SrSSKJr SSKJr SSKJr SSKJr Sr "SS\R5r "S S \R5r "S S \R5r "S S\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS\R5r"SS \R5r"S!S"\R5r"S#S$\R5r"S%S&\R5r"S'S(\R5r"S)S*\R5r"S+S,\R5r"S-S.\R5r"S/S0\R5r"S1S2\R5r "S3S4\R5r!"S5S6\R5r""S7S8\R5r#"S9S:\R5r$"S;S<\R5r%"S=S>\R5r&"S?S@\R5r'"SASB\R5r("SCSD\R5r)"SESF\R5r*"SGSH\R5r+"SISJ\R5r,"SKSL\R5r-"SMSN\R5r."SOSP\R5r/"SQSR\R5r0"SSST\R5r1"SUSV\R5r2"SWSX\R5r3"SYSZ\R5r4"S[S\\R5r5\Rl"\5S]S^5 \Rn"\5RpS_S`5 \Rn"\5RpSaSb5 gc)daGenerated message classes for iam version v3. Manages identity and access control for Google Cloud resources, including the creation of service accounts, which you can use to authenticate to Google and make API calls. Enabling this API also enables the IAM Service Account Credentials API (iamcredentials.googleapis.com). However, disabling this API doesn't disable the IAM Service Account Credentials API. )absolute_import)messages)encoding) extra_typesiamc>\rSrSrSr\R "SS5rSrg)GoogleIamAdminV1AuditDatazAudit log information specific to Cloud IAM admin APIs. This message is serialized as an `Any` type in the `ServiceData` message of an `AuditLog` message. Fields: permissionDelta: The permission_delta when when creating or updating a Role. (GoogleIamAdminV1AuditDataPermissionDeltaN) __name__ __module__ __qualname____firstlineno____doc__ _messages MessageFieldpermissionDelta__static_attributes__r Clib/googlecloudsdk/generated_clients/apis/iam/v3/iam_v3_messages.pyr r s**+UWXY/rr c\\rSrSrSr\R "SSS9r\R "SSS9rSr g) r "zA PermissionDelta message to record the added_permissions and removed_permissions inside a role. Fields: addedPermissions: Added permissions. removedPermissions: Removed permissions. r Trepeatedr N) rrrrrr StringFieldaddedPermissionsremovedPermissionsrr rrr r "s/**1t< ,,Q>rr c`\rSrSrSr\R "S5r\R"SSSS9r Sr g ) %GoogleIamV3ListPolicyBindingsResponse/aResponse message for ListPolicyBindings method. Fields: nextPageToken: Optional. A token, which can be sent as `page_token` to retrieve the next page. If this field is omitted, there are no subsequent pages. policyBindings: The policy bindings from the specified parent. r GoogleIamV3PolicyBindingrTrr N rrrrrrr nextPageTokenrpolicyBindingsrr rrr"r"//''*-))*DaRVW.rr"c`\rSrSrSr\R "S5r\R"SSSS9r Sr g ) 6GoogleIamV3ListPrincipalAccessBoundaryPoliciesResponse=aUResponse message for ListPrincipalAccessBoundaryPolicies method. Fields: nextPageToken: Optional. A token, which can be sent as `page_token` to retrieve the next page. If this field is omitted, there are no subsequent pages. principalAccessBoundaryPolicies: The principal access boundary policies from the specified parent. r (GoogleIamV3PrincipalAccessBoundaryPolicyrTrr N) rrrrrrrr&rprincipalAccessBoundaryPoliciesrr rrr*r*=s1''*-$-$:$:;eghsw$x!rr*c\rSrSrSr\R "S5r\R "S5r\R "S5r \R"S5r \R "S5r \R "S5r \R "S 5rS rg ) GoogleIamV3OperationMetadataLaRepresents the metadata of the long-running operation. Fields: apiVersion: Output only. API version used to start the operation. createTime: Output only. The time the operation was created. endTime: Output only. The time the operation finished running. requestedCancellation: Output only. Identifies whether the user has requested cancellation of the operation. Operations that have successfully been cancelled have Operation.error value with a google.rpc.Status.code of 1, corresponding to `Code.CANCELLED`. statusMessage: Output only. Human-readable status of the operation, if any. target: Output only. Server-defined resource path for the target of the verb: Output only. Name of the verb executed by the operation. r rr N)rrrrrrr apiVersion createTimeendTime BooleanFieldrequestedCancellation statusMessagetargetverbrr rrr/r/Lsz $$Q'*$$Q'*  ! !! $'#003''*-   #&   q !$rr/cN\rSrSrSr"SS\R 5r\R"S5"SS\R55r \R"SS5r \R"S S 5r\R"S 5r\R"S 5r\R"S 5r\R"S5r\R"S5r\R*"SS5r\R"S5r\R"SS5r\R"S5r\R"S5rSrg)r$fa;IAM policy binding resource. Enums: PolicyKindValueValuesEnum: Immutable. The kind of the policy to attach in this binding. This field must be one of the following: - Left empty (will be automatically set to the policy kind) - The input policy kind Messages: AnnotationsValue: Optional. User-defined annotations. See https://google.aip.dev/148#annotations for more details such as format and size limitations Fields: annotations: Optional. User-defined annotations. See https://google.aip.dev/148#annotations for more details such as format and size limitations condition: Optional. The condition to apply to the policy binding. When set, the `expression` field in the `Expr` must include from 1 to 10 subexpressions, joined by the "||"(Logical OR), "&&"(Logical AND) or "!"