1<html><body> 2<style> 3 4body, h1, h2, h3, div, span, p, pre, a { 5 margin: 0; 6 padding: 0; 7 border: 0; 8 font-weight: inherit; 9 font-style: inherit; 10 font-size: 100%; 11 font-family: inherit; 12 vertical-align: baseline; 13} 14 15body { 16 font-size: 13px; 17 padding: 1em; 18} 19 20h1 { 21 font-size: 26px; 22 margin-bottom: 1em; 23} 24 25h2 { 26 font-size: 24px; 27 margin-bottom: 1em; 28} 29 30h3 { 31 font-size: 20px; 32 margin-bottom: 1em; 33 margin-top: 1em; 34} 35 36pre, code { 37 line-height: 1.5; 38 font-family: Monaco, 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', 'Lucida Console', monospace; 39} 40 41pre { 42 margin-top: 0.5em; 43} 44 45h1, h2, h3, p { 46 font-family: Arial, sans serif; 47} 48 49h1, h2, h3 { 50 border-bottom: solid #CCC 1px; 51} 52 53.toc_element { 54 margin-top: 0.5em; 55} 56 57.firstline { 58 margin-left: 2 em; 59} 60 61.method { 62 margin-top: 1em; 63 border: solid 1px #CCC; 64 padding: 1em; 65 background: #EEE; 66} 67 68.details { 69 font-weight: bold; 70 font-size: 14px; 71} 72 73</style> 74 75<h1><a href="servicebroker_v1beta1.html">Service Broker API</a> . <a href="servicebroker_v1beta1.v1beta1.html">v1beta1</a></h1> 76<h2>Instance Methods</h2> 77<p class="toc_element"> 78 <code><a href="#getIamPolicy">getIamPolicy(resource, x__xgafv=None)</a></code></p> 79<p class="firstline">Gets the access control policy for a resource.</p> 80<p class="toc_element"> 81 <code><a href="#setIamPolicy">setIamPolicy(resource, body, x__xgafv=None)</a></code></p> 82<p class="firstline">Sets the access control policy on the specified resource. Replaces any</p> 83<p class="toc_element"> 84 <code><a href="#testIamPermissions">testIamPermissions(resource, body, x__xgafv=None)</a></code></p> 85<p class="firstline">Returns permissions that a caller has on the specified resource.</p> 86<h3>Method Details</h3> 87<div class="method"> 88 <code class="details" id="getIamPolicy">getIamPolicy(resource, x__xgafv=None)</code> 89 <pre>Gets the access control policy for a resource. 90Returns an empty policy if the resource exists and does not have a policy 91set. 92 93Args: 94 resource: string, REQUIRED: The resource for which the policy is being requested. 95See the operation documentation for the appropriate value for this field. (required) 96 x__xgafv: string, V1 error format. 97 Allowed values 98 1 - v1 error format 99 2 - v2 error format 100 101Returns: 102 An object of the form: 103 104 { # Defines an Identity and Access Management (IAM) policy. It is used to 105 # specify access control policies for Cloud Platform resources. 106 # 107 # 108 # A `Policy` consists of a list of `bindings`. A `binding` binds a list of 109 # `members` to a `role`, where the members can be user accounts, Google groups, 110 # Google domains, and service accounts. A `role` is a named list of permissions 111 # defined by IAM. 112 # 113 # **JSON Example** 114 # 115 # { 116 # "bindings": [ 117 # { 118 # "role": "roles/owner", 119 # "members": [ 120 # "user:mike@example.com", 121 # "group:admins@example.com", 122 # "domain:google.com", 123 # "serviceAccount:my-other-app@appspot.gserviceaccount.com" 124 # ] 125 # }, 126 # { 127 # "role": "roles/viewer", 128 # "members": ["user:sean@example.com"] 129 # } 130 # ] 131 # } 132 # 133 # **YAML Example** 134 # 135 # bindings: 136 # - members: 137 # - user:mike@example.com 138 # - group:admins@example.com 139 # - domain:google.com 140 # - serviceAccount:my-other-app@appspot.gserviceaccount.com 141 # role: roles/owner 142 # - members: 143 # - user:sean@example.com 144 # role: roles/viewer 145 # 146 # 147 # For a description of IAM and its features, see the 148 # [IAM developer's guide](https://cloud.google.com/iam/docs). 149 "bindings": [ # Associates a list of `members` to a `role`. 150 # `bindings` with no members will result in an error. 151 { # Associates `members` with a `role`. 152 "role": "A String", # Role that is assigned to `members`. 153 # For example, `roles/viewer`, `roles/editor`, or `roles/owner`. 154 "members": [ # Specifies the identities requesting access for a Cloud Platform resource. 155 # `members` can have the following values: 156 # 157 # * `allUsers`: A special identifier that represents anyone who is 158 # on the internet; with or without a Google account. 159 # 160 # * `allAuthenticatedUsers`: A special identifier that represents anyone 161 # who is authenticated with a Google account or a service account. 162 # 163 # * `user:{emailid}`: An email address that represents a specific Google 164 # account. For example, `alice@gmail.com` . 165 # 166 # 167 # * `serviceAccount:{emailid}`: An email address that represents a service 168 # account. For example, `my-other-app@appspot.gserviceaccount.com`. 