As of January 1, 2020 this library no longer supports Python 2 on the latest released version. Library versions released prior to that date will continue to be available. For more information please visit Python 2 support on Google Cloud.

AccessApproval

class google.cloud.accessapproval_v1.services.access_approval.AccessApprovalAsyncClient(*, credentials: typing.Optional[google.auth.credentials.Credentials] = None, transport: typing.Optional[typing.Union[str, google.cloud.accessapproval_v1.services.access_approval.transports.base.AccessApprovalTransport, typing.Callable[[...], google.cloud.accessapproval_v1.services.access_approval.transports.base.AccessApprovalTransport]]] = 'grpc_asyncio', client_options: typing.Optional[google.api_core.client_options.ClientOptions] = None, client_info: google.api_core.gapic_v1.client_info.ClientInfo = <google.api_core.gapic_v1.client_info.ClientInfo object>)[source]

This API allows a customer to manage accesses to cloud resources by Google personnel. It defines the following resource model:

  • The API has a collection of [ApprovalRequest][google.cloud.accessapproval.v1.ApprovalRequest] resources, named approvalRequests/{approval_request}

  • The API has top-level settings per Project/Folder/Organization, named accessApprovalSettings

The service also periodically emails a list of recipients, defined at the Project/Folder/Organization level in the accessApprovalSettings, when there is a pending ApprovalRequest for them to act on. The ApprovalRequests can also optionally be published to a Pub/Sub topic owned by the customer (contact support if you would like to enable Pub/Sub notifications).

ApprovalRequests can be approved or dismissed. Google personnel can only access the indicated resource or resources if the request is approved (subject to some exclusions: https://cloud.google.com/access-approval/docs/overview#exclusions).

Note: Using Access Approval functionality will mean that Google may not be able to meet the SLAs for your chosen products, as any support response times may be dramatically increased. As such the SLAs do not apply to any service disruption to the extent impacted by Customer’s use of Access Approval. Do not enable Access Approval for projects where you may require high service availability and rapid response by Google Cloud Support.

After a request is approved or dismissed, no further action may be taken on it. Requests with the requested_expiration in the past or with no activity for 14 days are considered dismissed. When an approval expires, the request is considered dismissed.

If a request is not approved or dismissed, we call it pending.

Instantiates the access approval async client.

Parameters

  • credentials (Optional[google.auth.credentials.Credentials]) – The authorization credentials to attach to requests. These credentials identify the application to the service; if none are specified, the client will attempt to ascertain the credentials from the environment.

  • transport (Optional[Union[str,AccessApprovalTransport,Callable[..., AccessApprovalTransport]]]) – The transport to use, or a Callable that constructs and returns a new transport to use. If a Callable is given, it will be called with the same set of initialization arguments as used in the AccessApprovalTransport constructor. If set to None, a transport is chosen automatically.

  • client_options (Optional[Union[google.api_core.client_options.ClientOptions, dict]]) –

    Custom options for the client.

    1. The api_endpoint property can be used to override the default endpoint provided by the client when transport is not explicitly provided. Only if this property is not set and transport was not explicitly provided, the endpoint is determined by the GOOGLE_API_USE_MTLS_ENDPOINT environment variable, which have one of the following values: “always” (always use the default mTLS endpoint), “never” (always use the default regular endpoint) and “auto” (auto-switch to the default mTLS endpoint if client certificate is present; this is the default value).

    2. If the GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable is “true”, then the client_cert_source property can be used to provide a client certificate for mTLS transport. If not provided, the default SSL client certificate will be used if present. If GOOGLE_API_USE_CLIENT_CERTIFICATE is “false” or not set, no client certificate will be used.

    3. The universe_domain property can be used to override the default “googleapis.com” universe. Note that api_endpoint property still takes precedence; and universe_domain is currently not supported for mTLS.

  • client_info (google.api_core.gapic_v1.client_info.ClientInfo) – The client info used to send a user-agent string along with API requests. If None, then default info will be used. Generally, you only need to set this if you’re developing your own client library.