(Logical NOT) operators and cannot contain more than 250 characters. The condition is currently only supported when bound to policies of kind principal access boundary. When the bound policy is a principal access boundary policy, the only supported attributes in any subexpression are `principal.type` and `principal.subject`. An example expression is: "principal.type == 'iam.googleapis.com/ServiceAccount'" or "principal.subject == 'bob@example.com'". Allowed operations for `principal.subject`: - `principal.subject == ` - `principal.subject != ` - `principal.subject in []` - `principal.subject.startsWith()` - `principal.subject.endsWith()` Allowed operations for `principal.type`: - `principal.type == ` - `principal.type != ` - `principal.type in []` Supported principal types are Workspace, Workforce Pool, Workload Pool and Service Account. Allowed string must be one of: - iam.googleapis.com/WorkspaceIdentity - iam.googleapis.com/WorkforcePoolIdentity - iam.googleapis.com/WorkloadPoolIdentity - iam.googleapis.com/ServiceAccount createTime: Output only. The time when the policy binding was created. displayName: Optional. The description of the policy binding. Must be less than or equal to 63 characters. etag: Optional. The etag for the policy binding. If this is provided on update, it must match the server's etag. name: Identifier. The name of the policy binding, in the format `{binding_parent/locations/{location}/policyBindings/{policy_binding_id} `. The binding parent is the closest Resource Manager resource (project, folder, or organization) to the binding target. Format: * `projects/{pro ject_id}/locations/{location}/policyBindings/{policy_binding_id}` * `pro jects/{project_number}/locations/{location}/policyBindings/{policy_bindi ng_id}` * `folders/{folder_id}/locations/{location}/policyBindings/{poli cy_binding_id}` * `organizations/{organization_id}/locations/{location}/ policyBindings/{policy_binding_id}` policy: Required. Immutable. The resource name of the policy to be bound. The binding parent and policy must belong to the same organization. policyKind: Immutable. The kind of the policy to attach in this binding. This field must be one of the following: - Left empty (will be automatically set to the policy kind) - The input policy kind policyUid: Output only. The globally unique ID of the policy to be bound. target: Required. Immutable. The full resource name of the resource to which the policy will be bound. Immutable once set. uid: Output only. The globally unique ID of the policy binding. Assigned when the policy binding is created. updateTime: Output only. The time when the policy binding was most recently updated. c \rSrSrSrSrSrSrg)2GoogleIamV3PolicyBinding.PolicyKindValueValuesEnumaLImmutable. The kind of the policy to attach in this binding. This field must be one of the following: - Left empty (will be automatically set to the policy kind) - The input policy kind Values: POLICY_KIND_UNSPECIFIED: Unspecified policy kind; Not a valid state PRINCIPAL_ACCESS_BOUNDARY: Principal access boundary policy kind rr r N)rrrrrPOLICY_KIND_UNSPECIFIEDPRINCIPAL_ACCESS_BOUNDARYrr rrPolicyKindValueValuesEnumrAs  !rrEadditionalPropertiescf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) )GoogleIamV3PolicyBinding.AnnotationsValuea/Optional. User-defined annotations. See https://google.aip.dev/148#annotations for more details such as format and size limitations Messages: AdditionalProperty: An additional property for a AnnotationsValue object. Fields: additionalProperties: Additional properties of type AnnotationsValue c`\rSrSrSr\R "S5r\R "S5rSr g)@ ").. " !!"89Z**Z:Z4&&'91=+$$%5q9)$$Q'*%%a(+   q !$   q !$   #&""#>B*##A&)  ! !"BB G&b!#$$R(*rr$c<\rSrSrSr\R "S5rSrg)rZaThe full resource name of the resource to which the policy will be bound. Immutable once set. Fields: principalSet: Immutable. The full resource name that's used for principal access boundary policy bindings. The principal set must be directly parented by the policy binding's parent or same as the parent if the target is a project, folder, or organization. Examples: * For bindings parented by an organization: * Organization: `//cloudresourcemanager.googleapis.com/organizations/ORGANIZATION_ID` * Workforce Identity: `//iam.googleapis.com/locations/global/workforcePools/WORKFORCE_POOL_ID` * Workspace Identity: `//iam.googleapis.com/locations/global/workspace/WORKSPACE_ID` * For bindings parented by a folder: * Folder: `//cloudresourcemanager.googleapis.com/folders/FOLDER_ID` * For bindings parented by a project: * Project: * `//cloudresourcemanager.googleapis.com/projects/PROJECT_NUMBER` * `//cloudresourcemanager.googleapis.com/projects/PROJECT_ID` * Workload Identity Pool: `//iam.googleapis.com/projects/PROJECT_NUMBER/locations/L OCATION/workloadIdentityPools/WORKLOAD_POOL_ID` r r N) rrrrrrr principalSetrr rrrZrZs.