YSrSSKJr SSKJr SSKJr SSKJr Sr "SS\R5r "S S \R5r "S S \R5r "S S\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS \R5r"S!S"\R5r"S#S$\R5r"S%S&\R5r"S'S(\R5r"S)S*\R5r"S+S,\R5r\R<"\S-S.5 \R>"\R@S/S05 \R>"\R@S1S25 g3)4zGenerated message classes for iam version v2beta. Manages identity and access control for Google Cloud Platform resources, including the creation of service accounts, which you can use to authenticate to Google and make API calls. )absolute_import)messages)encoding) extra_typesiamc>\rSrSrSr\R "SS5rSrg)GoogleIamAdminV1AuditDatazAudit log information specific to Cloud IAM admin APIs. This message is serialized as an `Any` type in the `ServiceData` message of an `AuditLog` message. Fields: permissionDelta: The permission_delta when when creating or updating a Role. (GoogleIamAdminV1AuditDataPermissionDeltaN) __name__ __module__ __qualname____firstlineno____doc__ _messages MessageFieldpermissionDelta__static_attributes__r Klib/googlecloudsdk/generated_clients/apis/iam/v2beta/iam_v2beta_messages.pyr r s**+UWXY/rr c\\rSrSrSr\R "SSS9r\R "SSS9rSr g) r zA PermissionDelta message to record the added_permissions and removed_permissions inside a role. Fields: addedPermissions: Added permissions. removedPermissions: Removed permissions. r Trepeatedr N) rrrrrr StringFieldaddedPermissionsremovedPermissionsrr rrr r s/**1t< ,,Q>rr c\rSrSrSr"SS\R 5r\R"SS5r \R"SS5r \R"S5r \R"S 5rS rg ) GoogleIamV1BindingDelta-a\One delta entry for Binding. Each individual change (only one member in each entry) to a binding will be a separate entry. Enums: ActionValueValuesEnum: The action that was performed on a Binding. Required Fields: action: The action that was performed on a Binding. Required condition: The condition that is associated with this binding. member: A single identity requesting access for a Cloud Platform resource. Follows the same format of Binding.members. Required role: Role that is assigned to `members`. For example, `roles/viewer`, `roles/editor`, or `roles/owner`. Required c$\rSrSrSrSrSrSrSrg)-GoogleIamV1BindingDelta.ActionValueValuesEnum>zThe action that was performed on a Binding. Required Values: ACTION_UNSPECIFIED: Unspecified. ADD: Addition of a Binding. REMOVE: Removal of a Binding. rr rr N) rrrrrACTION_UNSPECIFIEDADDREMOVErr rrActionValueValuesEnumr%>s C Frr*r GoogleTypeExprrr N)rrrrrrEnumr* EnumFieldactionr conditionrmemberrolerr rrr"r"-s_ inn    6 :&$$%5q9)   #&   q !$rr"c>\rSrSrSr\R "SS5rSrg)GoogleIamV1LoggingAuditDataPzAudit log information specific to Cloud IAM. This message is serialized as an `Any` type in the `ServiceData` message of an `AuditLog` message. Fields: policyDelta: Policy delta between the original policy and the newly set policy. GoogleIamV1PolicyDeltar r N) rrrrrrr policyDeltarr rrr5r5Ps&&'?C+rr5c<\rSrSrSr\R "SSSS9rSrg) r7\zrThe difference delta between two policies. Fields: bindingDeltas: The delta for Bindings between two policies. r"r Trr N) rrrrrrr bindingDeltasrr rrr7r7\s (()BAPTU-rr7c\rSrSrSr\R "SS5r\R"SSS9r \R"SSS9r \R"S SS9r \R"S SS9r S r g ) GoogleIamV2betaDenyRulefaIAM Deny Policy Rule. Fields: denialCondition: The condition that is associated with this deny rule. NOTE: A satisfied condition will explicitly deny access for applicable principal, permission, and resource. Different deny rules, including their conditions, are examined independently. Only tag based conditions are supported. deniedPermissions: Specifies the permissions that are explicitly denied by this rule. The denied permission can be specified in the following ways: * a full permission string in the following canonical formats as described in the service specific documentation: -- `{service_FQDN}/{resource}.{verb}`. For example, `iam.googleapis.com/roles.list`. deniedPrincipals: A string attribute. exceptionPermissions: Specifies the permissions that are excluded from the set of denied permissions given by `denied_permissions`. If a permission appears in `denied_permissions` _and_ in `excluded_permissions` then it will _not_ be denied. The excluded permissions can be specified using the same syntax as `denied_permissions`. exceptionPrincipals: Specifies the identities requesting access for a Cloud Platform resource, which are excluded from the deny rule. `exception_principals` can have the following values: * Google and G Suite user accounts: -- `principal://goog/subject/{emailId}`: An email address that represents a specific Google account. For