com.google.iam.v1

Interface BindingOrBuilder

All Superinterfaces:

com.google.protobuf.MessageLiteOrBuilder, com.google.protobuf.MessageOrBuilder

All Known Implementing Classes:

Binding, Binding.Builder

public interface BindingOrBuilder
extends com.google.protobuf.MessageOrBuilder

Method Summary

Modifier and Type	Method and Description
com.google.type.Expr	getCondition() The condition that is associated with this binding.
com.google.type.ExprOrBuilder	getConditionOrBuilder() The condition that is associated with this binding.
String	getMembers(int index) Specifies the principals requesting access for a Cloud Platform resource.
com.google.protobuf.ByteString	getMembersBytes(int index) Specifies the principals requesting access for a Cloud Platform resource.
int	getMembersCount() Specifies the principals requesting access for a Cloud Platform resource.
List<String>	getMembersList() Specifies the principals requesting access for a Cloud Platform resource.
String	getRole() Role that is assigned to the list of `members`, or principals.
com.google.protobuf.ByteString	getRoleBytes() Role that is assigned to the list of `members`, or principals.
boolean	hasCondition() The condition that is associated with this binding.

Methods inherited from interface com.google.protobuf.MessageOrBuilder

findInitializationErrors, getAllFields, getDefaultInstanceForType, getDescriptorForType, getField, getInitializationErrorString, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, getUnknownFields, hasField, hasOneof

Methods inherited from interface com.google.protobuf.MessageLiteOrBuilder

isInitialized

Method Detail

getRole

String getRole()

 Role that is assigned to the list of `members`, or principals.
 For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
 

string role = 1;

Returns:

The role.

getRoleBytes

com.google.protobuf.ByteString getRoleBytes()

 Role that is assigned to the list of `members`, or principals.
 For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
 

string role = 1;

Returns:

The bytes for role.

getMembersList

List<String> getMembersList()

 Specifies the principals requesting access for a Cloud Platform resource.
 `members` can have the following values:
 * `allUsers`: A special identifier that represents anyone who is
    on the internet; with or without a Google account.
 * `allAuthenticatedUsers`: A special identifier that represents anyone
    who is authenticated with a Google account or a service account.
 * `user:{emailid}`: An email address that represents a specific Google
    account. For example, `alice@example.com` .
 * `serviceAccount:{emailid}`: An email address that represents a service
    account. For example, `my-other-app@appspot.gserviceaccount.com`.
 * `group:{emailid}`: An email address that represents a Google group.
    For example, `admins@example.com`.
 * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
    identifier) representing a user that has been recently deleted. For
    example, `alice@example.com?uid=123456789012345678901`. If the user is
    recovered, this value reverts to `user:{emailid}` and the recovered user
    retains the role in the binding.
 * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
    unique identifier) representing a service account that has been recently
    deleted. For example,
    `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
    If the service account is undeleted, this value reverts to
    `serviceAccount:{emailid}` and the undeleted service account retains the
    role in the binding.
 * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
    identifier) representing a Google group that has been recently
    deleted. For example, `admins@example.com?uid=123456789012345678901`. If
    the group is recovered, this value reverts to `group:{emailid}` and the
    recovered group retains the role in the binding.
 * `domain:{domain}`: The G Suite domain (primary) that represents all the
    users of that domain. For example, `google.com` or `example.com`.
 

repeated string members = 2;

Returns:

A list containing the members.

getMembersCount

int getMembersCount()

 Specifies the principals requesting access for a Cloud Platform resource.
 `members` can have the following values:
 * `allUsers`: A special identifier that represents anyone who is
    on the internet; with or without a Google account.
 * `allAuthenticatedUsers`: A special identifier that represents anyone
    who is authenticated with a Google account or a service account.
 * `user:{emailid}`: An email address that represents a specific Google
    account. For example, `alice@example.com` .
 * `serviceAccount:{emailid}`: An email address that represents a service
    account. For example, `my-other-app@appspot.gserviceaccount.com`.
 * `group:{emailid}`: An email address that represents a Google group.
    For example, `admins@example.com`.
 * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
    identifier) representing a user that has been recently deleted. For
    example, `alice@example.com?uid=123456789012345678901`. If the user is
    recovered, this value reverts to `user:{emailid}` and the recovered user
    retains the role in the binding.
 * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
    unique identifier) representing a service account that has been recently
    deleted. For example,
    `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
    If the service account is undeleted, this value reverts to
    `serviceAccount:{emailid}` and the undeleted service account retains the
    role in the binding.
 * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
    identifier) representing a Google group that has been recently
    deleted. For example, `admins@example.com?uid=123456789012345678901`. If
    the group is recovered, this value reverts to `group:{emailid}` and the
    recovered group retains the role in the binding.
 * `domain:{domain}`: The G Suite domain (primary) that represents all the
    users of that domain. For example, `google.com` or `example.com`.
 

