public static final class Policy.ListPolicy.Builder extends GeneratedMessageV3.Builder<Policy.ListPolicy.Builder> implements Policy.ListPolicyOrBuilder
Used in `policy_type` to specify how `list_policy` behaves at this
resource.
`ListPolicy` can define specific values and subtrees of Cloud Resource
Manager resource hierarchy (`Organizations`, `Folders`, `Projects`) that
are allowed or denied by setting the `allowed_values` and `denied_values`
fields. This is achieved by using the `under:` and optional `is:` prefixes.
The `under:` prefix is used to denote resource subtree values.
The `is:` prefix is used to denote specific values, and is required only
if the value contains a ":". Values prefixed with "is:" are treated the
same as values with no prefix.
Ancestry subtrees must be in one of the following formats:
- "projects/<project-id>", e.g. "projects/tokyo-rain-123"
- "folders/<folder-id>", e.g. "folders/1234"
- "organizations/<organization-id>", e.g. "organizations/1234"
The `supports_under` field of the associated `Constraint` defines whether
ancestry prefixes can be used. You can set `allowed_values` and
`denied_values` in the same `Policy` if `all_values` is
`ALL_VALUES_UNSPECIFIED`. `ALLOW` or `DENY` are used to allow or deny all
values. If `all_values` is set to either `ALLOW` or `DENY`,
`allowed_values` and `denied_values` must be unset.
Protobuf type google.cloud.orgpolicy.v1.Policy.ListPolicygetAllFields, getField, getFieldBuilder, getOneofFieldDescriptor, getParentForChildren, getRepeatedField, getRepeatedFieldBuilder, getRepeatedFieldCount, getUnknownFields, hasField, hasOneof, internalGetMapField, internalGetMutableMapField, isClean, markClean, newBuilderForField, onBuilt, onChanged, setUnknownFieldsProto3findInitializationErrors, getInitializationErrorString, internalMergeFrom, mergeDelimitedFrom, mergeDelimitedFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, newUninitializedMessageException, toStringaddAll, addAll, mergeFrom, newUninitializedMessageExceptionequals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, waitfindInitializationErrors, getAllFields, getField, getInitializationErrorString, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, getUnknownFields, hasField, hasOneofmergeFrompublic static final Descriptors.Descriptor getDescriptor()
protected GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
internalGetFieldAccessorTable in class GeneratedMessageV3.Builder<Policy.ListPolicy.Builder>public Policy.ListPolicy.Builder clear()
clear in interface Message.Builderclear in interface MessageLite.Builderclear in class GeneratedMessageV3.Builder<Policy.ListPolicy.Builder>public Descriptors.Descriptor getDescriptorForType()
getDescriptorForType in interface Message.BuildergetDescriptorForType in interface MessageOrBuildergetDescriptorForType in class GeneratedMessageV3.Builder<Policy.ListPolicy.Builder>public Policy.ListPolicy getDefaultInstanceForType()
getDefaultInstanceForType in interface MessageLiteOrBuildergetDefaultInstanceForType in interface MessageOrBuilderpublic Policy.ListPolicy build()
build in interface Message.Builderbuild in interface MessageLite.Builderpublic Policy.ListPolicy buildPartial()
buildPartial in interface Message.BuilderbuildPartial in interface MessageLite.Builderpublic Policy.ListPolicy.Builder clone()
clone in interface Message.Builderclone in interface MessageLite.Builderclone in class GeneratedMessageV3.Builder<Policy.ListPolicy.Builder>public Policy.ListPolicy.Builder setField(Descriptors.FieldDescriptor field, Object value)
setField in interface Message.BuildersetField in class GeneratedMessageV3.Builder<Policy.ListPolicy.Builder>public Policy.ListPolicy.Builder clearField(Descriptors.FieldDescriptor field)