&&q),rrZc\rSrSrSr\R "S5"SS\R55r \R"SS5r \R"S5r \R"SS 5r\R"S 5r\R"S 5r\R"S 5r\R"S 5r\R"S5rSrg)r,aAn IAM principal access boundary policy resource. Messages: AnnotationsValue: Optional. User defined annotations. See https://google.aip.dev/148#annotations for more details such as format and size limitations Fields: annotations: Optional. User defined annotations. See https://google.aip.dev/148#annotations for more details such as format and size limitations createTime: Output only. The time when the principal access boundary policy was created. details: Optional. The details for the principal access boundary policy. displayName: Optional. The description of the principal access boundary policy. Must be less than or equal to 63 characters. etag: Optional. The etag for the principal access boundary. If this is provided on update, it must match the server's etag. name: Identifier. The resource name of the principal access boundary policy. The following format is supported: `organizations/{organization_ id}/locations/{location}/principalAccessBoundaryPolicies/{policy_id}` uid: Output only. The globally unique ID of the principal access boundary policy. updateTime: Output only. The time when the principal access boundary policy was most recently updated. rFcf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) 9GoogleIamV3PrincipalAccessBoundaryPolicy.AnnotationsValueia/Optional. User defined annotations. See https://google.aip.dev/148#annotations for more details such as format and size limitations Messages: AdditionalProperty: An additional property for a AnnotationsValue object. Fields: additionalProperties: Additional properties of type AnnotationsValue c`\rSrSrSr\R "S5r\R "S5rSr g)LGoogleIamV3PrincipalAccessBoundaryPolicy.AnnotationsValue.AdditionalPropertyi!rMr rr NrNr rrrQrs!rRrrQr Trr NrSr rrrUrqrVrrUr r/GoogleIamV3PrincipalAccessBoundaryPolicyDetailsr1r2r3r4r5rXr N)rrrrrrr_rrTrUrr`rr7detailsrbrcrdrirjrr rrr,r,s6 !!"89Z**Z:Z4&&'91=+$$Q'*  " "#TVW X'%%a(+   q !$   q !$a #$$Q'*rr,c`\rSrSrSr\R "S5r\R"SSSS9r Sr g ) rti8aPrincipal access boundary policy details Fields: enforcementVersion: Optional. The version number (for example, `1` or `latest`) that indicates which permissions are able to be blocked by the policy. If empty, the PAB policy version will be set to the most recent version number at the time of the policy's creation. rules: Required. A list of principal access boundary policy rules. The number of rules in a policy is limited to 500. r ,GoogleIamV3PrincipalAccessBoundaryPolicyRulerTrr N) rrrrrrrenforcementVersionrrulesrr rrrtrt8s1 !,,Q/  !OQR]a b%rrtc\rSrSrSr"SS\R 5r\R"S5r \R"SS5r \R"SSS 9r S r g ) rwiHaPrincipal access boundary policy rule that defines the resource boundary. Enums: EffectValueValuesEnum: Required. The access relationship of principals to the resources in this rule. Fields: description: Optional. The description of the principal access boundary policy rule. Must be less than or equal to 256 characters. effect: Required. The access relationship of principals to the resources in this rule. resources: Required. A list of Resource Manager resources. If a resource is listed in the rule, then the rule applies for that resource and its descendants. The number of resources in a policy is limited to 500 across all rules in the policy. The following resource types are supported: * Organizations, such as `//cloudresourcemanager.googleapis.com/organizations/123`. * Folders, such as `//cloudresourcemanager.googleapis.com/folders/123`. * Projects, such as `//cloudresourcemanager.googleapis.com/projects/123` or `//cloudresourcemanager.googleapis.com/projects/my-project-id`. c \rSrSrSrSrSrSrg)BGoogleIamV3PrincipalAccessBoundaryPolicyRule.EffectValueValuesEnumi`zRequired. The access relationship of principals to the resources in this rule. Values: EFFECT_UNSPECIFIED: Effect unspecified. ALLOW: Allows access to the resources in this rule. rr r N)rrrrrEFFECT_UNSPECIFIEDALLOWrr rrEffectValueValuesEnumr|`s Errr rr1Trr N)rrrrrrr^rr descriptionrfeffect resourcesrr rrrwrwHsN. inn %%a(+   6 :&##A5)rrwc`\rSrSrSr\R "S5r\R"SSSS9r Sr g ) >GoogleIamV3SearchPrincipalAccessBoundaryPolicyBindingsResponseipa<Response message for SearchPrincipalAccessBoundaryPolicyBindings rpc. Fields: nextPageToken: Optional. A token, which can be sent as `page_token` to retrieve the next page. If this field is omitted, there are no subsequent pages. policyBindings: The policy bindings that reference the specified policy. r r$rTrr Nr%r rrrrpr(rrc`\rSrSrSr\R "S5r\R"SSSS9r Sr g ) -GoogleIamV3SearchTargetPolicyBindingsResponsei~a(Response message for SearchTargetPolicyBindings method. Fields: nextPageToken: Optional. A token, which can be sent as `page_token` to retrieve the next page. If this field is omitted, there are no subsequent pages. policyBindings: The policy bindings bound to