Package com.google.iam.v1

Interface BindingOrBuilder

All Superinterfaces:
com.google.protobuf.MessageLiteOrBuilder, com.google.protobuf.MessageOrBuilder
All Known Implementing Classes:
Binding, Binding.Builder
public interface BindingOrBuilder extends com.google.protobuf.MessageOrBuilder

  • Method Summary

    Modifier and Type
    Method
    Description
    Expr
    getCondition()
    The condition that is associated with this binding.
    ExprOrBuilder
    getConditionOrBuilder()
    The condition that is associated with this binding.
    String
    getMembers(int index)
    Specifies the principals requesting access for a Cloud Platform resource.
    com.google.protobuf.ByteString
    getMembersBytes(int index)
    Specifies the principals requesting access for a Cloud Platform resource.
    int
    getMembersCount()
    Specifies the principals requesting access for a Cloud Platform resource.
    List<String>
    getMembersList()
    Specifies the principals requesting access for a Cloud Platform resource.
    String
    getRole()
    Role that is assigned to the list of `members`, or principals.
    com.google.protobuf.ByteString
    getRoleBytes()
    Role that is assigned to the list of `members`, or principals.
    boolean
    hasCondition()
    The condition that is associated with this binding.

    Methods inherited from interface com.google.protobuf.MessageLiteOrBuilder

    isInitialized

    Methods inherited from interface com.google.protobuf.MessageOrBuilder

    findInitializationErrors, getAllFields, getDefaultInstanceForType, getDescriptorForType, getField, getInitializationErrorString, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, getUnknownFields, hasField, hasOneof

  • Method Details

    • getRole

      String getRole()
       Role that is assigned to the list of `members`, or principals.
 For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
      string role = 1;
      Returns:
      The role.

    • getRoleBytes

      com.google.protobuf.ByteString getRoleBytes()
       Role that is assigned to the list of `members`, or principals.
 For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
      string role = 1;
      Returns:
      The bytes for role.

    • getMembersList

      List<String> getMembersList()
       Specifies the principals requesting access for a Cloud Platform resource.
 `members` can have the following values:

 * `allUsers`: A special identifier that represents anyone who is
    on the internet; with or without a Google account.

 * `allAuthenticatedUsers`: A special identifier that represents anyone
    who is authenticated with a Google account or a service account.

 * `user:{emailid}`: An email address that represents a specific Google
    account. For example, `alice@example.com` .


 * `serviceAccount:{emailid}`: An email address that represents a service
    account. For example, `my-other-app@appspot.gserviceaccount.com`.

 * `group:{emailid}`: An email address that represents a Google group.
    For example, `admins@example.com`.

 * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
    identifier) representing a user that has been recently deleted. For
    example, `alice@example.com?uid=123456789012345678901`. If the user is
    recovered, this value reverts to `user:{emailid}` and the recovered user
    retains the role in the binding.

 * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
    unique identifier) representing a service account that has been recently
    deleted. For example,
    `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
    If the service account is undeleted, this value reverts to
    `serviceAccount:{emailid}` and the undeleted service account retains the
    role in the binding.

 * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
    identifier) representing a Google group that has been recently
    deleted. For example, `admins@example.com?uid=123456789012345678901`. If
    the group is recovered, this value reverts to `group:{emailid}` and the
    recovered group retains the role in the binding.


 * `domain:{domain}`: The G Suite domain (primary) that represents all the
    users of that domain. For example, `google.com` or `example.com`.
      repeated string members = 2;
      Returns:
      A list containing the members.

    • getMembersCount

      int getMembersCount()
       Specifies the principals requesting access for a Cloud Platform resource.
 `members` can have the following values:

 * `allUsers`: A special identifier that represents anyone who is
    on the internet; with or without a Google account.

 * `allAuthenticatedUsers`: A special identifier that represents anyone
    who is authenticated with a Google account or a service account.

 * `user:{emailid}`: An email address that represents a specific Google
    account. For example, `alice@example.com` .


 * `serviceAccount:{emailid}`: An email address that represents a service
    account. For example, `my-other-app@appspot.gserviceaccount.com`.

 * `group:{emailid}`: An email address that represents a Google group.
    For example, `admins@example.com`.

 * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
    identifier) representing a user that has been recently deleted. For
    example, `alice@example.com?uid=123456789012345678901`. If the user is
    recovered, this value reverts to `user:{emailid}` and the recovered user
    retains the role in the binding.

 * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
    unique identifier) representing a service account that has been recently
    deleted. For example,
    `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
    If the service account is undeleted, this value reverts to
    `serviceAccount:{emailid}` and the undeleted service account retains the
    role in the binding.

 * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
    identifier) representing a Google group that has been recently
    deleted. For example, `admins@example.com?uid=123456789012345678901`. If
    the group is recovered, this value reverts to `group:{emailid}` and the
    recovered group retains the role in the binding.