Raises

google.auth.exceptions.MutualTlsChannelError – If mutual TLS transport creation failed for any reason.

static access_approval_service_account_path(project: str) → str

Returns a fully-qualified access_approval_service_account string.

static access_approval_settings_path(project: str) → str

Returns a fully-qualified access_approval_settings string.

property api_endpoint

Return the API endpoint used by the client instance.

Returns

The API endpoint used by the client instance.

Return type

str

static approval_request_path(project: str, approval_request: str) → str

Returns a fully-qualified approval_request string.

async approve_approval_request(request: Optional[Union[google.cloud.accessapproval_v1.types.accessapproval.ApproveApprovalRequestMessage, dict]] = None, *, retry: Optional[Union[google.api_core.retry.retry_unary_async.AsyncRetry, google.api_core.gapic_v1.method._MethodDefault]] = _MethodDefault._DEFAULT_VALUE, timeout: Union[float, object] = _MethodDefault._DEFAULT_VALUE, metadata: Sequence[Tuple[str, str]] = ()) → google.cloud.accessapproval_v1.types.accessapproval.ApprovalRequest[source]

Approves a request and returns the updated ApprovalRequest.

Returns NOT_FOUND if the request does not exist. Returns FAILED_PRECONDITION if the request exists but is not in a pending state.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import accessapproval_v1

async def sample_approve_approval_request():
    # Create a client
    client = accessapproval_v1.AccessApprovalAsyncClient()

    # Initialize request argument(s)
    request = accessapproval_v1.ApproveApprovalRequestMessage(
    )

    # Make the request
    response = await client.approve_approval_request(request=request)

    # Handle the response
    print(response)
Parameters

  • request (Optional[Union[google.cloud.accessapproval_v1.types.ApproveApprovalRequestMessage, dict]]) – The request object. Request to approve an ApprovalRequest.

  • retry (google.api_core.retry_async.AsyncRetry) – Designation of what errors, if any, should be retried.

  • timeout (float) – The timeout for this request.

  • metadata (Sequence[Tuple[str, str]]) – Strings which should be sent along with the request as metadata.

Returns

A request for the customer to approve access to a resource.

Return type

google.cloud.accessapproval_v1.types.ApprovalRequest

static common_billing_account_path(billing_account: str) → str

Returns a fully-qualified billing_account string.

static common_folder_path(folder: str) → str

Returns a fully-qualified folder string.

static common_location_path(project: str, location: str) → str

Returns a fully-qualified location string.

static common_organization_path(organization: str) → str

Returns a fully-qualified organization string.

static common_project_path(project: str) → str

Returns a fully-qualified project string.

async delete_access_approval_settings(request: Optional[Union[google.cloud.accessapproval_v1.types.accessapproval.DeleteAccessApprovalSettingsMessage, dict]] = None, *, name: Optional[str] = None, retry: Optional[Union[google.api_core.retry.retry_unary_async.AsyncRetry, google.api_core.gapic_v1.method._MethodDefault]] = _MethodDefault._DEFAULT_VALUE, timeout: Union[float, object] = _MethodDefault._DEFAULT_VALUE, metadata: Sequence[Tuple[str, str]] = ()) → None[source]

Deletes the settings associated with a project, folder, or organization. This will have the effect of disabling Access Approval for the project, folder, or organization, but only if all ancestors also have Access Approval disabled. If Access Approval is enabled at a higher level of the hierarchy, then Access Approval will still be enabled at this level as the settings are inherited.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import accessapproval_v1

async def sample_delete_access_approval_settings():
    # Create a client
    client = accessapproval_v1.AccessApprovalAsyncClient()

    # Initialize request argument(s)
    request = accessapproval_v1.DeleteAccessApprovalSettingsMessage(
    )

    # Make the request
    await client.delete_access_approval_settings(request=request)
Parameters

  • request (Optional[Union[google.cloud.accessapproval_v1.types.DeleteAccessApprovalSettingsMessage, dict]]) – The request object. Request to delete access approval settings.

  • name (str) –

    Name of the AccessApprovalSettings to delete.

    This corresponds to the name field on the request instance; if request is provided, this should not be set.

  • retry (google.api_core.retry_async.AsyncRetry) – Designation of what errors, if any, should be retried.