clearField in interface Message.BuilderclearField in class GeneratedMessageV3.Builder<Policy.ListPolicy.Builder>public Policy.ListPolicy.Builder clearOneof(Descriptors.OneofDescriptor oneof)
clearOneof in interface Message.BuilderclearOneof in class GeneratedMessageV3.Builder<Policy.ListPolicy.Builder>public Policy.ListPolicy.Builder setRepeatedField(Descriptors.FieldDescriptor field, int index, Object value)
setRepeatedField in interface Message.BuildersetRepeatedField in class GeneratedMessageV3.Builder<Policy.ListPolicy.Builder>public Policy.ListPolicy.Builder addRepeatedField(Descriptors.FieldDescriptor field, Object value)
addRepeatedField in interface Message.BuilderaddRepeatedField in class GeneratedMessageV3.Builder<Policy.ListPolicy.Builder>public Policy.ListPolicy.Builder mergeFrom(Message other)
mergeFrom in interface Message.BuildermergeFrom in class AbstractMessage.Builder<Policy.ListPolicy.Builder>public Policy.ListPolicy.Builder mergeFrom(Policy.ListPolicy other)
public final boolean isInitialized()
isInitialized in interface MessageLiteOrBuilderisInitialized in class GeneratedMessageV3.Builder<Policy.ListPolicy.Builder>public Policy.ListPolicy.Builder mergeFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry) throws IOException
mergeFrom in interface Message.BuildermergeFrom in interface MessageLite.BuildermergeFrom in class AbstractMessage.Builder<Policy.ListPolicy.Builder>IOExceptionpublic ProtocolStringList getAllowedValuesList()
List of values allowed at this resource. Can only be set if `all_values` is set to `ALL_VALUES_UNSPECIFIED`.
repeated string allowed_values = 1;getAllowedValuesList in interface Policy.ListPolicyOrBuilderpublic int getAllowedValuesCount()
List of values allowed at this resource. Can only be set if `all_values` is set to `ALL_VALUES_UNSPECIFIED`.
repeated string allowed_values = 1;getAllowedValuesCount in interface Policy.ListPolicyOrBuilderpublic String getAllowedValues(int index)
List of values allowed at this resource. Can only be set if `all_values` is set to `ALL_VALUES_UNSPECIFIED`.
repeated string allowed_values = 1;getAllowedValues in interface Policy.ListPolicyOrBuilderindex - The index of the element to return.public ByteString getAllowedValuesBytes(int index)
List of values allowed at this resource. Can only be set if `all_values` is set to `ALL_VALUES_UNSPECIFIED`.
repeated string allowed_values = 1;getAllowedValuesBytes in interface Policy.ListPolicyOrBuilderindex - The index of the value to return.public Policy.ListPolicy.Builder setAllowedValues(int index, String value)
List of values allowed at this resource. Can only be set if `all_values` is set to `ALL_VALUES_UNSPECIFIED`.
repeated string allowed_values = 1;index - The index to set the value at.value - The allowedValues to set.public Policy.ListPolicy.Builder addAllowedValues(String value)
List of values allowed at this resource. Can only be set if `all_values` is set to `ALL_VALUES_UNSPECIFIED`.
repeated string allowed_values = 1;value - The allowedValues to add.public Policy.ListPolicy.Builder addAllAllowedValues(Iterable<String> values)
List of values allowed at this resource. Can only be set if `all_values` is set to `ALL_VALUES_UNSPECIFIED`.
repeated string allowed_values = 1;values - The allowedValues to add.public Policy.ListPolicy.Builder clearAllowedValues()
List of values allowed at this resource. Can only be set if `all_values` is set to `ALL_VALUES_UNSPECIFIED`.
repeated string allowed_values = 1;public Policy.ListPolicy.Builder addAllowedValuesBytes(ByteString value)
List of values allowed at this resource. Can only be set if `all_values` is set to `ALL_VALUES_UNSPECIFIED`.