169 # 170 # * `group:{emailid}`: An email address that represents a Google group. 171 # For example, `admins@example.com`. 172 # 173 # 174 # * `domain:{domain}`: The G Suite domain (primary) that represents all the 175 # users of that domain. For example, `google.com` or `example.com`. 176 # 177 "A String", 178 ], 179 "condition": { # Represents an expression text. Example: # The condition that is associated with this binding. 180 # NOTE: An unsatisfied condition will not allow user access via current 181 # binding. Different bindings, including their conditions, are examined 182 # independently. 183 # 184 # title: "User account presence" 185 # description: "Determines whether the request has a user account" 186 # expression: "size(request.user) > 0" 187 "location": "A String", # An optional string indicating the location of the expression for error 188 # reporting, e.g. a file name and a position in the file. 189 "expression": "A String", # Textual representation of an expression in 190 # Common Expression Language syntax. 191 # 192 # The application context of the containing message determines which 193 # well-known feature set of CEL is supported. 194 "description": "A String", # An optional description of the expression. This is a longer text which 195 # describes the expression, e.g. when hovered over it in a UI. 196 "title": "A String", # An optional title for the expression, i.e. a short string describing 197 # its purpose. This can be used e.g. in UIs which allow to enter the 198 # expression. 199 }, 200 }, 201 ], 202 "etag": "A String", # `etag` is used for optimistic concurrency control as a way to help 203 # prevent simultaneous updates of a policy from overwriting each other. 204 # It is strongly suggested that systems make use of the `etag` in the 205 # read-modify-write cycle to perform policy updates in order to avoid race 206 # conditions: An `etag` is returned in the response to `getIamPolicy`, and 207 # systems are expected to put that etag in the request to `setIamPolicy` to 208 # ensure that their change will be applied to the same version of the policy. 209 # 210 # If no `etag` is provided in the call to `setIamPolicy`, then the existing 211 # policy is overwritten blindly. 212 "version": 42, # Deprecated. 213 }</pre> 214</div> 215 216<div class="method"> 217 <code class="details" id="setIamPolicy">setIamPolicy(resource, body, x__xgafv=None)</code> 218 <pre>Sets the access control policy on the specified resource. Replaces any 219existing policy. 220 221Args: 222 resource: string, REQUIRED: The resource for which the policy is being specified. 223See the operation documentation for the appropriate value for this field. (required) 224 body: object, The request body. (required) 225 The object takes the form of: 226 227{ # Request message for `SetIamPolicy` method. 228 "policy": { # Defines an Identity and Access Management (IAM) policy. It is used to # REQUIRED: The complete policy to be applied to the `resource`. The size of 229 # the policy is limited to a few 10s of KB. An empty policy is a 230 # valid policy but certain Cloud Platform services (such as Projects) 231 # might reject them. 232 # specify access control policies for Cloud Platform resources. 233 # 234 # 235 # A `Policy` consists of a list of `bindings`. A `binding` binds a list of 236 # `members` to a `role`, where the members can be user accounts, Google groups, 237 # Google domains, and service accounts. A `role` is a named list of permissions 238 # defined by IAM. 239 # 240 # **JSON Example** 241 # 242 # { 243 # "bindings": [ 244 # { 245 # "role": "roles/owner", 246 # "members": [ 247 # "user:mike@example.com", 248 # "group:admins@example.com", 249 # "domain:google.com", 250 # "serviceAccount:my-other-app@appspot.gserviceaccount.com" 251 # ] 252 # }, 253 # { 254 # "role": "roles/viewer", 255 # "members": ["user:sean@example.com"] 256 # } 257 # ] 258 # } 259 # 260 # **YAML Example** 261 # 262 # bindings: 263 # - members: 264 # - user:mike@example.com 265 # - group:admins@example.com 266 # - domain:google.com 267 # - serviceAccount:my-other-app@appspot.gserviceaccount.com 268 # role: roles/owner 269 # - members: 270 # - user:sean@example.com 271 # role: roles/viewer 272 # 273 # 274 # For a description of IAM and its features, see the 275 # [IAM developer's guide](https://cloud.google.com/iam/docs). 276 "bindings": [ # Associates a list of `members` to a `role`. 277 # `bindings` with no members will result in an error. 278 { # Associates `members` with a `role`. 279 "role": "A String", # Role that is assigned to `members`. 