  • timeout (float) – The timeout for this request.

  • metadata (Sequence[Tuple[str, str]]) – Strings which should be sent along with the request as metadata.

async dismiss_approval_request(request: Optional[Union[google.cloud.accessapproval_v1.types.accessapproval.DismissApprovalRequestMessage, dict]] = None, *, retry: Optional[Union[google.api_core.retry.retry_unary_async.AsyncRetry, google.api_core.gapic_v1.method._MethodDefault]] = _MethodDefault._DEFAULT_VALUE, timeout: Union[float, object] = _MethodDefault._DEFAULT_VALUE, metadata: Sequence[Tuple[str, str]] = ()) → google.cloud.accessapproval_v1.types.accessapproval.ApprovalRequest[source]

Dismisses a request. Returns the updated ApprovalRequest.

NOTE: This does not deny access to the resource if another request has been made and approved. It is equivalent in effect to ignoring the request altogether.

Returns NOT_FOUND if the request does not exist.

Returns FAILED_PRECONDITION if the request exists but is not in a pending state.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import accessapproval_v1

async def sample_dismiss_approval_request():
    # Create a client
    client = accessapproval_v1.AccessApprovalAsyncClient()

    # Initialize request argument(s)
    request = accessapproval_v1.DismissApprovalRequestMessage(
    )

    # Make the request
    response = await client.dismiss_approval_request(request=request)

    # Handle the response
    print(response)
Parameters

  • request (Optional[Union[google.cloud.accessapproval_v1.types.DismissApprovalRequestMessage, dict]]) – The request object. Request to dismiss an approval request.

  • retry (google.api_core.retry_async.AsyncRetry) – Designation of what errors, if any, should be retried.

  • timeout (float) – The timeout for this request.

  • metadata (Sequence[Tuple[str, str]]) – Strings which should be sent along with the request as metadata.

Returns

A request for the customer to approve access to a resource.

Return type

google.cloud.accessapproval_v1.types.ApprovalRequest

classmethod from_service_account_file(filename: str, *args, **kwargs)[source]
Creates an instance of this client using the provided credentials

file.

Parameters

  • filename (str) – The path to the service account private key json file.

  • args – Additional arguments to pass to the constructor.

  • kwargs – Additional arguments to pass to the constructor.

Returns

The constructed client.

Return type

AccessApprovalAsyncClient

classmethod from_service_account_info(info: dict, *args, **kwargs)[source]
Creates an instance of this client using the provided credentials

info.

Parameters

  • info (dict) – The service account private key info.

  • args – Additional arguments to pass to the constructor.

  • kwargs – Additional arguments to pass to the constructor.

Returns

The constructed client.

Return type

AccessApprovalAsyncClient

classmethod from_service_account_json(filename: str, *args, **kwargs)
Creates an instance of this client using the provided credentials

file.

Parameters

  • filename (str) – The path to the service account private key json file.

  • args – Additional arguments to pass to the constructor.

  • kwargs – Additional arguments to pass to the constructor.

Returns

The constructed client.

Return type

AccessApprovalAsyncClient

async get_access_approval_service_account(request: Optional[Union[google.cloud.accessapproval_v1.types.accessapproval.GetAccessApprovalServiceAccountMessage, dict]] = None, *, name: Optional[str] = None, retry: Optional[Union[google.api_core.retry.retry_unary_async.AsyncRetry, google.api_core.gapic_v1.method._MethodDefault]] = _MethodDefault._DEFAULT_VALUE, timeout: Union[float, object] = _MethodDefault._DEFAULT_VALUE, metadata: Sequence[Tuple[str, str]] = ()) → google.cloud.accessapproval_v1.types.accessapproval.AccessApprovalServiceAccount[source]

Retrieves the service account that is used by Access Approval to access KMS keys for signing approved approval requests.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import accessapproval_v1

async def sample_get_access_approval_service_account():
    # Create a client
    client = accessapproval_v1.AccessApprovalAsyncClient()

    # Initialize request argument(s)
    request = accessapproval_v1.GetAccessApprovalServiceAccountMessage(
    )

    # Make the request
    response = await client.get_access_approval_service_account(request=request)

    # Handle the response
    print(response)
Parameters

  • request (Optional[Union[google.cloud.accessapproval_v1.types.GetAccessApprovalServiceAccountMessage, dict]]) – The request object. Request to get an Access Approval service account.

