public static final class IamPolicyAnalysisQuery.Options.Builder extends GeneratedMessageV3.Builder<IamPolicyAnalysisQuery.Options.Builder> implements IamPolicyAnalysisQuery.OptionsOrBuilder
Contains query options.Protobuf type
google.cloud.asset.v1.IamPolicyAnalysisQuery.OptionsgetAllFields, getField, getFieldBuilder, getOneofFieldDescriptor, getParentForChildren, getRepeatedField, getRepeatedFieldBuilder, getRepeatedFieldCount, getUnknownFields, getUnknownFieldSetBuilder, hasField, hasOneof, internalGetMapField, internalGetMutableMapField, isClean, markClean, mergeUnknownLengthDelimitedField, mergeUnknownVarintField, newBuilderForField, onBuilt, onChanged, parseUnknownField, setUnknownFieldSetBuilder, setUnknownFieldsProto3findInitializationErrors, getInitializationErrorString, internalMergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, newUninitializedMessageException, toStringaddAll, addAll, mergeDelimitedFrom, mergeDelimitedFrom, mergeFrom, newUninitializedMessageExceptionequals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, waitfindInitializationErrors, getAllFields, getField, getInitializationErrorString, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, getUnknownFields, hasField, hasOneofmergeDelimitedFrom, mergeDelimitedFrommergeFrompublic static final Descriptors.Descriptor getDescriptor()
protected GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
internalGetFieldAccessorTable in class GeneratedMessageV3.Builder<IamPolicyAnalysisQuery.Options.Builder>public IamPolicyAnalysisQuery.Options.Builder clear()
clear in interface Message.Builderclear in interface MessageLite.Builderclear in class GeneratedMessageV3.Builder<IamPolicyAnalysisQuery.Options.Builder>public Descriptors.Descriptor getDescriptorForType()
getDescriptorForType in interface Message.BuildergetDescriptorForType in interface MessageOrBuildergetDescriptorForType in class GeneratedMessageV3.Builder<IamPolicyAnalysisQuery.Options.Builder>public IamPolicyAnalysisQuery.Options getDefaultInstanceForType()
getDefaultInstanceForType in interface MessageLiteOrBuildergetDefaultInstanceForType in interface MessageOrBuilderpublic IamPolicyAnalysisQuery.Options build()
build in interface Message.Builderbuild in interface MessageLite.Builderpublic IamPolicyAnalysisQuery.Options buildPartial()
buildPartial in interface Message.BuilderbuildPartial in interface MessageLite.Builderpublic IamPolicyAnalysisQuery.Options.Builder clone()
clone in interface Message.Builderclone in interface MessageLite.Builderclone in class GeneratedMessageV3.Builder<IamPolicyAnalysisQuery.Options.Builder>public IamPolicyAnalysisQuery.Options.Builder setField(Descriptors.FieldDescriptor field, Object value)
setField in interface Message.BuildersetField in class GeneratedMessageV3.Builder<IamPolicyAnalysisQuery.Options.Builder>public IamPolicyAnalysisQuery.Options.Builder clearField(Descriptors.FieldDescriptor field)
clearField in interface Message.BuilderclearField in class GeneratedMessageV3.Builder<IamPolicyAnalysisQuery.Options.Builder>public IamPolicyAnalysisQuery.Options.Builder clearOneof(Descriptors.OneofDescriptor oneof)
clearOneof in interface Message.BuilderclearOneof in class GeneratedMessageV3.Builder<IamPolicyAnalysisQuery.Options.Builder>public IamPolicyAnalysisQuery.Options.Builder setRepeatedField(Descriptors.FieldDescriptor field, int index, Object value)
setRepeatedField in interface Message.BuildersetRepeatedField in class GeneratedMessageV3.Builder<IamPolicyAnalysisQuery.Options.Builder>public IamPolicyAnalysisQuery.Options.Builder addRepeatedField(Descriptors.FieldDescriptor field, Object value)
addRepeatedField in interface Message.BuilderaddRepeatedField in class GeneratedMessageV3.Builder<IamPolicyAnalysisQuery.Options.Builder>public IamPolicyAnalysisQuery.Options.Builder mergeFrom(Message other)