repeated string allowed_values = 1;value - The bytes of the allowedValues to add.public ProtocolStringList getDeniedValuesList()
List of values denied at this resource. Can only be set if `all_values` is set to `ALL_VALUES_UNSPECIFIED`.
repeated string denied_values = 2;getDeniedValuesList in interface Policy.ListPolicyOrBuilderpublic int getDeniedValuesCount()
List of values denied at this resource. Can only be set if `all_values` is set to `ALL_VALUES_UNSPECIFIED`.
repeated string denied_values = 2;getDeniedValuesCount in interface Policy.ListPolicyOrBuilderpublic String getDeniedValues(int index)
List of values denied at this resource. Can only be set if `all_values` is set to `ALL_VALUES_UNSPECIFIED`.
repeated string denied_values = 2;getDeniedValues in interface Policy.ListPolicyOrBuilderindex - The index of the element to return.public ByteString getDeniedValuesBytes(int index)
List of values denied at this resource. Can only be set if `all_values` is set to `ALL_VALUES_UNSPECIFIED`.
repeated string denied_values = 2;getDeniedValuesBytes in interface Policy.ListPolicyOrBuilderindex - The index of the value to return.public Policy.ListPolicy.Builder setDeniedValues(int index, String value)
List of values denied at this resource. Can only be set if `all_values` is set to `ALL_VALUES_UNSPECIFIED`.
repeated string denied_values = 2;index - The index to set the value at.value - The deniedValues to set.public Policy.ListPolicy.Builder addDeniedValues(String value)
List of values denied at this resource. Can only be set if `all_values` is set to `ALL_VALUES_UNSPECIFIED`.
repeated string denied_values = 2;value - The deniedValues to add.public Policy.ListPolicy.Builder addAllDeniedValues(Iterable<String> values)
List of values denied at this resource. Can only be set if `all_values` is set to `ALL_VALUES_UNSPECIFIED`.
repeated string denied_values = 2;values - The deniedValues to add.public Policy.ListPolicy.Builder clearDeniedValues()
List of values denied at this resource. Can only be set if `all_values` is set to `ALL_VALUES_UNSPECIFIED`.
repeated string denied_values = 2;public Policy.ListPolicy.Builder addDeniedValuesBytes(ByteString value)
List of values denied at this resource. Can only be set if `all_values` is set to `ALL_VALUES_UNSPECIFIED`.
repeated string denied_values = 2;value - The bytes of the deniedValues to add.public int getAllValuesValue()
The policy all_values state.
.google.cloud.orgpolicy.v1.Policy.ListPolicy.AllValues all_values = 3;getAllValuesValue in interface Policy.ListPolicyOrBuilderpublic Policy.ListPolicy.Builder setAllValuesValue(int value)
The policy all_values state.
.google.cloud.orgpolicy.v1.Policy.ListPolicy.AllValues all_values = 3;value - The enum numeric value on the wire for allValues to set.public Policy.ListPolicy.AllValues getAllValues()
The policy all_values state.
.google.cloud.orgpolicy.v1.Policy.ListPolicy.AllValues all_values = 3;getAllValues in interface Policy.ListPolicyOrBuilderpublic Policy.ListPolicy.Builder setAllValues(Policy.ListPolicy.AllValues value)
The policy all_values state.
.google.cloud.orgpolicy.v1.Policy.ListPolicy.AllValues all_values = 3;value - The allValues to set.public Policy.ListPolicy.Builder clearAllValues()
The policy all_values state.