  • name (str) –

    Name of the AccessApprovalServiceAccount to retrieve.

    This corresponds to the name field on the request instance; if request is provided, this should not be set.

  • retry (google.api_core.retry_async.AsyncRetry) – Designation of what errors, if any, should be retried.

  • timeout (float) – The timeout for this request.

  • metadata (Sequence[Tuple[str, str]]) – Strings which should be sent along with the request as metadata.

Returns

Access Approval service account related to a project/folder/organization.

Return type

google.cloud.accessapproval_v1.types.AccessApprovalServiceAccount

async get_access_approval_settings(request: Optional[Union[google.cloud.accessapproval_v1.types.accessapproval.GetAccessApprovalSettingsMessage, dict]] = None, *, name: Optional[str] = None, retry: Optional[Union[google.api_core.retry.retry_unary_async.AsyncRetry, google.api_core.gapic_v1.method._MethodDefault]] = _MethodDefault._DEFAULT_VALUE, timeout: Union[float, object] = _MethodDefault._DEFAULT_VALUE, metadata: Sequence[Tuple[str, str]] = ()) → google.cloud.accessapproval_v1.types.accessapproval.AccessApprovalSettings[source]

Gets the settings associated with a project, folder, or organization.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import accessapproval_v1

async def sample_get_access_approval_settings():
    # Create a client
    client = accessapproval_v1.AccessApprovalAsyncClient()

    # Initialize request argument(s)
    request = accessapproval_v1.GetAccessApprovalSettingsMessage(
    )

    # Make the request
    response = await client.get_access_approval_settings(request=request)

    # Handle the response
    print(response)
Parameters

  • request (Optional[Union[google.cloud.accessapproval_v1.types.GetAccessApprovalSettingsMessage, dict]]) – The request object. Request to get access approval settings.

  • name (str) –

    The name of the AccessApprovalSettings to retrieve. Format: “{projects|folders|organizations}/{id}/accessApprovalSettings”

    This corresponds to the name field on the request instance; if request is provided, this should not be set.

  • retry (google.api_core.retry_async.AsyncRetry) – Designation of what errors, if any, should be retried.

  • timeout (float) – The timeout for this request.

  • metadata (Sequence[Tuple[str, str]]) – Strings which should be sent along with the request as metadata.

Returns

Settings on a Project/Folder/Organization related to Access Approval.

Return type

google.cloud.accessapproval_v1.types.AccessApprovalSettings

async get_approval_request(request: Optional[Union[google.cloud.accessapproval_v1.types.accessapproval.GetApprovalRequestMessage, dict]] = None, *, name: Optional[str] = None, retry: Optional[Union[google.api_core.retry.retry_unary_async.AsyncRetry, google.api_core.gapic_v1.method._MethodDefault]] = _MethodDefault._DEFAULT_VALUE, timeout: Union[float, object] = _MethodDefault._DEFAULT_VALUE, metadata: Sequence[Tuple[str, str]] = ()) → google.cloud.accessapproval_v1.types.accessapproval.ApprovalRequest[source]

Gets an approval request. Returns NOT_FOUND if the request does not exist.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import accessapproval_v1

async def sample_get_approval_request():
    # Create a client
    client = accessapproval_v1.AccessApprovalAsyncClient()

    # Initialize request argument(s)
    request = accessapproval_v1.GetApprovalRequestMessage(
    )

    # Make the request
    response = await client.get_approval_request(request=request)

    # Handle the response
    print(response)
Parameters

  • request (Optional[Union[google.cloud.accessapproval_v1.types.GetApprovalRequestMessage, dict]]) – The request object. Request to get an approval request.

  • name (str) –

    The name of the approval request to retrieve. Format: “{projects|folders|organizations}/{id}/approvalRequests/{approval_request}”

    This corresponds to the name field on the request instance; if request is provided, this should not be set.

