Class PolicyDelegationSettings
PolicyDelegationConfig allows google-internal teams to use IAP for apps hosted in a tenant project. Using these settings, the app can delegate permission check to happen against the linked customer project. This is only ever supposed to be used by google internal teams, hence the restriction on the proto.
Implements
Inherited Members
Namespace: Google.Apis.CloudIAP.v1.Data
Assembly: Google.Apis.CloudIAP.v1.dll
Syntax
public class PolicyDelegationSettings : IDirectResponseSchema
Properties
ETag
The ETag of the item.
Declaration
public virtual string ETag { get; set; }
Property Value
Type | Description |
---|---|
string |
IamPermission
Permission to check in IAM.
Declaration
[JsonProperty("iamPermission")]
public virtual string IamPermission { get; set; }
Property Value
Type | Description |
---|---|
string |
IamServiceName
The DNS name of the service (e.g. "resourcemanager.googleapis.com"). This should be the domain name part of the full resource names (see https://aip.dev/122#full-resource-names), which is usually the same as IamServiceSpec.service of the service where the resource type is defined.
Declaration
[JsonProperty("iamServiceName")]
public virtual string IamServiceName { get; set; }
Property Value
Type | Description |
---|---|
string |
PolicyName
Policy name to be checked
Declaration
[JsonProperty("policyName")]
public virtual PolicyName PolicyName { get; set; }
Property Value
Type | Description |
---|---|
PolicyName |
Resource
IAM resource to check permission on
Declaration
[JsonProperty("resource")]
public virtual Resource Resource { get; set; }
Property Value
Type | Description |
---|---|
Resource |