 * `domain:{domain}`: The G Suite domain (primary) that represents all the
    users of that domain. For example, `google.com` or `example.com`.
      repeated string members = 2;
      Returns:
      The count of members.

    • getMembers

      String getMembers(int index)
       Specifies the principals requesting access for a Cloud Platform resource.
 `members` can have the following values:

 * `allUsers`: A special identifier that represents anyone who is
    on the internet; with or without a Google account.

 * `allAuthenticatedUsers`: A special identifier that represents anyone
    who is authenticated with a Google account or a service account.

 * `user:{emailid}`: An email address that represents a specific Google
    account. For example, `alice@example.com` .


 * `serviceAccount:{emailid}`: An email address that represents a service
    account. For example, `my-other-app@appspot.gserviceaccount.com`.

 * `group:{emailid}`: An email address that represents a Google group.
    For example, `admins@example.com`.

 * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
    identifier) representing a user that has been recently deleted. For
    example, `alice@example.com?uid=123456789012345678901`. If the user is
    recovered, this value reverts to `user:{emailid}` and the recovered user
    retains the role in the binding.

 * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
    unique identifier) representing a service account that has been recently
    deleted. For example,
    `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
    If the service account is undeleted, this value reverts to
    `serviceAccount:{emailid}` and the undeleted service account retains the
    role in the binding.

 * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
    identifier) representing a Google group that has been recently
    deleted. For example, `admins@example.com?uid=123456789012345678901`. If
    the group is recovered, this value reverts to `group:{emailid}` and the
    recovered group retains the role in the binding.


 * `domain:{domain}`: The G Suite domain (primary) that represents all the
    users of that domain. For example, `google.com` or `example.com`.
      repeated string members = 2;
      Parameters:
      index - The index of the element to return.
      Returns:
      The members at the given index.

    • getMembersBytes

      com.google.protobuf.ByteString getMembersBytes(int index)
       Specifies the principals requesting access for a Cloud Platform resource.
 `members` can have the following values:

 * `allUsers`: A special identifier that represents anyone who is
    on the internet; with or without a Google account.

 * `allAuthenticatedUsers`: A special identifier that represents anyone
    who is authenticated with a Google account or a service account.

 * `user:{emailid}`: An email address that represents a specific Google
    account. For example, `alice@example.com` .


 * `serviceAccount:{emailid}`: An email address that represents a service
    account. For example, `my-other-app@appspot.gserviceaccount.com`.

 * `group:{emailid}`: An email address that represents a Google group.
    For example, `admins@example.com`.

 * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
    identifier) representing a user that has been recently deleted. For
    example, `alice@example.com?uid=123456789012345678901`. If the user is
    recovered, this value reverts to `user:{emailid}` and the recovered user
    retains the role in the binding.

 * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
    unique identifier) representing a service account that has been recently
    deleted. For example,
    `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
    If the service account is undeleted, this value reverts to
    `serviceAccount:{emailid}` and the undeleted service account retains the
    role in the binding.

 * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
    identifier) representing a Google group that has been recently
    deleted. For example, `admins@example.com?uid=123456789012345678901`. If
    the group is recovered, this value reverts to `group:{emailid}` and the
    recovered group retains the role in the binding.


 * `domain:{domain}`: The G Suite domain (primary) that represents all the
    users of that domain. For example, `google.com` or `example.com`.
      repeated string members = 2;
      Parameters:
      index - The index of the value to return.
      Returns:
      The bytes of the members at the given index.

    • hasCondition

      boolean hasCondition()
       The condition that is associated with this binding.

 If the condition evaluates to `true`, then this binding applies to the
 current request.

 If the condition evaluates to `false`, then this binding does not apply to
 the current request. However, a different role binding might grant the same
 role to one or more of the principals in this binding.

 To learn which resources support conditions in their IAM policies, see the
 [IAM
 documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
      .google.type.Expr condition = 3;
      Returns:
      Whether the condition field is set.

    • getCondition

      Expr getCondition()
       The condition that is associated with this binding.

 If the condition evaluates to `true`, then this binding applies to the
 current request.

 If the condition evaluates to `false`, then this binding does not apply to
 the current request. However, a different role binding might grant the same
 role to one or more of the principals in this binding.

 To learn which resources support conditions in their IAM policies, see the
 [IAM
 documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
      .google.type.Expr condition = 3;
      Returns:
      The condition.

    • getConditionOrBuilder

      ExprOrBuilder getConditionOrBuilder()
       The condition that is associated with this binding.

 If the condition evaluates to `true`, then this binding applies to the
 current request.

 If the condition evaluates to `false`, then this binding does not apply to
 the current request. However, a different role binding might grant the same
 role to one or more of the principals in this binding.

 To learn which resources support conditions in their IAM policies, see the
 [IAM
 documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
      .google.type.Expr condition = 3;