280 # For example, `roles/viewer`, `roles/editor`, or `roles/owner`. 281 "members": [ # Specifies the identities requesting access for a Cloud Platform resource. 282 # `members` can have the following values: 283 # 284 # * `allUsers`: A special identifier that represents anyone who is 285 # on the internet; with or without a Google account. 286 # 287 # * `allAuthenticatedUsers`: A special identifier that represents anyone 288 # who is authenticated with a Google account or a service account. 289 # 290 # * `user:{emailid}`: An email address that represents a specific Google 291 # account. For example, `alice@gmail.com` . 292 # 293 # 294 # * `serviceAccount:{emailid}`: An email address that represents a service 295 # account. For example, `my-other-app@appspot.gserviceaccount.com`. 296 # 297 # * `group:{emailid}`: An email address that represents a Google group. 298 # For example, `admins@example.com`. 299 # 300 # 301 # * `domain:{domain}`: The G Suite domain (primary) that represents all the 302 # users of that domain. For example, `google.com` or `example.com`. 303 # 304 "A String", 305 ], 306 "condition": { # Represents an expression text. Example: # The condition that is associated with this binding. 307 # NOTE: An unsatisfied condition will not allow user access via current 308 # binding. Different bindings, including their conditions, are examined 309 # independently. 310 # 311 # title: "User account presence" 312 # description: "Determines whether the request has a user account" 313 # expression: "size(request.user) > 0" 314 "location": "A String", # An optional string indicating the location of the expression for error 315 # reporting, e.g. a file name and a position in the file. 316 "expression": "A String", # Textual representation of an expression in 317 # Common Expression Language syntax. 318 # 319 # The application context of the containing message determines which 320 # well-known feature set of CEL is supported. 321 "description": "A String", # An optional description of the expression. This is a longer text which 322 # describes the expression, e.g. when hovered over it in a UI. 323 "title": "A String", # An optional title for the expression, i.e. a short string describing 324 # its purpose. This can be used e.g. in UIs which allow to enter the 325 # expression. 326 }, 327 }, 328 ], 329 "etag": "A String", # `etag` is used for optimistic concurrency control as a way to help 330 # prevent simultaneous updates of a policy from overwriting each other. 331 # It is strongly suggested that systems make use of the `etag` in the 332 # read-modify-write cycle to perform policy updates in order to avoid race 333 # conditions: An `etag` is returned in the response to `getIamPolicy`, and 334 # systems are expected to put that etag in the request to `setIamPolicy` to 335 # ensure that their change will be applied to the same version of the policy. 336 # 337 # If no `etag` is provided in the call to `setIamPolicy`, then the existing 338 # policy is overwritten blindly. 339 "version": 42, # Deprecated. 340 }, 341 } 342 343 x__xgafv: string, V1 error format. 344 Allowed values 345 1 - v1 error format 346 2 - v2 error format 347 348Returns: 349 An object of the form: 350 351 { # Defines an Identity and Access Management (IAM) policy. It is used to 352 # specify access control policies for Cloud Platform resources. 353 # 354 # 355 # A `Policy` consists of a list of `bindings`. A `binding` binds a list of 356 # `members` to a `role`, where the members can be user accounts, Google groups, 357 # Google domains, and service accounts. A `role` is a named list of permissions 358 # defined by IAM. 359 # 360 # **JSON Example** 361 # 362 # { 363 # "bindings": [ 364 # { 365 # "role": "roles/owner", 366 # "members": [ 367 # "user:mike@example.com", 368 # "group:admins@example.com", 369 # "domain:google.com", 370 # "serviceAccount:my-other-app@appspot.gserviceaccount.com" 371 # ] 372 # }, 373 # { 374 # "role": "roles/viewer", 375 # "members": ["user:sean@example.com"] 376 # } 377 # ] 378 # } 379 # 380 # **YAML Example** 381 # 382 # bindings: 383 # - members: 384 # - user:mike@example.com 385 # - group:admins@example.com 386 # - domain:google.com 387 # - serviceAccount:my-other-app@appspot.gserviceaccount.com 388 # role: roles/owner 389 # - members: 390 # - user:sean@example.com 391 # role: roles/viewer 392 # 393 # 394 # For a description of IAM and its features, see the 395 # [IAM developer's guide](https://cloud.google.com/iam/docs). 396 "bindings": [ # Associates a list of `members` to a `role`. 397 # `bindings` with no members will result in an error. 398 { # Associates `members` with a `role`. 