the specified target. r r$rTrr Nr%r rrrr~r(rrcz\rSrSrSr\R "S5"SS\R55r \R "S5"SS\R55r \R"S5r \R"S S 5r\R"SS 5r\R "S 5r\R"SS 5rSrg)GoogleLongrunningOperationiaThis resource represents a long-running operation that is the result of a network API call. Messages: MetadataValue: Service-specific metadata associated with the operation. It typically contains progress information and common metadata such as create time. Some services might not provide such metadata. Any method that returns a long-running operation should document the metadata type, if any. ResponseValue: The normal, successful response of the operation. If the original method returns no data on success, such as `Delete`, the response is `google.protobuf.Empty`. If the original method is standard `Get`/`Create`/`Update`, the response should be the resource. For other methods, the response should have the type `XxxResponse`, where `Xxx` is the original method name. For example, if the original method name is `TakeSnapshot()`, the inferred response type is `TakeSnapshotResponse`. Fields: done: If the value is `false`, it means the operation is still in progress. If `true`, the operation is completed, and either `error` or `response` is available. error: The error result of the operation in case of failure or cancellation. metadata: Service-specific metadata associated with the operation. It typically contains progress information and common metadata such as create time. Some services might not provide such metadata. Any method that returns a long-running operation should document the metadata type, if any. name: The server-assigned name, which is only unique within the same service that originally returns it. If you use the default HTTP mapping, the `name` should be a resource name ending with `operations/{unique_id}`. response: The normal, successful response of the operation. If the original method returns no data on success, such as `Delete`, the response is `google.protobuf.Empty`. If the original method is standard `Get`/`Create`/`Update`, the response should be the resource. For other methods, the response should have the type `XxxResponse`, where `Xxx` is the original method name. For example, if the original method name is `TakeSnapshot()`, the inferred response type is `TakeSnapshotResponse`. rFcf\rSrSrSr"SS\R 5r\R"SSSS9r Sr g ) (GoogleLongrunningOperation.MetadataValueiaService-specific metadata associated with the operation. It typically contains progress information and common metadata such as create time. Some services might not provide such metadata. Any method that returns a long-running operation should document the metadata type, if any. Messages: AdditionalProperty: An additional property for a MetadataValue object. Fields: additionalProperties: Properties of the object. Contains field @type with type URL. cb\rSrSrSr\R "S5r\R"SS5r Sr g);GoogleLongrunningOperation.MetadataValue.AdditionalPropertyizAn additional property for a MetadataValue object. Fields: key: Name of the additional property. value: A extra_types.JsonValue attribute. r extra_types.JsonValuerr N rrrrrrrrOrrPrr rrrQr,   ! !! $c$$% # #Ay/@/@/F/F G(##A&)  T 2&   #&rrc:\rSrSrSr\R "SSS9rSrg)-IamOrganizationsLocationsOperationsGetRequestizmA IamOrganizationsLocationsOperationsGetRequest object. Fields: name: The name of the operation resource. r Trr Nrr rrrrrrrc\rSrSrSr\R "SS5r\R"SSS9r \R"S5r \R"S 5r S r g ) 4IamOrganizationsLocationsPolicyBindingsCreateRequestiaA IamOrganizationsLocationsPolicyBindingsCreateRequest object. Fields: googleIamV3PolicyBinding: A GoogleIamV3PolicyBinding resource to be passed as the request body. parent: Required. The parent resource where this policy binding will be created. The binding parent is the closest Resource Manager resource (project, folder or organization) to the binding target. Format: * `projects/{project_id}/locations/{location}` * `projects/{project_number}/locations/{location}` * `folders/{folder_id}/locations/{location}` * `organizations/{organization_id}/locations/{location}` policyBindingId: Required. The ID to use for the policy binding, which will become the final component of the policy binding's resource name. This value must start with a lowercase letter followed by up to 62 lowercase letters, numbers, hyphens, or dots. Pattern, /a-z{2,62}/. validateOnly: Optional. If set, validate the request and preview the creation, but do not actually post it. r$r rTrr1r2r Nrr rrrrrrrc\rSrSrSr\R "S5r\R "SSS9r\R"S5r Sr g ) 4IamOrganizationsLocationsPolicyBindingsDeleteRequestiaA IamOrganizationsLocationsPolicyBindingsDeleteRequest object. Fields: etag: Optional. The etag of the policy binding. If this is provided, it must match the server's etag. name: Required. The name of the policy binding to delete. Format: * `proje