.google.cloud.orgpolicy.v1.Policy.ListPolicy.AllValues all_values = 3;public String getSuggestedValue()
Optional. The Google Cloud Console will try to default to a configuration that matches the value specified in this `Policy`. If `suggested_value` is not set, it will inherit the value specified higher in the hierarchy, unless `inherit_from_parent` is `false`.
string suggested_value = 4;getSuggestedValue in interface Policy.ListPolicyOrBuilderpublic ByteString getSuggestedValueBytes()
Optional. The Google Cloud Console will try to default to a configuration that matches the value specified in this `Policy`. If `suggested_value` is not set, it will inherit the value specified higher in the hierarchy, unless `inherit_from_parent` is `false`.
string suggested_value = 4;getSuggestedValueBytes in interface Policy.ListPolicyOrBuilderpublic Policy.ListPolicy.Builder setSuggestedValue(String value)
Optional. The Google Cloud Console will try to default to a configuration that matches the value specified in this `Policy`. If `suggested_value` is not set, it will inherit the value specified higher in the hierarchy, unless `inherit_from_parent` is `false`.
string suggested_value = 4;value - The suggestedValue to set.public Policy.ListPolicy.Builder clearSuggestedValue()
Optional. The Google Cloud Console will try to default to a configuration that matches the value specified in this `Policy`. If `suggested_value` is not set, it will inherit the value specified higher in the hierarchy, unless `inherit_from_parent` is `false`.
string suggested_value = 4;public Policy.ListPolicy.Builder setSuggestedValueBytes(ByteString value)
Optional. The Google Cloud Console will try to default to a configuration that matches the value specified in this `Policy`. If `suggested_value` is not set, it will inherit the value specified higher in the hierarchy, unless `inherit_from_parent` is `false`.
string suggested_value = 4;value - The bytes for suggestedValue to set.public boolean getInheritFromParent()
Determines the inheritance behavior for this `Policy`.
By default, a `ListPolicy` set at a resource supercedes any `Policy` set
anywhere up the resource hierarchy. However, if `inherit_from_parent` is
set to `true`, then the values from the effective `Policy` of the parent
resource are inherited, meaning the values set in this `Policy` are
added to the values inherited up the hierarchy.
Setting `Policy` hierarchies that inherit both allowed values and denied
values isn't recommended in most circumstances to keep the configuration
simple and understandable. However, it is possible to set a `Policy` with
`allowed_values` set that inherits a `Policy` with `denied_values` set.
In this case, the values that are allowed must be in `allowed_values` and
not present in `denied_values`.
For example, suppose you have a `Constraint`
`constraints/serviceuser.services`, which has a `constraint_type` of
`list_constraint`, and with `constraint_default` set to `ALLOW`.
Suppose that at the Organization level, a `Policy` is applied that
restricts the allowed API activations to {`E1`, `E2`}. Then, if a
`Policy` is applied to a project below the Organization that has
`inherit_from_parent` set to `false` and field all_values set to DENY,
then an attempt to activate any API will be denied.
The following examples demonstrate different possible layerings for
`projects/bar` parented by `organizations/foo`:
Example 1 (no inherited values):
`organizations/foo` has a `Policy` with values:
{allowed_values: "E1" allowed_values:"E2"}
`projects/bar` has `inherit_from_parent` `false` and values:
{allowed_values: "E3" allowed_values: "E4"}
The accepted values at `organizations/foo` are `E1`, `E2`.
The accepted values at `projects/bar` are `E3`, and `E4`.
Example 2 (inherited values):
`organizations/foo` has a `Policy` with values:
{allowed_values: "E1" allowed_values:"E2"}
`projects/bar` has a `Policy` with values:
{value: "E3" value: "E4" inherit_from_parent: true}
The accepted values at `organizations/foo` are `E1`, `E2`.
The accepted values at `projects/bar` are `E1`, `E2`, `E3`, and `E4`.
Example 3 (inheriting both allowed and denied values):
`organizations/foo` has a `Policy` with values:
{allowed_values: "E1" allowed_values: "E2"}
`projects/bar` has a `Policy` with:
{denied_values: "E1"}
The accepted values at `organizations/foo` are `E1`, `E2`.
The value accepted at `projects/bar` is `E2`.