399 "role": "A String", # Role that is assigned to `members`. 400 # For example, `roles/viewer`, `roles/editor`, or `roles/owner`. 401 "members": [ # Specifies the identities requesting access for a Cloud Platform resource. 402 # `members` can have the following values: 403 # 404 # * `allUsers`: A special identifier that represents anyone who is 405 # on the internet; with or without a Google account. 406 # 407 # * `allAuthenticatedUsers`: A special identifier that represents anyone 408 # who is authenticated with a Google account or a service account. 409 # 410 # * `user:{emailid}`: An email address that represents a specific Google 411 # account. For example, `alice@gmail.com` . 412 # 413 # 414 # * `serviceAccount:{emailid}`: An email address that represents a service 415 # account. For example, `my-other-app@appspot.gserviceaccount.com`. 416 # 417 # * `group:{emailid}`: An email address that represents a Google group. 418 # For example, `admins@example.com`. 419 # 420 # 421 # * `domain:{domain}`: The G Suite domain (primary) that represents all the 422 # users of that domain. For example, `google.com` or `example.com`. 423 # 424 "A String", 425 ], 426 "condition": { # Represents an expression text. Example: # The condition that is associated with this binding. 427 # NOTE: An unsatisfied condition will not allow user access via current 428 # binding. Different bindings, including their conditions, are examined 429 # independently. 430 # 431 # title: "User account presence" 432 # description: "Determines whether the request has a user account" 433 # expression: "size(request.user) > 0" 434 "location": "A String", # An optional string indicating the location of the expression for error 435 # reporting, e.g. a file name and a position in the file. 436 "expression": "A String", # Textual representation of an expression in 437 # Common Expression Language syntax. 438 # 439 # The application context of the containing message determines which 440 # well-known feature set of CEL is supported. 441 "description": "A String", # An optional description of the expression. This is a longer text which 442 # describes the expression, e.g. when hovered over it in a UI. 443 "title": "A String", # An optional title for the expression, i.e. a short string describing 444 # its purpose. This can be used e.g. in UIs which allow to enter the 445 # expression. 446 }, 447 }, 448 ], 449 "etag": "A String", # `etag` is used for optimistic concurrency control as a way to help 450 # prevent simultaneous updates of a policy from overwriting each other. 451 # It is strongly suggested that systems make use of the `etag` in the 452 # read-modify-write cycle to perform policy updates in order to avoid race 453 # conditions: An `etag` is returned in the response to `getIamPolicy`, and 454 # systems are expected to put that etag in the request to `setIamPolicy` to 455 # ensure that their change will be applied to the same version of the policy. 456 # 457 # If no `etag` is provided in the call to `setIamPolicy`, then the existing 458 # policy is overwritten blindly. 459 "version": 42, # Deprecated. 460 }</pre> 461</div> 462 463<div class="method"> 464 <code class="details" id="testIamPermissions">testIamPermissions(resource, body, x__xgafv=None)</code> 465 <pre>Returns permissions that a caller has on the specified resource. 466If the resource does not exist, this will return an empty set of 467permissions, not a NOT_FOUND error. 468 469Note: This operation is designed to be used for building permission-aware 470UIs and command-line tools, not for authorization checking. This operation 471may "fail open" without warning. 472 473Args: 474 resource: string, REQUIRED: The resource for which the policy detail is being requested. 475See the operation documentation for the appropriate value for this field. (required) 476 body: object, The request body. (required) 477 The object takes the form of: 478 479{ # Request message for `TestIamPermissions` method. 480 "permissions": [ # The set of permissions to check for the `resource`. Permissions with 481 # wildcards (such as '*' or 'storage.*') are not allowed. For more 482 # information see 483 # [IAM Overview](https://cloud.google.com/iam/docs/overview#permissions). 484 "A String", 485 ], 486 } 487 488 x__xgafv: string, V1 error format. 489 Allowed values 490 1 - v1 error format 491 2 - v2 error format 492 493Returns: 494 An object of the form: 495 496 { # Response message for `TestIamPermissions` method. 497 "permissions": [ # A subset of `TestPermissionsRequest.permissions` that the caller is 498 # allowed. 499 "A String", 500 ], 501 }</pre> 502</div> 503 504</body></html>