cts/{project_id}/locations/{location}/policyBindings/{policy_binding_id} ` * `projects/{project_number}/locations/{location}/policyBindings/{poli cy_binding_id}` * `folders/{folder_id}/locations/{location}/policyBindin gs/{policy_binding_id}` * `organizations/{organization_id}/locations/{lo cation}/policyBindings/{policy_binding_id}` validateOnly: Optional. If set, validate the request and preview the deletion, but do not actually post it. r rTrr1r Nrr rrrrrrrc:\rSrSrSr\R "SSS9rSrg)1IamOrganizationsLocationsPolicyBindingsGetRequesti1aA IamOrganizationsLocationsPolicyBindingsGetRequest object. Fields: name: Required. The name of the policy binding to retrieve. Format: * `pro jects/{project_id}/locations/{location}/policyBindings/{policy_binding_i d}` * `projects/{project_number}/locations/{location}/policyBindings/{po licy_binding_id}` * `folders/{folder_id}/locations/{location}/policyBind ings/{policy_binding_id}` * `organizations/{organization_id}/locations/{ location}/policyBindings/{policy_binding_id}` r Trr Nrr rrrr1rrrc\rSrSrSr\R "S5r\R"S\RRS9r \R "S5r \R "SSS 9r S rg ) 2IamOrganizationsLocationsPolicyBindingsListRequesti@a#A IamOrganizationsLocationsPolicyBindingsListRequest object. Fields: filter: Optional. An expression for filtering the results of the request. Filter rules are case insensitive. Some eligible fields for filtering are: + `target` + `policy` Some examples of filter queries: * `target:ex*`: The binding target's name starts with "ex". * `target:example`: The binding target's name is `example`. * `policy:example`: The binding policy's name is `example`. pageSize: Optional. The maximum number of policy bindings to return. The service may return fewer than this value. If unspecified, at most 50 policy bindings will be returned. The maximum value is 1000; values above 1000 will be coerced to 1000. pageToken: Optional. A page token, received from a previous `ListPolicyBindings` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `ListPolicyBindings` must match the call that provided the page token. parent: Required. The parent resource, which owns the collection of policy bindings. Format: * `projects/{project_id}/locations/{location}` * `projects/{project_number}/locations/{location}` * `folders/{folder_id}/locations/{location}` * `organizations/{organization_id}/locations/{location}` r rrr1r2Trr Nrr rrrr@rrrc\rSrSrSr\R "SS5r\R"SSS9r \R"S5r \R"S 5r S r g ) 3IamOrganizationsLocationsPolicyBindingsPatchRequesti_aA IamOrganizationsLocationsPolicyBindingsPatchRequest object. Fields: googleIamV3PolicyBinding: A GoogleIamV3PolicyBinding resource to be passed as the request body. name: Identifier. The name of the policy binding, in the format `{binding_parent/locations/{location}/policyBindings/{policy_binding_id} `. The binding parent is the closest Resource Manager resource (project, folder, or organization) to the binding target. Format: * `projects/{pro ject_id}/locations/{location}/policyBindings/{policy_binding_id}` * `pro jects/{project_number}/locations/{location}/policyBindings/{policy_bindi ng_id}` * `folders/{folder_id}/locations/{location}/policyBindings/{poli cy_binding_id}` * `organizations/{organization_id}/locations/{location}/ policyBindings/{policy_binding_id}` updateMask: Optional. The list of fields to update validateOnly: Optional. If set, validate the request and preview the update, but do not actually post it. r$r rTrr1r2r Nrr rrrr_rrrc\rSrSrSr\R "S\RRS9r \R"S5r \R"SSS9r \R"S 5r S rg ) HIamOrganizationsLocationsPolicyBindingsSearchTargetPolicyBindingsRequestiyaXA IamOrganizationsLocationsPolicyBindingsSearchTargetPolicyBindingsRequest object. Fields: pageSize: Optional. The maximum number of policy bindings to return. The service may return fewer than this value. If unspecified, at most 50 policy bindings will be returned. The maximum value is 1000; values above 1000 will be coerced to 1000. pageToken: Optional. A page token, received from a previous `SearchTargetPolicyBindingsRequest` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `SearchTargetPolicyBindingsRequest` must match the call that provided the page token. parent: Required. The parent resource where this search will be performed. This should be the nearest Resource Manager resource (project, folder, or organization) to the target. Format: * `projects/{project_id}/locations/{location}` * `projects/{project_number}/locations/{location}` * `folders/{folder_id}/locations/{location}` * `organizations/{organization_id}/locations/{location}` target: Required. The target resource, which is bound to the policy in the binding. Format: * `//iam.googleapis.com/locations/global/workforcePools/POOL_ID` * `//iam. googleapis.com/projects/PROJECT_NUMBER/locations/global/workloadIdentity