Example 4 (RestoreDefault):
`organizations/foo` has a `Policy` with values:
{allowed_values: "E1" allowed_values:"E2"}
`projects/bar` has a `Policy` with values:
{RestoreDefault: {}}
The accepted values at `organizations/foo` are `E1`, `E2`.
The accepted values at `projects/bar` are either all or none depending on
the value of `constraint_default` (if `ALLOW`, all; if
`DENY`, none).
Example 5 (no policy inherits parent policy):
`organizations/foo` has no `Policy` set.
`projects/bar` has no `Policy` set.
The accepted values at both levels are either all or none depending on
the value of `constraint_default` (if `ALLOW`, all; if
`DENY`, none).
Example 6 (ListConstraint allowing all):
`organizations/foo` has a `Policy` with values:
{allowed_values: "E1" allowed_values: "E2"}
`projects/bar` has a `Policy` with:
{all: ALLOW}
The accepted values at `organizations/foo` are `E1`, E2`.
Any value is accepted at `projects/bar`.
Example 7 (ListConstraint allowing none):
`organizations/foo` has a `Policy` with values:
{allowed_values: "E1" allowed_values: "E2"}
`projects/bar` has a `Policy` with:
{all: DENY}
The accepted values at `organizations/foo` are `E1`, E2`.
No value is accepted at `projects/bar`.
Example 10 (allowed and denied subtrees of Resource Manager hierarchy):
Given the following resource hierarchy
O1->{F1, F2}; F1->{P1}; F2->{P2, P3},
`organizations/foo` has a `Policy` with values:
{allowed_values: "under:organizations/O1"}
`projects/bar` has a `Policy` with:
{allowed_values: "under:projects/P3"}
{denied_values: "under:folders/F2"}
The accepted values at `organizations/foo` are `organizations/O1`,
`folders/F1`, `folders/F2`, `projects/P1`, `projects/P2`,
`projects/P3`.
The accepted values at `projects/bar` are `organizations/O1`,
`folders/F1`, `projects/P1`.
bool inherit_from_parent = 5;getInheritFromParent in interface Policy.ListPolicyOrBuilderpublic Policy.ListPolicy.Builder setInheritFromParent(boolean value)
Determines the inheritance behavior for this `Policy`.
By default, a `ListPolicy` set at a resource supercedes any `Policy` set
anywhere up the resource hierarchy. However, if `inherit_from_parent` is
set to `true`, then the values from the effective `Policy` of the parent
resource are inherited, meaning the values set in this `Policy` are
added to the values inherited up the hierarchy.
Setting `Policy` hierarchies that inherit both allowed values and denied
values isn't recommended in most circumstances to keep the configuration
simple and understandable. However, it is possible to set a `Policy` with
`allowed_values` set that inherits a `Policy` with `denied_values` set.
In this case, the values that are allowed must be in `allowed_values` and
not present in `denied_values`.
For example, suppose you have a `Constraint`
`constraints/serviceuser.services`, which has a `constraint_type` of
`list_constraint`, and with `constraint_default` set to `ALLOW`.
Suppose that at the Organization level, a `Policy` is applied that
restricts the allowed API activations to {`E1`, `E2`}. Then, if a
`Policy` is applied to a project below the Organization that has
`inherit_from_parent` set to `false` and field all_values set to DENY,
then an attempt to activate any API will be denied.
The following examples demonstrate different possible layerings for
`projects/bar` parented by `organizations/foo`:
Example 1 (no inherited values):
`organizations/foo` has a `Policy` with values:
{allowed_values: "E1" allowed_values:"E2"}
`projects/bar` has `inherit_from_parent` `false` and values:
{allowed_values: "E3" allowed_values: "E4"}
The accepted values at `organizations/foo` are `E1`, `E2`.
The accepted values at `projects/bar` are `E3`, and `E4`.