mergeFrom in interface Message.BuildermergeFrom in class AbstractMessage.Builder<IamPolicyAnalysisQuery.Options.Builder>public IamPolicyAnalysisQuery.Options.Builder mergeFrom(IamPolicyAnalysisQuery.Options other)
public final boolean isInitialized()
isInitialized in interface MessageLiteOrBuilderisInitialized in class GeneratedMessageV3.Builder<IamPolicyAnalysisQuery.Options.Builder>public IamPolicyAnalysisQuery.Options.Builder mergeFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry) throws IOException
mergeFrom in interface Message.BuildermergeFrom in interface MessageLite.BuildermergeFrom in class AbstractMessage.Builder<IamPolicyAnalysisQuery.Options.Builder>IOExceptionpublic boolean getExpandGroups()
Optional. If true, the identities section of the result will expand any Google groups appearing in an IAM policy binding. If [IamPolicyAnalysisQuery.identity_selector][google.cloud.asset.v1.IamPolicyAnalysisQuery.identity_selector] is specified, the identity in the result will be determined by the selector, and this flag is not allowed to set. If true, the default max expansion per group is 1000 for AssetService.AnalyzeIamPolicy][]. Default is false.
bool expand_groups = 1 [(.google.api.field_behavior) = OPTIONAL];getExpandGroups in interface IamPolicyAnalysisQuery.OptionsOrBuilderpublic IamPolicyAnalysisQuery.Options.Builder setExpandGroups(boolean value)
Optional. If true, the identities section of the result will expand any Google groups appearing in an IAM policy binding. If [IamPolicyAnalysisQuery.identity_selector][google.cloud.asset.v1.IamPolicyAnalysisQuery.identity_selector] is specified, the identity in the result will be determined by the selector, and this flag is not allowed to set. If true, the default max expansion per group is 1000 for AssetService.AnalyzeIamPolicy][]. Default is false.
bool expand_groups = 1 [(.google.api.field_behavior) = OPTIONAL];value - The expandGroups to set.public IamPolicyAnalysisQuery.Options.Builder clearExpandGroups()
Optional. If true, the identities section of the result will expand any Google groups appearing in an IAM policy binding. If [IamPolicyAnalysisQuery.identity_selector][google.cloud.asset.v1.IamPolicyAnalysisQuery.identity_selector] is specified, the identity in the result will be determined by the selector, and this flag is not allowed to set. If true, the default max expansion per group is 1000 for AssetService.AnalyzeIamPolicy][]. Default is false.
bool expand_groups = 1 [(.google.api.field_behavior) = OPTIONAL];public boolean getExpandRoles()
Optional. If true, the access section of result will expand any roles appearing in IAM policy bindings to include their permissions. If [IamPolicyAnalysisQuery.access_selector][google.cloud.asset.v1.IamPolicyAnalysisQuery.access_selector] is specified, the access section of the result will be determined by the selector, and this flag is not allowed to set. Default is false.
bool expand_roles = 2 [(.google.api.field_behavior) = OPTIONAL];getExpandRoles in interface IamPolicyAnalysisQuery.OptionsOrBuilderpublic IamPolicyAnalysisQuery.Options.Builder setExpandRoles(boolean value)
Optional. If true, the access section of result will expand any roles appearing in IAM policy bindings to include their permissions. If [IamPolicyAnalysisQuery.access_selector][google.cloud.asset.v1.IamPolicyAnalysisQuery.access_selector] is specified, the access section of the result will be determined by the selector, and this flag is not allowed to set. Default is false.
bool expand_roles = 2 [(.google.api.field_behavior) = OPTIONAL];value - The expandRoles to set.public IamPolicyAnalysisQuery.Options.Builder clearExpandRoles()
Optional. If true, the access section of result will expand any roles appearing in IAM policy bindings to include their permissions. If [IamPolicyAnalysisQuery.access_selector][google.cloud.asset.v1.IamPolicyAnalysisQuery.access_selector] is specified, the access section of the result will be determined by the selector, and this flag is not allowed to set. Default is false.
