You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
"description": "Perimeter is a boundary that describes application management on a `perimeter_node` (currently limited to an app-enabled folder).",
2210
-
"id": "Perimeter",
2211
-
"properties": {
2212
-
"createTime": {
2213
-
"description": "Output only. Create time.",
2214
-
"format": "google-datetime",
2215
-
"readOnly": true,
2216
-
"type": "string"
2217
-
},
2218
-
"name": {
2219
-
"description": "Identifier. Name of the Perimeter resource.",
2220
-
"type": "string"
2221
-
},
2222
-
"perimeterNode": {
2223
-
"description": "Immutable. Cloud Resource Manager node that determines the perimeter. Only `folders/{folder_number}` is currently supported.",
2224
-
"type": "string"
2225
-
},
2226
-
"state": {
2227
-
"description": "Output only. Perimeter state.",
2228
-
"enum": [
2229
-
"STATE_UNSPECIFIED",
2230
-
"UPDATING",
2231
-
"ACTIVE"
2232
-
],
2233
-
"enumDescriptions": [
2234
-
"Unspecified state.",
2235
-
"The Perimeter is being created or updated.",
2236
-
"The Perimeter is ready."
2237
-
],
2238
-
"readOnly": true,
2239
-
"type": "string"
2240
-
},
2241
-
"updateTime": {
2242
-
"description": "Output only. Update time.",
2243
-
"format": "google-datetime",
2244
-
"readOnly": true,
2245
-
"type": "string"
2246
-
}
2247
-
},
2248
-
"type": "object"
2249
-
},
2250
2183
"Policy": {
2251
2184
"description": "An Identity and Access Management (IAM) policy, which specifies access controls for Google Cloud resources. A `Policy` is a collection of `bindings`. A `binding` binds one or more `members`, or principals, to a single `role`. Principals can be user accounts, service accounts, Google groups, and domains (such as G Suite). A `role` is a named list of permissions; each `role` can be an IAM predefined role or a user-created custom role. For some types of Google Cloud resources, a `binding` can also specify a `condition`, which is a logical expression that allows access to a resource only if the expression evaluates to `true`. A condition can add constraints based on attributes of the request, the resource, or both. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies). **JSON example:** ``` { \"bindings\": [ { \"role\": \"roles/resourcemanager.organizationAdmin\", \"members\": [ \"user:[email protected]\", \"group:[email protected]\", \"domain:google.com\", \"serviceAccount:[email protected]\" ] }, { \"role\": \"roles/resourcemanager.organizationViewer\", \"members\": [ \"user:[email protected]\" ], \"condition\": { \"title\": \"expirable access\", \"description\": \"Does not grant access after Sep 2020\", \"expression\": \"request.time < timestamp('2020-10-01T00:00:00.000Z')\", } } ], \"etag\": \"BwWWja0YfJA=\", \"version\": 3 } ``` **YAML example:** ``` bindings: - members: - user:[email protected] - group:[email protected] - domain:google.com - serviceAccount:[email protected] role: roles/resourcemanager.organizationAdmin - members: - user:[email protected] role: roles/resourcemanager.organizationViewer condition: title: expirable access description: Does not grant access after Sep 2020 expression: request.time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3 ``` For a description of IAM and its features, see the [IAM documentation](https://cloud.google.com/iam/docs/).",
* Perimeter is a boundary that describes application management on a `perimeter_node` (currently limited to an app-enabled folder).
637
-
*/
638
-
exportinterfaceSchema$Perimeter{
639
-
/**
640
-
* Output only. Create time.
641
-
*/
642
-
createTime?: string|null;
643
-
/**
644
-
* Identifier. Name of the Perimeter resource.
645
-
*/
646
-
name?: string|null;
647
-
/**
648
-
* Immutable. Cloud Resource Manager node that determines the perimeter. Only `folders/{folder_number\}` is currently supported.
649
-
*/
650
-
perimeterNode?: string|null;
651
-
/**
652
-
* Output only. Perimeter state.
653
-
*/
654
-
state?: string|null;
655
-
/**
656
-
* Output only. Update time.
657
-
*/
658
-
updateTime?: string|null;
659
-
}
660
635
/**
661
636
* An Identity and Access Management (IAM) policy, which specifies access controls for Google Cloud resources. A `Policy` is a collection of `bindings`. A `binding` binds one or more `members`, or principals, to a single `role`. Principals can be user accounts, service accounts, Google groups, and domains (such as G Suite). A `role` is a named list of permissions; each `role` can be an IAM predefined role or a user-created custom role. For some types of Google Cloud resources, a `binding` can also specify a `condition`, which is a logical expression that allows access to a resource only if the expression evaluates to `true`. A condition can add constraints based on attributes of the request, the resource, or both. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies). **JSON example:** ``` { "bindings": [ { "role": "roles/resourcemanager.organizationAdmin", "members": [ "user:mike@example.com", "group:[email protected]", "domain:google.com", "serviceAccount:[email protected]" ] \}, { "role": "roles/resourcemanager.organizationViewer", "members": [ "user:[email protected]" ], "condition": { "title": "expirable access", "description": "Does not grant access after Sep 2020", "expression": "request.time < timestamp('2020-10-01T00:00:00.000Z')", \} \} ], "etag": "BwWWja0YfJA=", "version": 3 \} ``` **YAML example:** ``` bindings: - members: - user:[email protected] - group:[email protected] - domain:google.com - serviceAccount:[email protected] role: roles/resourcemanager.organizationAdmin - members: - user:[email protected] role: roles/resourcemanager.organizationViewer condition: title: expirable access description: Does not grant access after Sep 2020 expression: request.time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3 ``` For a description of IAM and its features, see the [IAM documentation](https://cloud.google.com/iam/docs/).
0 commit comments