repeated string members = 2;

Returns:

The count of members.

getMembers

String getMembers(int index)

 Specifies the principals requesting access for a Cloud Platform resource.
 `members` can have the following values:
 * `allUsers`: A special identifier that represents anyone who is
    on the internet; with or without a Google account.
 * `allAuthenticatedUsers`: A special identifier that represents anyone
    who is authenticated with a Google account or a service account.
 * `user:{emailid}`: An email address that represents a specific Google
    account. For example, `alice@example.com` .
 * `serviceAccount:{emailid}`: An email address that represents a service
    account. For example, `my-other-app@appspot.gserviceaccount.com`.
 * `group:{emailid}`: An email address that represents a Google group.
    For example, `admins@example.com`.
 * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
    identifier) representing a user that has been recently deleted. For
    example, `alice@example.com?uid=123456789012345678901`. If the user is
    recovered, this value reverts to `user:{emailid}` and the recovered user
    retains the role in the binding.
 * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
    unique identifier) representing a service account that has been recently
    deleted. For example,
    `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
    If the service account is undeleted, this value reverts to
    `serviceAccount:{emailid}` and the undeleted service account retains the
    role in the binding.
 * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
    identifier) representing a Google group that has been recently
    deleted. For example, `admins@example.com?uid=123456789012345678901`. If
    the group is recovered, this value reverts to `group:{emailid}` and the
    recovered group retains the role in the binding.
 * `domain:{domain}`: The G Suite domain (primary) that represents all the
    users of that domain. For example, `google.com` or `example.com`.
 

repeated string members = 2;

Parameters:

index - The index of the element to return.

Returns:

The members at the given index.

getMembersBytes

com.google.protobuf.ByteString getMembersBytes(int index)

 Specifies the principals requesting access for a Cloud Platform resource.
 `members` can have the following values:
 * `allUsers`: A special identifier that represents anyone who is
    on the internet; with or without a Google account.
 * `allAuthenticatedUsers`: A special identifier that represents anyone
    who is authenticated with a Google account or a service account.
 * `user:{emailid}`: An email address that represents a specific Google
    account. For example, `alice@example.com` .
 * `serviceAccount:{emailid}`: An email address that represents a service
    account. For example, `my-other-app@appspot.gserviceaccount.com`.
 * `group:{emailid}`: An email address that represents a Google group.
    For example, `admins@example.com`.
 * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
    identifier) representing a user that has been recently deleted. For
    example, `alice@example.com?uid=123456789012345678901`. If the user is
    recovered, this value reverts to `user:{emailid}` and the recovered user
    retains the role in the binding.
 * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
    unique identifier) representing a service account that has been recently
    deleted. For example,
    `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
    If the service account is undeleted, this value reverts to
    `serviceAccount:{emailid}` and the undeleted service account retains the
    role in the binding.
 * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
    identifier) representing a Google group that has been recently
    deleted. For example, `admins@example.com?uid=123456789012345678901`. If
    the group is recovered, this value reverts to `group:{emailid}` and the
    recovered group retains the role in the binding.
 * `domain:{domain}`: The G Suite domain (primary) that represents all the
    users of that domain. For example, `google.com` or `example.com`.
 

repeated string members = 2;

Parameters:

index - The index of the value to return.

Returns:

The bytes of the members at the given index.

hasCondition

boolean hasCondition()

 The condition that is associated with this binding.
 If the condition evaluates to `true`, then this binding applies to the
 current request.
 If the condition evaluates to `false`, then this binding does not apply to
 the current request. However, a different role binding might grant the same
 role to one or more of the principals in this binding.
 To learn which resources support conditions in their IAM policies, see the
 [IAM
 documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
 

.google.type.Expr condition = 3;

Returns:

Whether the condition field is set.

getCondition

com.google.type.Expr getCondition()

 The condition that is associated with this binding.
 If the condition evaluates to `true`, then this binding applies to the
 current request.
 If the condition evaluates to `false`, then this binding does not apply to
 the current request. However, a different role binding might grant the same
 role to one or more of the principals in this binding.
 To learn which resources support conditions in their IAM policies, see the
 [IAM
 documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
 

.google.type.Expr condition = 3;

Returns:

The condition.

getConditionOrBuilder

com.google.type.ExprOrBuilder getConditionOrBuilder()

 The condition that is associated with this binding.
 If the condition evaluates to `true`, then this binding applies to the
 current request.
 If the condition evaluates to `false`, then this binding does not apply to
 the current request. However, a different role binding might grant the same
 role to one or more of the principals in this binding.
 To learn which resources support conditions in their IAM policies, see the
 [IAM
 documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
 

.google.type.Expr condition = 3;