Pools/POOL_ID` * `//iam.googleapis.com/locations/global/workspace/WORKSPACE_ID` * `//cloudresourcemanager.googleapis.com/projects/{project_number}` * `//cloudresourcemanager.googleapis.com/folders/{folder_id}` * `//cloudresourcemanager.googleapis.com/organizations/{organization_id}` r rrr1Trr2r Nrr rrrrysZ@ # #Ay/@/@/F/F G(##A&)  T 2&   #&rrc\rSrSrSr\R "SS5r\R"SSS9r \R"S5r \R"S 5r S r g ) EIamOrganizationsLocationsPrincipalAccessBoundaryPoliciesCreateRequestia~A IamOrganizationsLocationsPrincipalAccessBoundaryPoliciesCreateRequest object. Fields: googleIamV3PrincipalAccessBoundaryPolicy: A GoogleIamV3PrincipalAccessBoundaryPolicy resource to be passed as the request body. parent: Required. The parent resource where this principal access boundary policy will be created. Only organizations are supported. Format: `organizations/{organization_id}/locations/{location}` principalAccessBoundaryPolicyId: Required. The ID to use for the principal access boundary policy, which will become the final component of the principal access boundary policy's resource name. This value must start with a lowercase letter followed by up to 62 lowercase letters, numbers, hyphens, or dots. Pattern, /a-z{2,62}/. validateOnly: Optional. If set, validate the request and preview the creation, but do not actually post it. r,r rTrr1r2r N)rrrrrrr(googleIamV3PrincipalAccessBoundaryPolicyrrprincipalAccessBoundaryPolicyIdr9rrr rrrrsQ&.7-C-CDnpq-r*  T 2&$-$9$9!$<!''*,rrc\rSrSrSr\R "S5r\R"S5r \R "SSS9r \R"S5r S r g ) EIamOrganizationsLocationsPrincipalAccessBoundaryPoliciesDeleteRequestiaA IamOrganizationsLocationsPrincipalAccessBoundaryPoliciesDeleteRequest object. Fields: etag: Optional. The etag of the principal access boundary policy. If this is provided, it must match the server's etag. force: Optional. If set to true, the request will force the deletion of the policy even if the policy is referenced in policy bindings. name: Required. The name of the principal access boundary policy to delete. Format: `organizations/{organization_id}/locations/{location}/pr incipalAccessBoundaryPolicies/{principal_access_boundary_policy_id}` validateOnly: Optional. If set, validate the request and preview the deletion, but do not actually post it. r rr1Trr2r N) rrrrrrrrcr9forcerdrrr rrrrsK    q !$   #%   q4 0$''*,rrc:\rSrSrSr\R "SSS9rSrg)BIamOrganizationsLocationsPrincipalAccessBoundaryPoliciesGetRequestia4A IamOrganizationsLocationsPrincipalAccessBoundaryPoliciesGetRequest object. Fields: name: Required. The name of the principal access boundary policy to retrieve. Format: `organizations/{organization_id}/locations/{location}/ principalAccessBoundaryPolicies/{principal_access_boundary_policy_id}` r Trr Nrr rrrrs   q4 0$rrc\rSrSrSr\R "S\RRS9r \R"S5r \R"SSS9r S r g ) CIamOrganizationsLocationsPrincipalAccessBoundaryPoliciesListRequestiahA IamOrganizationsLocationsPrincipalAccessBoundaryPoliciesListRequest object. Fields: pageSize: Optional. The maximum number of principal access boundary policies to return. The service may return fewer than this value. If unspecified, at most 50 principal access boundary policies will be returned. The maximum value is 1000; values above 1000 will be coerced to 1000. pageToken: Optional. A page token, received from a previous `ListPrincipalAccessBoundaryPolicies` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `ListPrincipalAccessBoundaryPolicies` must match the call that provided the page token. parent: Required. The parent resource, which owns the collection of principal access boundary policies. Format: `organizations/{organization_id}/locations/{location}` r rrr1Trr N)rrrrrrrrrrrrrrr rrrrsI& # #Ay/@/@/F/F G(##A&)  T 2&rrc\rSrSrSr\R "SS5r\R"SSS9r \R"S5r \R"S 5r S r g ) DIamOrganizationsLocationsPrincipalAccessBoundaryPoliciesPatchRequestiaeA IamOrganizationsLocationsPrincipalAccessBoundaryPoliciesPatchRequest object. Fields: googleIamV3PrincipalAccessBoundaryPolicy: A GoogleIamV3PrincipalAccessBoundaryPolicy resource to be passed as the request body. name: Identifier. The resource name of the principal access boundary policy. The following format is supported: `organizations/{organization_ id}/locations/{location}/principalAccessBoundaryPolicies/{policy_id}` updateMask: Optional. The list of fields to update validateOnly: Optional. If set, validate the request and preview the update, but do not actually post it. r,r rTrr1r2r N)rrrrrrrrrrdrr9rrr rrrrsP .7-C-CDnpq-r*   q4 0$$$Q'*''*,rrc\rSrSrSr\R "SSS9r\R"S\RRS9r \R "S5r S r g ) SIamOrganizationsLocationsPrincipalAccessBoundaryPoliciesSearchPolicyBindingsRequesti aA IamOrganizationsLocationsPrincipalAccessBoundaryPoliciesSearchPolicyBi ndingsRequest object. Fields: name: Required. The name of the principal access boundary policy. Format: `organizations/{organization_id}/locations/{location}/principalAccessBou