example, `principal://goog/subject/alice@gmail.com`. * Google and G Suite groups: -- `principalSet://goog/group/{groupId}`: An identifier that represents a Google group. For example, `principalSet://goog/group/admins@example.com`. * Service Accounts: -- ` principal://iam.googleapis.com/projects/-/serviceAccounts/{serviceAccoun tId}`: An identifier that represents a service account. For example, `pr incipal://iam.googleapis.com/projects/-/serviceAccounts/sa123@iam.gservi ceaccount.com`. * G Suite Customers: -- `principalSet://goog/cloudIdentityCustomerId/{customerId}`: All of the principals associated with the specified G Suite Customer ID. For example, `principalSet://goog/cloudIdentityCustomerId/C01Abc35`. r+r rTrr,r-r N)rrrrrrrdenialConditionrdeniedPermissionsdeniedPrincipalsexceptionPermissionsexceptionPrincipalsrr rrr=r=fsi$L**+;Q?/++A=**1t<"..q4@!--a$?rr=c`\rSrSrSr\R "S5r\R"SSSS9r Sr g ) #GoogleIamV2betaListPoliciesResponseaResponse message for ListPolicies method. Fields: nextPageToken: A token, which can be sent as `page_token` to retrieve the next page. If this field is omitted, there are no subsequent pages. policies: The collection of policy metadata that are attached on the resource. r GoogleIamV2betaPolicyrTrr N) rrrrrrr nextPageTokenrpoliciesrr rrrFrFs.''*-  # #$;Q N(rrFc\\rSrSrSr\R "S5r\R "S5r\R "S5r \R "S5r \R "S5r \R "S5r \R"S S S S 9r\R "S 5r\R "S5rSrg)rHaRepresents policy data. Fields: createTime: Output only. The time when the `Policy` was created. deleteTime: Output only. The time when the `Policy` was deleted. Empty if the policy is not deleted. displayName: A user-specified opaque description of the `Policy`. Must be less than or equal to 63 characters. etag: An opaque tag indicating the current version of the `Policy`, used for concurrency control. When the `Policy` is returned from `GetPolicy` request, this `etag` indicates the version of the current `Policy` to use when executing a read-modify-write loop. When the `Policy` is used in a `UpdatePolicy` method, use the `etag` value that was returned from a `GetPolicy` request as part of a read-modify-write loop for concurrency control. This field is ignored if used in a `CreatePolicy` request. kind: Output only. The kind of the `Policy`. This is a read only field derived from the policy name. name: Immutable. The resource name of the `Policy`. Takes the form: `policies/{attachment-point}/{kind-plural}/{policy-id}` The attachment point is identified by its URL encoded full resource name, which means that the forward-slash character, '/', must be written as %2F. For example, `policies/cloudresourcemanager.googleapis.com%2Fprojects%2F123/ denypolicies/a-deny-policy`. rules: List of rules that specify the behavior of the `Policy`. The list contains a single kind of rules, that matches the kind specified in the policy name. uid: Immutable. The globally unique ID of the `Policy`. This is a read only field assigned on policy creation. updateTime: Output only. The time when the `Policy` was last updated. r rr,r-r?GoogleIamV2betaPolicyRuleTr r N)rrrrrrr createTime deleteTime displayNameetagkindnamerrulesuid updateTimerr rrrHrHs@$$Q'*$$Q'*%%a(+   q !$   q !$   q !$  !" to include in api requests. uploadType: Legacy upload protocol for media (e.g. "media", "multipart"). upload_protocol: Upload protocol for media (e.g. "raw", "multipart"). c$\rSrSrSrSrSrSrSrg)*StandardQueryParameters.AltValueValuesEnumi zData format for response. Values: json: Responses with Content-Type of application/json media: Media download with context-dependent Content-Type proto: Responses with Content-Type of application/x-protobuf rr rr N) rrrrrjsonmediaprotorr rrAltValueValuesEnumr s D E Errc \rSrSrSrSrSrSrg)-StandardQueryParameters.FXgafvValueValuesEnumizFV1 error format. Values: _1: v1 error format _2: v2 error format rr r N)rrrrr_1_2rr rrFXgafvValueValuesEnumrs B Brrr rr,r)defaultr-r?rMrOrPTrQ r N)rrrrrrr.rrr/f__xgafvr access_tokenaltcallbackfieldsrl oauth_tokenrz prettyPrint quotaUsertrace uploadTypeupload_protocolrr rrrrs4 9>>  inn  !8! <(&&q),0!VD#  " "1 %(   #&a #%%a(+&&q$7+##A&)    #%$$R(*))"-/rrrz$.xgafvr1r2N)!r __future__rapitools.base.protorpcliterrapitools.base.pyrrpackagerqr r r"r5r7r=rFrHr\rNrcrxr+rrrrrrAddCustomJsonFieldMappingAddCustomJsonEnumMappingrr rrrs'<%(  Z 1 1 Z ?y/@/@ ? "i// "F D)"3"3 DVY..V+@i//+@\ O)*;*; O)(I--)(X(Y->->( ) 1 1 )i8!2!2i8X0%i''0%f!#Y&&!#H&Y%6%6&" 1y00 11I--13Y%6%63&1i&7&71<.i//<.~ ""Z4!!114>!!114>r