  • retry (google.api_core.retry_async.AsyncRetry) – Designation of what errors, if any, should be retried.

  • timeout (float) – The timeout for this request.

  • metadata (Sequence[Tuple[str, str]]) – Strings which should be sent along with the request as metadata.

Returns

A request for the customer to approve access to a resource.

Return type

google.cloud.accessapproval_v1.types.ApprovalRequest

classmethod get_mtls_endpoint_and_cert_source(client_options: Optional[google.api_core.client_options.ClientOptions] = None)[source]

Return the API endpoint and client cert source for mutual TLS.

The client cert source is determined in the following order: (1) if GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable is not “true”, the client cert source is None. (2) if client_options.client_cert_source is provided, use the provided one; if the default client cert source exists, use the default one; otherwise the client cert source is None.

The API endpoint is determined in the following order: (1) if client_options.api_endpoint if provided, use the provided one. (2) if GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable is “always”, use the default mTLS endpoint; if the environment variable is “never”, use the default API endpoint; otherwise if client cert source exists, use the default mTLS endpoint, otherwise use the default API endpoint.

More details can be found at https://google.aip.dev/auth/4114.

Parameters

client_options (google.api_core.client_options.ClientOptions) – Custom options for the client. Only the api_endpoint and client_cert_source properties may be used in this method.

Returns

returns the API endpoint and the

client cert source to use.

Return type

Tuple[str, Callable[[], Tuple[bytes, bytes]]]

Raises

google.auth.exceptions.MutualTLSChannelError – If any errors happen.

classmethod get_transport_class(label: Optional[str] = None) → Type[google.cloud.accessapproval_v1.services.access_approval.transports.base.AccessApprovalTransport]

Returns an appropriate transport class.

Parameters

label – The name of the desired transport. If none is provided, then the first transport in the registry is used.

Returns

The transport class to use.

async invalidate_approval_request(request: Optional[Union[google.cloud.accessapproval_v1.types.accessapproval.InvalidateApprovalRequestMessage, dict]] = None, *, retry: Optional[Union[google.api_core.retry.retry_unary_async.AsyncRetry, google.api_core.gapic_v1.method._MethodDefault]] = _MethodDefault._DEFAULT_VALUE, timeout: Union[float, object] = _MethodDefault._DEFAULT_VALUE, metadata: Sequence[Tuple[str, str]] = ()) → google.cloud.accessapproval_v1.types.accessapproval.ApprovalRequest[source]

Invalidates an existing ApprovalRequest. Returns the updated ApprovalRequest.

NOTE: This does not deny access to the resource if another request has been made and approved. It only invalidates a single approval.

Returns FAILED_PRECONDITION if the request exists but is not in an approved state.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import accessapproval_v1

async def sample_invalidate_approval_request():
    # Create a client
    client = accessapproval_v1.AccessApprovalAsyncClient()

    # Initialize request argument(s)
    request = accessapproval_v1.InvalidateApprovalRequestMessage(
    )

    # Make the request
    response = await client.invalidate_approval_request(request=request)

    # Handle the response
    print(response)
Parameters

  • request (Optional[Union[google.cloud.accessapproval_v1.types.InvalidateApprovalRequestMessage, dict]]) – The request object. Request to invalidate an existing approval.

  • retry (google.api_core.retry_async.AsyncRetry) – Designation of what errors, if any, should be retried.

  • timeout (float) – The timeout for this request.

  • metadata (Sequence[Tuple[str, str]]) – Strings which should be sent along with the request as metadata.

Returns

A request for the customer to approve access to a resource.