Example 2 (inherited values):
`organizations/foo` has a `Policy` with values:
{allowed_values: "E1" allowed_values:"E2"}
`projects/bar` has a `Policy` with values:
{value: "E3" value: "E4" inherit_from_parent: true}
The accepted values at `organizations/foo` are `E1`, `E2`.
The accepted values at `projects/bar` are `E1`, `E2`, `E3`, and `E4`.
Example 3 (inheriting both allowed and denied values):
`organizations/foo` has a `Policy` with values:
{allowed_values: "E1" allowed_values: "E2"}
`projects/bar` has a `Policy` with:
{denied_values: "E1"}
The accepted values at `organizations/foo` are `E1`, `E2`.
The value accepted at `projects/bar` is `E2`.
Example 4 (RestoreDefault):
`organizations/foo` has a `Policy` with values:
{allowed_values: "E1" allowed_values:"E2"}
`projects/bar` has a `Policy` with values:
{RestoreDefault: {}}
The accepted values at `organizations/foo` are `E1`, `E2`.
The accepted values at `projects/bar` are either all or none depending on
the value of `constraint_default` (if `ALLOW`, all; if
`DENY`, none).
Example 5 (no policy inherits parent policy):
`organizations/foo` has no `Policy` set.
`projects/bar` has no `Policy` set.
The accepted values at both levels are either all or none depending on
the value of `constraint_default` (if `ALLOW`, all; if
`DENY`, none).
Example 6 (ListConstraint allowing all):
`organizations/foo` has a `Policy` with values:
{allowed_values: "E1" allowed_values: "E2"}
`projects/bar` has a `Policy` with:
{all: ALLOW}
The accepted values at `organizations/foo` are `E1`, E2`.
Any value is accepted at `projects/bar`.
Example 7 (ListConstraint allowing none):
`organizations/foo` has a `Policy` with values:
{allowed_values: "E1" allowed_values: "E2"}
`projects/bar` has a `Policy` with:
{all: DENY}
The accepted values at `organizations/foo` are `E1`, E2`.
No value is accepted at `projects/bar`.
Example 10 (allowed and denied subtrees of Resource Manager hierarchy):
Given the following resource hierarchy
O1->{F1, F2}; F1->{P1}; F2->{P2, P3},
`organizations/foo` has a `Policy` with values:
{allowed_values: "under:organizations/O1"}
`projects/bar` has a `Policy` with:
{allowed_values: "under:projects/P3"}
{denied_values: "under:folders/F2"}
The accepted values at `organizations/foo` are `organizations/O1`,
`folders/F1`, `folders/F2`, `projects/P1`, `projects/P2`,
`projects/P3`.
The accepted values at `projects/bar` are `organizations/O1`,
`folders/F1`, `projects/P1`.
bool inherit_from_parent = 5;value - The inheritFromParent to set.public Policy.ListPolicy.Builder clearInheritFromParent()
Determines the inheritance behavior for this `Policy`.
By default, a `ListPolicy` set at a resource supercedes any `Policy` set
anywhere up the resource hierarchy. However, if `inherit_from_parent` is
set to `true`, then the values from the effective `Policy` of the parent
resource are inherited, meaning the values set in this `Policy` are
added to the values inherited up the hierarchy.
Setting `Policy` hierarchies that inherit both allowed values and denied
values isn't recommended in most circumstances to keep the configuration
simple and understandable. However, it is possible to set a `Policy` with
`allowed_values` set that inherits a `Policy` with `denied_values` set.
In this case, the values that are allowed must be in `allowed_values` and
not present in `denied_values`.
For example, suppose you have a `Constraint`
`constraints/serviceuser.services`, which has a `constraint_type` of
`list_constraint`, and with `constraint_default` set to `ALLOW`.
Suppose that at the Organization level, a `Policy` is applied that
restricts the allowed API activations to {`E1`, `E2`}. Then, if a
`Policy` is applied to a project below the Organization that has
`inherit_from_parent` set to `false` and field all_values set to DENY,
then an attempt to activate any API will be denied.
