * `allAuthenticatedUsers`: A special identifier that represents anyone
    who is authenticated with a Google account or a service account.
 * `user:{emailid}`: An email address that represents a specific Google
    account. For example, `alice@example.com` .
 * `serviceAccount:{emailid}`: An email address that represents a service
    account. For example, `my-other-app@appspot.gserviceaccount.com`.
 * `group:{emailid}`: An email address that represents a Google group.
    For example, `admins@example.com`.
 * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
    identifier) representing a user that has been recently deleted. For
    example, `alice@example.com?uid=123456789012345678901`. If the user is
    recovered, this value reverts to `user:{emailid}` and the recovered user
    retains the role in the binding.
 * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
    unique identifier) representing a service account that has been recently
    deleted. For example,
    `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
    If the service account is undeleted, this value reverts to
    `serviceAccount:{emailid}` and the undeleted service account retains the
    role in the binding.
 * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
    identifier) representing a Google group that has been recently
    deleted. For example, `admins@example.com?uid=123456789012345678901`. If
    the group is recovered, this value reverts to `group:{emailid}` and the
    recovered group retains the role in the binding.
 * `domain:{domain}`: The G Suite domain (primary) that represents all the
    users of that domain. For example, `google.com` or `example.com`.
        repeated string members = 2;
        Parameters:
        index - The index of the value to return.
        Returns:
        The bytes of the members at the given index.

      • hasCondition

        boolean hasCondition()
         The condition that is associated with this binding.
 If the condition evaluates to `true`, then this binding applies to the
 current request.
 If the condition evaluates to `false`, then this binding does not apply to
 the current request. However, a different role binding might grant the same
 role to one or more of the principals in this binding.
 To learn which resources support conditions in their IAM policies, see the
 [IAM
 documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
        .google.type.Expr condition = 3;
        Returns:
        Whether the condition field is set.

      • getCondition

        Expr getCondition()
         The condition that is associated with this binding.
 If the condition evaluates to `true`, then this binding applies to the
 current request.
 If the condition evaluates to `false`, then this binding does not apply to
 the current request. However, a different role binding might grant the same
 role to one or more of the principals in this binding.
 To learn which resources support conditions in their IAM policies, see the
 [IAM
 documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
        .google.type.Expr condition = 3;
        Returns:
        The condition.

      • getConditionOrBuilder

        ExprOrBuilder getConditionOrBuilder()
         The condition that is associated with this binding.
 If the condition evaluates to `true`, then this binding applies to the
 current request.
 If the condition evaluates to `false`, then this binding does not apply to
 the current request. However, a different role binding might grant the same
 role to one or more of the principals in this binding.
 To learn which resources support conditions in their IAM policies, see the
 [IAM
 documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
        .google.type.Expr condition = 3;