Return type

google.cloud.accessapproval_v1.types.ApprovalRequest

async list_approval_requests(request: Optional[Union[google.cloud.accessapproval_v1.types.accessapproval.ListApprovalRequestsMessage, dict]] = None, *, parent: Optional[str] = None, retry: Optional[Union[google.api_core.retry.retry_unary_async.AsyncRetry, google.api_core.gapic_v1.method._MethodDefault]] = _MethodDefault._DEFAULT_VALUE, timeout: Union[float, object] = _MethodDefault._DEFAULT_VALUE, metadata: Sequence[Tuple[str, str]] = ()) → google.cloud.accessapproval_v1.services.access_approval.pagers.ListApprovalRequestsAsyncPager[source]

Lists approval requests associated with a project, folder, or organization. Approval requests can be filtered by state (pending, active, dismissed). The order is reverse chronological.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import accessapproval_v1

async def sample_list_approval_requests():
    # Create a client
    client = accessapproval_v1.AccessApprovalAsyncClient()

    # Initialize request argument(s)
    request = accessapproval_v1.ListApprovalRequestsMessage(
    )

    # Make the request
    page_result = client.list_approval_requests(request=request)

    # Handle the response
    async for response in page_result:
        print(response)
Parameters

  • request (Optional[Union[google.cloud.accessapproval_v1.types.ListApprovalRequestsMessage, dict]]) – The request object. Request to list approval requests.

  • parent (str) –

    The parent resource. This may be “projects/{project}”, “folders/{folder}”, or “organizations/{organization}”.

    This corresponds to the parent field on the request instance; if request is provided, this should not be set.

  • retry (google.api_core.retry_async.AsyncRetry) – Designation of what errors, if any, should be retried.

  • timeout (float) – The timeout for this request.

  • metadata (Sequence[Tuple[str, str]]) – Strings which should be sent along with the request as metadata.

Returns

Response to listing of ApprovalRequest objects. Iterating over this object will yield results and resolve additional pages automatically.

Return type

google.cloud.accessapproval_v1.services.access_approval.pagers.ListApprovalRequestsAsyncPager

static parse_access_approval_service_account_path(path: str) → Dict[str, str]

Parses a access_approval_service_account path into its component segments.

static parse_access_approval_settings_path(path: str) → Dict[str, str]

Parses a access_approval_settings path into its component segments.

static parse_approval_request_path(path: str) → Dict[str, str]

Parses a approval_request path into its component segments.

static parse_common_billing_account_path(path: str) → Dict[str, str]

Parse a billing_account path into its component segments.

static parse_common_folder_path(path: str) → Dict[str, str]

Parse a folder path into its component segments.

static parse_common_location_path(path: str) → Dict[str, str]

Parse a location path into its component segments.

static parse_common_organization_path(path: str) → Dict[str, str]

Parse a organization path into its component segments.

static parse_common_project_path(path: str) → Dict[str, str]

Parse a project path into its component segments.

property transport: google.cloud.accessapproval_v1.services.access_approval.transports.base.AccessApprovalTransport

Returns the transport used by the client instance.

Returns

The transport used by the client instance.

Return type

AccessApprovalTransport

property universe_domain: str

Return the universe domain used by the client instance.

Returns

The universe domain used

by the client instance.

Return type

str

async update_access_approval_settings(request: Optional[Union[google.cloud.accessapproval_v1.types.accessapproval.UpdateAccessApprovalSettingsMessage, dict]] = None, *, settings: Optional[google.cloud.accessapproval_v1.types.accessapproval.AccessApprovalSettings] = None, update_mask: Optional[google.protobuf.field_mask_pb2.FieldMask] = None, retry: Optional[Union[google.api_core.retry.retry_unary_async.AsyncRetry, google.api_core.gapic_v1.method._MethodDefault]] = _MethodDefault._DEFAULT_VALUE, timeout: Union[float, object] = _MethodDefault._DEFAULT_VALUE, metadata: Sequence[Tuple[str, str]] = ()) → google.cloud.accessapproval_v1.types.accessapproval.AccessApprovalSettings[source]

Updates the settings associated with a project, folder, or organization. Settings to update are determined by the value of field_mask.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import accessapproval_v1

async def sample_update_access_approval_settings():
    # Create a client
    client = accessapproval_v1.AccessApprovalAsyncClient()

    # Initialize request argument(s)
    request = accessapproval_v1.UpdateAccessApprovalSettingsMessage(
    )

    # Make the request
    response = await client.update_access_approval_settings(request=request)

    # Handle the response
    print(response)
Parameters
Returns

Settings on a Project/Folder/Organization related to Access Approval.