The following examples demonstrate different possible layerings for
`projects/bar` parented by `organizations/foo`:
Example 1 (no inherited values):
`organizations/foo` has a `Policy` with values:
{allowed_values: "E1" allowed_values:"E2"}
`projects/bar` has `inherit_from_parent` `false` and values:
{allowed_values: "E3" allowed_values: "E4"}
The accepted values at `organizations/foo` are `E1`, `E2`.
The accepted values at `projects/bar` are `E3`, and `E4`.
Example 2 (inherited values):
`organizations/foo` has a `Policy` with values:
{allowed_values: "E1" allowed_values:"E2"}
`projects/bar` has a `Policy` with values:
{value: "E3" value: "E4" inherit_from_parent: true}
The accepted values at `organizations/foo` are `E1`, `E2`.
The accepted values at `projects/bar` are `E1`, `E2`, `E3`, and `E4`.
Example 3 (inheriting both allowed and denied values):
`organizations/foo` has a `Policy` with values:
{allowed_values: "E1" allowed_values: "E2"}
`projects/bar` has a `Policy` with:
{denied_values: "E1"}
The accepted values at `organizations/foo` are `E1`, `E2`.
The value accepted at `projects/bar` is `E2`.
Example 4 (RestoreDefault):
`organizations/foo` has a `Policy` with values:
{allowed_values: "E1" allowed_values:"E2"}
`projects/bar` has a `Policy` with values:
{RestoreDefault: {}}
The accepted values at `organizations/foo` are `E1`, `E2`.
The accepted values at `projects/bar` are either all or none depending on
the value of `constraint_default` (if `ALLOW`, all; if
`DENY`, none).
Example 5 (no policy inherits parent policy):
`organizations/foo` has no `Policy` set.
`projects/bar` has no `Policy` set.
The accepted values at both levels are either all or none depending on
the value of `constraint_default` (if `ALLOW`, all; if
`DENY`, none).
Example 6 (ListConstraint allowing all):
`organizations/foo` has a `Policy` with values:
{allowed_values: "E1" allowed_values: "E2"}
`projects/bar` has a `Policy` with:
{all: ALLOW}
The accepted values at `organizations/foo` are `E1`, E2`.
Any value is accepted at `projects/bar`.
Example 7 (ListConstraint allowing none):
`organizations/foo` has a `Policy` with values:
{allowed_values: "E1" allowed_values: "E2"}
`projects/bar` has a `Policy` with:
{all: DENY}
The accepted values at `organizations/foo` are `E1`, E2`.
No value is accepted at `projects/bar`.
Example 10 (allowed and denied subtrees of Resource Manager hierarchy):
Given the following resource hierarchy
O1->{F1, F2}; F1->{P1}; F2->{P2, P3},
`organizations/foo` has a `Policy` with values:
{allowed_values: "under:organizations/O1"}
`projects/bar` has a `Policy` with:
{allowed_values: "under:projects/P3"}
{denied_values: "under:folders/F2"}
The accepted values at `organizations/foo` are `organizations/O1`,
`folders/F1`, `folders/F2`, `projects/P1`, `projects/P2`,
`projects/P3`.
The accepted values at `projects/bar` are `organizations/O1`,
`folders/F1`, `projects/P1`.
bool inherit_from_parent = 5;public final Policy.ListPolicy.Builder setUnknownFields(UnknownFieldSet unknownFields)
setUnknownFields in interface Message.BuildersetUnknownFields in class GeneratedMessageV3.Builder<Policy.ListPolicy.Builder>public final Policy.ListPolicy.Builder mergeUnknownFields(UnknownFieldSet unknownFields)
mergeUnknownFields in interface Message.BuildermergeUnknownFields in class GeneratedMessageV3.Builder<Policy.ListPolicy.Builder>Copyright © 2021 Google LLC. All rights reserved.