Package com.google.iam.v1

Interface BindingOrBuilder

All Superinterfaces:
com.google.protobuf.MessageLiteOrBuilder
All Known Implementing Classes:
Binding, Binding.Builder
public interface BindingOrBuilder extends com.google.protobuf.MessageLiteOrBuilder

  • Method Summary

    Modifier and Type
    Method
    Description
    Expr
    getCondition()
    The condition that is associated with this binding.
    String
    getMembers(int index)
    Specifies the principals requesting access for a Google Cloud resource.
    com.google.protobuf.ByteString
    getMembersBytes(int index)
    Specifies the principals requesting access for a Google Cloud resource.
    int
    getMembersCount()
    Specifies the principals requesting access for a Google Cloud resource.
    List<String>
    getMembersList()
    Specifies the principals requesting access for a Google Cloud resource.
    String
    getRole()
    Role that is assigned to the list of `members`, or principals.
    com.google.protobuf.ByteString
    getRoleBytes()
    Role that is assigned to the list of `members`, or principals.
    boolean
    hasCondition()
    The condition that is associated with this binding.

    Methods inherited from interface com.google.protobuf.MessageLiteOrBuilder

    getDefaultInstanceForType, isInitialized

  • Method Details

    • getRole

      String getRole()
       Role that is assigned to the list of `members`, or principals.
 For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
      string role = 1 [json_name = "role"];
      Returns:
      The role.

    • getRoleBytes

      com.google.protobuf.ByteString getRoleBytes()
       Role that is assigned to the list of `members`, or principals.
 For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
      string role = 1 [json_name = "role"];
      Returns:
      The bytes for role.

    • getMembersList

      List<String> getMembersList()
       Specifies the principals requesting access for a Google Cloud resource.
 `members` can have the following values:

 * `allUsers`: A special identifier that represents anyone who is
 on the internet; with or without a Google account.

 * `allAuthenticatedUsers`: A special identifier that represents anyone
 who is authenticated with a Google account or a service account.

 * `user:{emailid}`: An email address that represents a specific Google
 account. For example, `alice@example.com` .


 * `serviceAccount:{emailid}`: An email address that represents a service
 account. For example, `my-other-app@appspot.gserviceaccount.com`.

 * `group:{emailid}`: An email address that represents a Google group.
 For example, `admins@example.com`.

 * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
 identifier) representing a user that has been recently deleted. For
 example, `alice@example.com?uid=123456789012345678901`. If the user is
 recovered, this value reverts to `user:{emailid}` and the recovered user
 retains the role in the binding.

 * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
 unique identifier) representing a service account that has been recently
 deleted. For example,
 `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
 If the service account is undeleted, this value reverts to
 `serviceAccount:{emailid}` and the undeleted service account retains the
 role in the binding.

 * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
 identifier) representing a Google group that has been recently
 deleted. For example, `admins@example.com?uid=123456789012345678901`. If
 the group is recovered, this value reverts to `group:{emailid}` and the
 recovered group retains the role in the binding.


 * `domain:{domain}`: The G Suite domain (primary) that represents all the
 users of that domain. For example, `google.com` or `example.com`.
      repeated string members = 2 [json_name = "members"];
      Returns:
      A list containing the members.

    • getMembersCount

      int getMembersCount()
       Specifies the principals requesting access for a Google Cloud resource.
 `members` can have the following values:

 * `allUsers`: A special identifier that represents anyone who is
 on the internet; with or without a Google account.

 * `allAuthenticatedUsers`: A special identifier that represents anyone
 who is authenticated with a Google account or a service account.

 * `user:{emailid}`: An email address that represents a specific Google
 account. For example, `alice@example.com` .


 * `serviceAccount:{emailid}`: An email address that represents a service
 account. For example, `my-other-app@appspot.gserviceaccount.com`.

 * `group:{emailid}`: An email address that represents a Google group.
 For example, `admins@example.com`.

 * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
 identifier) representing a user that has been recently deleted. For
 example, `alice@example.com?uid=123456789012345678901`. If the user is
 recovered, this value reverts to `user:{emailid}` and the recovered user
 retains the role in the binding.

 * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
 unique identifier) representing a service account that has been recently
 deleted. For example,
 `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
 If the service account is undeleted, this value reverts to
 `serviceAccount:{emailid}` and the undeleted service account retains the
 role in the binding.

 * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
 identifier) representing a Google group that has been recently
 deleted. For example, `admins@example.com?uid=123456789012345678901`. If
 the group is recovered, this value reverts to `group:{emailid}` and the
 recovered group retains the role in the binding.


