1// Copyright 2022 Google LLC 2// 3// Licensed under the Apache License, Version 2.0 (the "License"); 4// you may not use this file except in compliance with the License. 5// You may obtain a copy of the License at 6// 7// http://www.apache.org/licenses/LICENSE-2.0 8// 9// Unless required by applicable law or agreed to in writing, software 10// distributed under the License is distributed on an "AS IS" BASIS, 11// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 12// See the License for the specific language governing permissions and 13// limitations under the License. 14 15syntax = "proto3"; 16 17package google.identity.accesscontextmanager.v1; 18 19import "google/api/field_behavior.proto"; 20import "google/api/resource.proto"; 21 22option csharp_namespace = "Google.Identity.AccessContextManager.V1"; 23option go_package = "cloud.google.com/go/accesscontextmanager/apiv1/accesscontextmanagerpb;accesscontextmanagerpb"; 24option java_multiple_files = true; 25option java_outer_classname = "GcpUserAccessBindingProto"; 26option java_package = "com.google.identity.accesscontextmanager.v1"; 27option objc_class_prefix = "GACM"; 28option php_namespace = "Google\\Identity\\AccessContextManager\\V1"; 29option ruby_package = "Google::Identity::AccessContextManager::V1"; 30 31// Restricts access to Cloud Console and Google Cloud APIs for a set of users 32// using Context-Aware Access. 33message GcpUserAccessBinding { 34 option (google.api.resource) = { 35 type: "accesscontextmanager.googleapis.com/GcpUserAccessBinding" 36 pattern: "organizations/{organization}/gcpUserAccessBindings/{gcp_user_access_binding}" 37 }; 38 39 // Immutable. Assigned by the server during creation. The last segment has an arbitrary 40 // length and has only URI unreserved characters (as defined by 41 // [RFC 3986 Section 2.3](https://tools.ietf.org/html/rfc3986#section-2.3)). 42 // Should not be specified by the client during creation. 43 // Example: "organizations/256/gcpUserAccessBindings/b3-BhcX_Ud5N" 44 string name = 1 [(google.api.field_behavior) = IMMUTABLE]; 45 46 // Required. Immutable. Google Group id whose members are subject to this binding's restrictions. 47 // See "id" in the [G Suite Directory API's Groups resource] 48 // (https://developers.google.com/admin-sdk/directory/v1/reference/groups#resource). 49 // If a group's email address/alias is changed, this resource will continue 50 // to point at the changed group. This field does not accept group email 51 // addresses or aliases. 52 // Example: "01d520gv4vjcrht" 53 string group_key = 2 [ 54 (google.api.field_behavior) = REQUIRED, 55 (google.api.field_behavior) = IMMUTABLE 56 ]; 57 58 // Required. Access level that a user must have to be granted access. Only one access 59 // level is supported, not multiple. This repeated field must have exactly 60 // one element. 61 // Example: "accessPolicies/9522/accessLevels/device_trusted" 62 repeated string access_levels = 3 [ 63 (google.api.field_behavior) = REQUIRED, 64 (google.api.resource_reference) = { 65 type: "accesscontextmanager.googleapis.com/AccessLevel" 66 } 67 ]; 68} 69