bool expand_roles = 2 [(.google.api.field_behavior) = OPTIONAL];public boolean getExpandResources()
Optional. If true and [IamPolicyAnalysisQuery.resource_selector][google.cloud.asset.v1.IamPolicyAnalysisQuery.resource_selector] is not specified, the resource section of the result will expand any resource attached to an IAM policy to include resources lower in the resource hierarchy. For example, if the request analyzes for which resources user A has permission P, and the results include an IAM policy with P on a GCP folder, the results will also include resources in that folder with permission P. If true and [IamPolicyAnalysisQuery.resource_selector][google.cloud.asset.v1.IamPolicyAnalysisQuery.resource_selector] is specified, the resource section of the result will expand the specified resource to include resources lower in the resource hierarchy. Only project or lower resources are supported. Folder and organization resource cannot be used together with this option. For example, if the request analyzes for which users have permission P on a GCP project with this option enabled, the results will include all users who have permission P on that project or any lower resource. If true, the default max expansion per resource is 1000 for AssetService.AnalyzeIamPolicy][] and 100000 for AssetService.AnalyzeIamPolicyLongrunning][]. Default is false.
bool expand_resources = 3 [(.google.api.field_behavior) = OPTIONAL];getExpandResources in interface IamPolicyAnalysisQuery.OptionsOrBuilderpublic IamPolicyAnalysisQuery.Options.Builder setExpandResources(boolean value)
Optional. If true and [IamPolicyAnalysisQuery.resource_selector][google.cloud.asset.v1.IamPolicyAnalysisQuery.resource_selector] is not specified, the resource section of the result will expand any resource attached to an IAM policy to include resources lower in the resource hierarchy. For example, if the request analyzes for which resources user A has permission P, and the results include an IAM policy with P on a GCP folder, the results will also include resources in that folder with permission P. If true and [IamPolicyAnalysisQuery.resource_selector][google.cloud.asset.v1.IamPolicyAnalysisQuery.resource_selector] is specified, the resource section of the result will expand the specified resource to include resources lower in the resource hierarchy. Only project or lower resources are supported. Folder and organization resource cannot be used together with this option. For example, if the request analyzes for which users have permission P on a GCP project with this option enabled, the results will include all users who have permission P on that project or any lower resource. If true, the default max expansion per resource is 1000 for AssetService.AnalyzeIamPolicy][] and 100000 for AssetService.AnalyzeIamPolicyLongrunning][]. Default is false.
bool expand_resources = 3 [(.google.api.field_behavior) = OPTIONAL];value - The expandResources to set.public IamPolicyAnalysisQuery.Options.Builder clearExpandResources()
Optional. If true and [IamPolicyAnalysisQuery.resource_selector][google.cloud.asset.v1.IamPolicyAnalysisQuery.resource_selector] is not specified, the resource section of the result will expand any resource attached to an IAM policy to include resources lower in the resource hierarchy. For example, if the request analyzes for which resources user A has permission P, and the results include an IAM policy with P on a GCP folder, the results will also include resources in that folder with permission P. If true and [IamPolicyAnalysisQuery.resource_selector][google.cloud.asset.v1.IamPolicyAnalysisQuery.resource_selector] is specified, the resource section of the result will expand the specified resource to include resources lower in the resource hierarchy. Only project or lower resources are supported. Folder and organization resource cannot be used together with this option. For example, if the request analyzes for which users have permission P on a GCP project with this option enabled, the results will include all users who have permission P on that project or any lower resource. If true, the default max expansion per resource is 1000 for AssetService.AnalyzeIamPolicy][] and 100000 for AssetService.AnalyzeIamPolicyLongrunning][]. Default is false.
bool expand_resources = 3 [(.google.api.field_behavior) = OPTIONAL];public boolean getOutputResourceEdges()
Optional. If true, the result will output the relevant parent/child relationships between resources. Default is false.