Return type

google.cloud.accessapproval_v1.types.AccessApprovalSettings

class google.cloud.accessapproval_v1.services.access_approval.AccessApprovalClient(*, credentials: typing.Optional[google.auth.credentials.Credentials] = None, transport: typing.Optional[typing.Union[str, google.cloud.accessapproval_v1.services.access_approval.transports.base.AccessApprovalTransport, typing.Callable[[...], google.cloud.accessapproval_v1.services.access_approval.transports.base.AccessApprovalTransport]]] = None, client_options: typing.Optional[typing.Union[google.api_core.client_options.ClientOptions, dict]] = None, client_info: google.api_core.gapic_v1.client_info.ClientInfo = <google.api_core.gapic_v1.client_info.ClientInfo object>)[source]

This API allows a customer to manage accesses to cloud resources by Google personnel. It defines the following resource model:

  • The API has a collection of [ApprovalRequest][google.cloud.accessapproval.v1.ApprovalRequest] resources, named approvalRequests/{approval_request}

  • The API has top-level settings per Project/Folder/Organization, named accessApprovalSettings

The service also periodically emails a list of recipients, defined at the Project/Folder/Organization level in the accessApprovalSettings, when there is a pending ApprovalRequest for them to act on. The ApprovalRequests can also optionally be published to a Pub/Sub topic owned by the customer (contact support if you would like to enable Pub/Sub notifications).

ApprovalRequests can be approved or dismissed. Google personnel can only access the indicated resource or resources if the request is approved (subject to some exclusions: https://cloud.google.com/access-approval/docs/overview#exclusions).

Note: Using Access Approval functionality will mean that Google may not be able to meet the SLAs for your chosen products, as any support response times may be dramatically increased. As such the SLAs do not apply to any service disruption to the extent impacted by Customer’s use of Access Approval. Do not enable Access Approval for projects where you may require high service availability and rapid response by Google Cloud Support.

After a request is approved or dismissed, no further action may be taken on it. Requests with the requested_expiration in the past or with no activity for 14 days are considered dismissed. When an approval expires, the request is considered dismissed.

If a request is not approved or dismissed, we call it pending.

Instantiates the access approval client.

Parameters

  • credentials (Optional[google.auth.credentials.Credentials]) – The authorization credentials to attach to requests. These credentials identify the application to the service; if none are specified, the client will attempt to ascertain the credentials from the environment.

  • transport (Optional[Union[str,AccessApprovalTransport,Callable[..., AccessApprovalTransport]]]) – The transport to use, or a Callable that constructs and returns a new transport. If a Callable is given, it will be called with the same set of initialization arguments as used in the AccessApprovalTransport constructor. If set to None, a transport is chosen automatically.

  • client_options (Optional[Union[google.api_core.client_options.ClientOptions, dict]]) –

    Custom options for the client.

    1. The api_endpoint property can be used to override the default endpoint provided by the client when transport is not explicitly provided. Only if this property is not set and transport was not explicitly provided, the endpoint is determined by the GOOGLE_API_USE_MTLS_ENDPOINT environment variable, which have one of the following values: “always” (always use the default mTLS endpoint), “never” (always use the default regular endpoint) and “auto” (auto-switch to the default mTLS endpoint if client certificate is present; this is the default value).

    2. If the GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable is “true”, then the client_cert_source property can be used to provide a client certificate for mTLS transport. If not provided, the default SSL client certificate will be used if present. If GOOGLE_API_USE_CLIENT_CERTIFICATE is “false” or not set, no client certificate will be used.

    3. The universe_domain property can be used to override the default “googleapis.com” universe. Note that the api_endpoint property still takes precedence; and universe_domain is currently not supported for mTLS.

  • client_info (google.api_core.gapic_v1.client_info.ClientInfo) – The client info used to send a user-agent string along with API requests. If None, then default info will be used. Generally, you only need to set this if you’re developing your own client library.

Raises

google.auth.exceptions.MutualTLSChannelError – If mutual TLS transport creation failed for any reason.

__exit__(type, value, traceback)[source]

Releases underlying transport’s resources.