ndaryPolicies/{principal_access_boundary_policy_id}` pageSize: Optional. The maximum number of policy bindings to return. The service may return fewer than this value. If unspecified, at most 50 policy bindings will be returned. The maximum value is 1000; values above 1000 will be coerced to 1000. pageToken: Optional. A page token, received from a previous `SearchPrincipalAccessBoundaryPolicyBindingsRequest` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `SearchPrincipalAccessBoundaryPolicyBindingsRequest` must match the call that provided the page token. r Trrrr1r N)rrrrrrrrdrrrrrrr rrrr sI$   q4 0$  # #Ay/@/@/F/F G(##A&)rrc:\rSrSrSr\R "SSS9rSrg)(IamProjectsLocationsOperationsGetRequesti$zhA IamProjectsLocationsOperationsGetRequest object. Fields: name: The name of the operation resource. r Trr Nrr rrrr$rrrc\rSrSrSr\R "SS5r\R"SSS9r \R"S5r \R"S 5r S r g ) /IamProjectsLocationsPolicyBindingsCreateRequesti.aA IamProjectsLocationsPolicyBindingsCreateRequest object. Fields: googleIamV3PolicyBinding: A GoogleIamV3PolicyBinding resource to be passed as the request body. parent: Required. The parent resource where this policy binding will be created. The binding parent is the closest Resource Manager resource (project, folder or organization) to the binding target. Format: * `projects/{project_id}/locations/{location}` * `projects/{project_number}/locations/{location}` * `folders/{folder_id}/locations/{location}` * `organizations/{organization_id}/locations/{location}` policyBindingId: Required. The ID to use for the policy binding, which will become the final component of the policy binding's resource name. This value must start with a lowercase letter followed by up to 62 lowercase letters, numbers, hyphens, or dots. Pattern, /a-z{2,62}/. validateOnly: Optional. If set, validate the request and preview the creation, but do not actually post it. r$r rTrr1r2r Nrr rrrr.rrrc\rSrSrSr\R "S5r\R "SSS9r\R"S5r Sr g ) /IamProjectsLocationsPolicyBindingsDeleteRequestiIaA IamProjectsLocationsPolicyBindingsDeleteRequest object. Fields: etag: Optional. The etag of the policy binding. If this is provided, it must match the server's etag. name: Required. The name of the policy binding to delete. Format: * `proje cts/{project_id}/locations/{location}/policyBindings/{policy_binding_id} ` * `projects/{project_number}/locations/{location}/policyBindings/{poli cy_binding_id}` * `folders/{folder_id}/locations/{location}/policyBindin gs/{policy_binding_id}` * `organizations/{organization_id}/locations/{lo cation}/policyBindings/{policy_binding_id}` validateOnly: Optional. If set, validate the request and preview the deletion, but do not actually post it. r rTrr1r Nrr rrrrIrrrc:\rSrSrSr\R "SSS9rSrg),IamProjectsLocationsPolicyBindingsGetRequesti^aA IamProjectsLocationsPolicyBindingsGetRequest object. Fields: name: Required. The name of the policy binding to retrieve. Format: * `pro jects/{project_id}/locations/{location}/policyBindings/{policy_binding_i d}` * `projects/{project_number}/locations/{location}/policyBindings/{po licy_binding_id}` * `folders/{folder_id}/locations/{location}/policyBind ings/{policy_binding_id}` * `organizations/{organization_id}/locations/{ location}/policyBindings/{policy_binding_id}` r Trr Nrr rrrr^rrrc\rSrSrSr\R "S5r\R"S\RRS9r \R "S5r \R "SSS 9r S rg ) -IamProjectsLocationsPolicyBindingsListRequestimaA IamProjectsLocationsPolicyBindingsListRequest object. Fields: filter: Optional. An expression for filtering the results of the request. Filter rules are case insensitive. Some eligible fields for filtering are: + `target` + `policy` Some examples of filter queries: * `target:ex*`: The binding target's name starts with "ex". * `target:example`: The binding target's name is `example`. * `policy:example`: The binding policy's name is `example`. pageSize: Optional. The maximum number of policy bindings to return. The service may return fewer than this value. If unspecified, at most 50 policy bindings will be returned. The maximum value is 1000; values above 1000 will be coerced to 1000. pageToken: Optional. A page token, received from a previous `ListPolicyBindings` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `ListPolicyBindings` must match the call that provided the page token. parent: Required. The parent resource, which owns the collection of policy bindings. Format: * `projects/{project_id}/locations/{location}` * `projects/{project_number}/locations/{location}` * `folders/{folder_id}/locations/{location}` * `organizations/{organization_id}/locations/{location}` r rrr1r2Trr Nrr rrrrmrrrc\rSrSrSr\R "SS5r\R"SSS9r \R"S5r \R"S 5r S r g ) .IamProjectsLocationsPolicyBindingsPatchRequestiaA IamProjectsLocationsPolicyBindingsPatchRequest object. Fields: googleIamV3PolicyBinding: A GoogleIamV3PolicyBinding resource to be passed as the request body. name: Identifier. The name of the policy binding, in the format `{binding_parent/locations/{location}/policyBindings/{policy_binding_id} `. The binding parent is the closest Resource Manager resource (project, folder, or organization) to the binding target. Format: * `projects/{pro ject_id}/locations/{location}/policyBindings/{policy_binding_id}` * `pro jects/{project_number}/locations/{location}/policyBindings/{policy_bindi ng_id}` * `folders/{folder_id}/locations/{location}/policyBindings/{poli cy_binding_id}` * `organizations/{organization_id}/locations/{location}/ policyBindings/{policy_binding_id}` updateMask: Optional. The list of fields to update validateOnly: Optional. If set, validate the request and preview the update, but do not actually post it. r$r rTrr1r2r Nrr rrrrrrrc\rSrSrSr\R "S\RRS9r \R"S5r \R"SSS9r \R"S 5r S rg ) CIamProjectsLocationsPolicyBindingsSearchTargetPolicyBindingsRequestiaSA IamProjectsLocationsPolicyBindingsSearchTargetPolicyBindingsRequest object. Fields: pageSize: Optional. The maximum number of policy bindings to return. The service may return fewer than this value. If unspecified, at most 50 policy bindings will be returned. The maximum value is 1000; values above 1000 will be coerced to 1000. pageToken: Optional. A page token, received from a previous `SearchTargetPolicyBindingsRequest` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `SearchTargetPolicyBindingsRequest` must match the call that provided the page token. parent: Required. The parent resource where this search will be performed. This should be the nearest Resource Manager resource (project, folder, or organization) to the target. Format: * `projects/{project_id}/locations/{location}` * `projects/{project_number}/locations/{location}` * `folders/{folder_id}/locations/{location}` * `organizations/{organization_id}/locations/{location}` target: Required. The target resource, which is bound to the policy in the binding. Format: * `//iam.googleapis.com/locations/global/workforcePools/POOL_ID` * `//iam. googleapis.com/projects/PROJECT_NUMBER/locations/global/workloadIdentity Pools/POOL_ID` * `//iam.googleapis.com/locations/global/workspace/WORKSPACE_ID` * `//cloudresourcemanager.googleapis.com/projects/{project_number}` * `//cloudresourcemanager.googleapis.com/folders/{folder_id}` * `//cloudresourcemanager.googleapis.com/organizations/{organization_id}` r rrr1Trr2r Nrr rrrrrrrc\rSrSrSr"SS\R 5r"SS\R 5r\R"SS5r \R"S5r \R"SS S S 9r \R"S 5r\R"S 5r\R"S5r\R"S5r\R$"SSS 9r\R"S5r\R"S5r\R"S5r\R"S5rSrg)StandardQueryParametersiaQuery parameters accepted by all methods. Enums: FXgafvValueValuesEnum: V1 error format. AltValueValuesEnum: Data format for response. Fields: f__xgafv: V1 error format. access_token: OAuth access token. alt: Data format for response. callback: JSONP fields: Selector specifying which fields to include in a partial response. key: API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. oauth_token: OAuth 2.0 token for the current user. prettyPrint: Returns response with indentations and line breaks. quotaUser: Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters. trace: A tracing token of the form "token:" to include in api requests. uploadType: Legacy upload protocol for media (e.g. "media", "multipart"). upload_protocol: Upload protocol for media (e.g. "raw", "multipart"). c$\rSrSrSrSrSrSrSrg)*StandardQueryParameters.AltValueValuesEnumizData format for response. Values: json: Responses with Content-Type of application/json media: Media download with context-dependent Content-Type proto: Responses with Content-Type of application/x-protobuf rr rr N) rrrrrjsonmediaprotorr rrAltValueValuesEnumrs D E Errc \rSrSrSrSrSrSrg)-StandardQueryParameters.FXgafvValueValuesEnumizFV1 error format. Values: _1: v1 error format _2: v2 error format rr r N)rrrrr_1_2rr rrFXgafvValueValuesEnumrs B Brrr rr1r)defaultr2r3r4r5rXTrYr[r\r]r N)rrrrrrr^rrrff__xgafvr access_tokenaltcallbackfieldsrO oauth_tokenr9 prettyPrint quotaUsertrace uploadTypeupload_protocolrr rrrrs4 9>>  inn  !8! <(&&q),0!VD#  " "1 %(   #&a #%%a(+&&q$7+##A&)    #%$$R(*))"-/rrr z$.xgafvr1r2N)9r __future__rapitools.base.protorpcliterrapitools.base.pyrrpackagerTr r r"r*r/r$rZr,rtrwrrrrrWrrrrrrrrrrrrrrrrrrrrrrrrrrrrAddCustomJsonFieldMappingAddCustomJsonEnumMappingrr rrrs'<%(  Z 1 1 Z ?y/@/@ ? XI,=,= X yY=N=N y"9#4#4"4s)y00s)l*Y%6%6*6>(y/@/@>(B ci6G6G c %693D3D%6P XYEVEV X XI4E4E Xi8!2!2i8X0%i''0%f!#Y&&!#H1i.?.?1+Y5F5F+6+Y5F5F+* 1)2C2C 1393D3D3>+I4E4E+4#$IZIZ#$L1I4E4E1+9;L;L+6+9;L;L+* 1 8I8I 139J9J3>+):K:K+4$$yO`O`$$N+IL]L]+4+IL]L]+, 1IZIZ 13)J[J[32+9K\K\+,'ZcZkZk'01y/@/@1+i6G6G+6+i6G6G+* 193D3D 13I4E4E3>+Y5F5F+4#$)J[J[#$L<.i//<.~ ""Z4!!114>!!114>r