bool output_resource_edges = 4 [(.google.api.field_behavior) = OPTIONAL];getOutputResourceEdges in interface IamPolicyAnalysisQuery.OptionsOrBuilderpublic IamPolicyAnalysisQuery.Options.Builder setOutputResourceEdges(boolean value)
Optional. If true, the result will output the relevant parent/child relationships between resources. Default is false.
bool output_resource_edges = 4 [(.google.api.field_behavior) = OPTIONAL];value - The outputResourceEdges to set.public IamPolicyAnalysisQuery.Options.Builder clearOutputResourceEdges()
Optional. If true, the result will output the relevant parent/child relationships between resources. Default is false.
bool output_resource_edges = 4 [(.google.api.field_behavior) = OPTIONAL];public boolean getOutputGroupEdges()
Optional. If true, the result will output the relevant membership relationships between groups and other groups, and between groups and principals. Default is false.
bool output_group_edges = 5 [(.google.api.field_behavior) = OPTIONAL];getOutputGroupEdges in interface IamPolicyAnalysisQuery.OptionsOrBuilderpublic IamPolicyAnalysisQuery.Options.Builder setOutputGroupEdges(boolean value)
Optional. If true, the result will output the relevant membership relationships between groups and other groups, and between groups and principals. Default is false.
bool output_group_edges = 5 [(.google.api.field_behavior) = OPTIONAL];value - The outputGroupEdges to set.public IamPolicyAnalysisQuery.Options.Builder clearOutputGroupEdges()
Optional. If true, the result will output the relevant membership relationships between groups and other groups, and between groups and principals. Default is false.
bool output_group_edges = 5 [(.google.api.field_behavior) = OPTIONAL];public boolean getAnalyzeServiceAccountImpersonation()
Optional. If true, the response will include access analysis from identities to resources via service account impersonation. This is a very expensive operation, because many derived queries will be executed. We highly recommend you use [AssetService.AnalyzeIamPolicyLongrunning][google.cloud.asset.v1.AssetService.AnalyzeIamPolicyLongrunning] rpc instead. For example, if the request analyzes for which resources user A has permission P, and there's an IAM policy states user A has iam.serviceAccounts.getAccessToken permission to a service account SA, and there's another IAM policy states service account SA has permission P to a GCP folder F, then user A potentially has access to the GCP folder F. And those advanced analysis results will be included in [AnalyzeIamPolicyResponse.service_account_impersonation_analysis][google.cloud.asset.v1.AnalyzeIamPolicyResponse.service_account_impersonation_analysis]. Another example, if the request analyzes for who has permission P to a GCP folder F, and there's an IAM policy states user A has iam.serviceAccounts.actAs permission to a service account SA, and there's another IAM policy states service account SA has permission P to the GCP folder F, then user A potentially has access to the GCP folder F. And those advanced analysis results will be included in [AnalyzeIamPolicyResponse.service_account_impersonation_analysis][google.cloud.asset.v1.AnalyzeIamPolicyResponse.service_account_impersonation_analysis]. Only the following permissions are considered in this analysis: * `iam.serviceAccounts.actAs` * `iam.serviceAccounts.signBlob` * `iam.serviceAccounts.signJwt` * `iam.serviceAccounts.getAccessToken` * `iam.serviceAccounts.getOpenIdToken` * `iam.serviceAccounts.implicitDelegation` Default is false.