 * `domain:{domain}`: The G Suite domain (primary) that represents all the
 users of that domain. For example, `google.com` or `example.com`.
      repeated string members = 2 [json_name = "members"];
      Returns:
      The count of members.

    • getMembers

      String getMembers(int index)
       Specifies the principals requesting access for a Google Cloud resource.
 `members` can have the following values:

 * `allUsers`: A special identifier that represents anyone who is
 on the internet; with or without a Google account.

 * `allAuthenticatedUsers`: A special identifier that represents anyone
 who is authenticated with a Google account or a service account.

 * `user:{emailid}`: An email address that represents a specific Google
 account. For example, `alice@example.com` .


 * `serviceAccount:{emailid}`: An email address that represents a service
 account. For example, `my-other-app@appspot.gserviceaccount.com`.

 * `group:{emailid}`: An email address that represents a Google group.
 For example, `admins@example.com`.

 * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
 identifier) representing a user that has been recently deleted. For
 example, `alice@example.com?uid=123456789012345678901`. If the user is
 recovered, this value reverts to `user:{emailid}` and the recovered user
 retains the role in the binding.

 * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
 unique identifier) representing a service account that has been recently
 deleted. For example,
 `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
 If the service account is undeleted, this value reverts to
 `serviceAccount:{emailid}` and the undeleted service account retains the
 role in the binding.

 * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
 identifier) representing a Google group that has been recently
 deleted. For example, `admins@example.com?uid=123456789012345678901`. If
 the group is recovered, this value reverts to `group:{emailid}` and the
 recovered group retains the role in the binding.


 * `domain:{domain}`: The G Suite domain (primary) that represents all the
 users of that domain. For example, `google.com` or `example.com`.
      repeated string members = 2 [json_name = "members"];
      Parameters:
      index - The index of the element to return.
      Returns:
      The members at the given index.

    • getMembersBytes

      com.google.protobuf.ByteString getMembersBytes(int index)
       Specifies the principals requesting access for a Google Cloud resource.
 `members` can have the following values:

 * `allUsers`: A special identifier that represents anyone who is
 on the internet; with or without a Google account.

 * `allAuthenticatedUsers`: A special identifier that represents anyone
 who is authenticated with a Google account or a service account.

 * `user:{emailid}`: An email address that represents a specific Google
 account. For example, `alice@example.com` .


 * `serviceAccount:{emailid}`: An email address that represents a service
 account. For example, `my-other-app@appspot.gserviceaccount.com`.

 * `group:{emailid}`: An email address that represents a Google group.
 For example, `admins@example.com`.

 * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
 identifier) representing a user that has been recently deleted. For
 example, `alice@example.com?uid=123456789012345678901`. If the user is
 recovered, this value reverts to `user:{emailid}` and the recovered user
 retains the role in the binding.

 * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
 unique identifier) representing a service account that has been recently
 deleted. For example,
 `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
 If the service account is undeleted, this value reverts to
 `serviceAccount:{emailid}` and the undeleted service account retains the
 role in the binding.

 * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
 identifier) representing a Google group that has been recently
 deleted. For example, `admins@example.com?uid=123456789012345678901`. If
 the group is recovered, this value reverts to `group:{emailid}` and the
 recovered group retains the role in the binding.


 * `domain:{domain}`: The G Suite domain (primary) that represents all the
 users of that domain. For example, `google.com` or `example.com`.
      repeated string members = 2 [json_name = "members"];
      Parameters:
      index - The index of the element to return.
      Returns:
      The members at the given index.

    • hasCondition

      boolean hasCondition()
       The condition that is associated with this binding.

 If the condition evaluates to `true`, then this binding applies to the
 current request.

 If the condition evaluates to `false`, then this binding does not apply to
 the current request. However, a different role binding might grant the same
 role to one or more of the principals in this binding.

 To learn which resources support conditions in their IAM policies, see the
 [IAM
 documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
      .google.type.Expr condition = 3 [json_name = "condition"];
      Returns:
      Whether the condition field is set.

    • getCondition

      Expr getCondition()
       The condition that is associated with this binding.

 If the condition evaluates to `true`, then this binding applies to the
 current request.

 If the condition evaluates to `false`, then this binding does not apply to
 the current request. However, a different role binding might grant the same
 role to one or more of the principals in this binding.

 To learn which resources support conditions in their IAM policies, see the
 [IAM
 documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
      .google.type.Expr condition = 3 [json_name = "condition"];
      Returns:
      The condition.