bool analyze_service_account_impersonation = 6 [(.google.api.field_behavior) = OPTIONAL];
getAnalyzeServiceAccountImpersonation in interface IamPolicyAnalysisQuery.OptionsOrBuilderpublic IamPolicyAnalysisQuery.Options.Builder setAnalyzeServiceAccountImpersonation(boolean value)
Optional. If true, the response will include access analysis from identities to resources via service account impersonation. This is a very expensive operation, because many derived queries will be executed. We highly recommend you use [AssetService.AnalyzeIamPolicyLongrunning][google.cloud.asset.v1.AssetService.AnalyzeIamPolicyLongrunning] rpc instead. For example, if the request analyzes for which resources user A has permission P, and there's an IAM policy states user A has iam.serviceAccounts.getAccessToken permission to a service account SA, and there's another IAM policy states service account SA has permission P to a GCP folder F, then user A potentially has access to the GCP folder F. And those advanced analysis results will be included in [AnalyzeIamPolicyResponse.service_account_impersonation_analysis][google.cloud.asset.v1.AnalyzeIamPolicyResponse.service_account_impersonation_analysis]. Another example, if the request analyzes for who has permission P to a GCP folder F, and there's an IAM policy states user A has iam.serviceAccounts.actAs permission to a service account SA, and there's another IAM policy states service account SA has permission P to the GCP folder F, then user A potentially has access to the GCP folder F. And those advanced analysis results will be included in [AnalyzeIamPolicyResponse.service_account_impersonation_analysis][google.cloud.asset.v1.AnalyzeIamPolicyResponse.service_account_impersonation_analysis]. Only the following permissions are considered in this analysis: * `iam.serviceAccounts.actAs` * `iam.serviceAccounts.signBlob` * `iam.serviceAccounts.signJwt` * `iam.serviceAccounts.getAccessToken` * `iam.serviceAccounts.getOpenIdToken` * `iam.serviceAccounts.implicitDelegation` Default is false.
bool analyze_service_account_impersonation = 6 [(.google.api.field_behavior) = OPTIONAL];
value - The analyzeServiceAccountImpersonation to set.public IamPolicyAnalysisQuery.Options.Builder clearAnalyzeServiceAccountImpersonation()
Optional. If true, the response will include access analysis from identities to resources via service account impersonation. This is a very expensive operation, because many derived queries will be executed. We highly recommend you use [AssetService.AnalyzeIamPolicyLongrunning][google.cloud.asset.v1.AssetService.AnalyzeIamPolicyLongrunning] rpc instead. For example, if the request analyzes for which resources user A has permission P, and there's an IAM policy states user A has iam.serviceAccounts.getAccessToken permission to a service account SA, and there's another IAM policy states service account SA has permission P to a GCP folder F, then user A potentially has access to the GCP folder F. And those advanced analysis results will be included in [AnalyzeIamPolicyResponse.service_account_impersonation_analysis][google.cloud.asset.v1.AnalyzeIamPolicyResponse.service_account_impersonation_analysis]. Another example, if the request analyzes for who has permission P to a GCP folder F, and there's an IAM policy states user A has iam.serviceAccounts.actAs permission to a service account SA, and there's another IAM policy states service account SA has permission P to the GCP folder F, then user A potentially has access to the GCP folder F. And those advanced analysis results will be included in [AnalyzeIamPolicyResponse.service_account_impersonation_analysis][google.cloud.asset.v1.AnalyzeIamPolicyResponse.service_account_impersonation_analysis]. Only the following permissions are considered in this analysis: * `iam.serviceAccounts.actAs` * `iam.serviceAccounts.signBlob` * `iam.serviceAccounts.signJwt` * `iam.serviceAccounts.getAccessToken` * `iam.serviceAccounts.getOpenIdToken` * `iam.serviceAccounts.implicitDelegation` Default is false.
bool analyze_service_account_impersonation = 6 [(.google.api.field_behavior) = OPTIONAL];
public final IamPolicyAnalysisQuery.Options.Builder setUnknownFields(UnknownFieldSet unknownFields)
setUnknownFields in interface Message.BuildersetUnknownFields in class GeneratedMessageV3.Builder<IamPolicyAnalysisQuery.Options.Builder>public final IamPolicyAnalysisQuery.Options.Builder mergeUnknownFields(UnknownFieldSet unknownFields)
mergeUnknownFields in interface Message.BuildermergeUnknownFields in class GeneratedMessageV3.Builder<IamPolicyAnalysisQuery.Options.Builder>Copyright © 2022 Google LLC. All rights reserved.