Warning

ONLY use as a context manager if the transport is NOT shared with other clients! Exiting the with block will CLOSE the transport and may cause errors in other clients!

static access_approval_service_account_path(project: str) → str[source]

Returns a fully-qualified access_approval_service_account string.

static access_approval_settings_path(project: str) → str[source]

Returns a fully-qualified access_approval_settings string.

property api_endpoint

Return the API endpoint used by the client instance.

Returns

The API endpoint used by the client instance.

Return type

str

static approval_request_path(project: str, approval_request: str) → str[source]

Returns a fully-qualified approval_request string.

approve_approval_request(request: Optional[Union[google.cloud.accessapproval_v1.types.accessapproval.ApproveApprovalRequestMessage, dict]] = None, *, retry: Optional[Union[google.api_core.retry.retry_unary.Retry, google.api_core.gapic_v1.method._MethodDefault]] = _MethodDefault._DEFAULT_VALUE, timeout: Union[float, object] = _MethodDefault._DEFAULT_VALUE, metadata: Sequence[Tuple[str, str]] = ()) → google.cloud.accessapproval_v1.types.accessapproval.ApprovalRequest[source]

Approves a request and returns the updated ApprovalRequest.

Returns NOT_FOUND if the request does not exist. Returns FAILED_PRECONDITION if the request exists but is not in a pending state.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import accessapproval_v1

def sample_approve_approval_request():
    # Create a client
    client = accessapproval_v1.AccessApprovalClient()

    # Initialize request argument(s)
    request = accessapproval_v1.ApproveApprovalRequestMessage(
    )

    # Make the request
    response = client.approve_approval_request(request=request)

    # Handle the response
    print(response)
Parameters
Returns

A request for the customer to approve access to a resource.

Return type

google.cloud.accessapproval_v1.types.ApprovalRequest

static common_billing_account_path(billing_account: str) → str[source]

Returns a fully-qualified billing_account string.

static common_folder_path(folder: str) → str[source]

Returns a fully-qualified folder string.

static common_location_path(project: str, location: str) → str[source]

Returns a fully-qualified location string.

static common_organization_path(organization: str) → str[source]

Returns a fully-qualified organization string.

static common_project_path(project: str) → str[source]

Returns a fully-qualified project string.

delete_access_approval_settings(request: Optional[Union[google.cloud.accessapproval_v1.types.accessapproval.DeleteAccessApprovalSettingsMessage, dict]] = None, *, name: Optional[str] = None, retry: Optional[Union[google.api_core.retry.retry_unary.Retry, google.api_core.gapic_v1.method._MethodDefault]] = _MethodDefault._DEFAULT_VALUE, timeout: Union[float, object] = _MethodDefault._DEFAULT_VALUE, metadata: Sequence[Tuple[str, str]] = ()) → None[source]

Deletes the settings associated with a project, folder, or organization. This will have the effect of disabling Access Approval for the project, folder, or organization, but only if all ancestors also have Access Approval disabled. If Access Approval is enabled at a higher level of the hierarchy, then Access Approval will still be enabled at this level as the settings are inherited.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import accessapproval_v1

def sample_delete_access_approval_settings():
    # Create a client
    client = accessapproval_v1.AccessApprovalClient()

    # Initialize request argument(s)
    request = accessapproval_v1.DeleteAccessApprovalSettingsMessage(
    )

    # Make the request
    client.delete_access_approval_settings(request=request)
Parameters

  • request (Union[google.cloud.accessapproval_v1.types.DeleteAccessApprovalSettingsMessage, dict]) – The request object. Request to delete access approval settings.

  • name (str) –

    Name of the AccessApprovalSettings to delete.

    This corresponds to the name field on the request instance; if request is provided, this should not be set.

  • retry (google.api_core.retry.Retry) – Designation of what errors, if any, should be retried.

  • timeout (float) – The timeout for this request.

  • metadata (Sequence[Tuple[str, str]]) – Strings which should be sent along with the request as metadata.

dismiss_approval_request(request: Optional[Union[google.cloud.accessapproval_v1.types.accessapproval.DismissApprovalRequestMessage, dict]] = None, *, retry: Optional[Union[google.api_core.retry.retry_unary.Retry, google.api_core.gapic_v1.method._MethodDefault]] = _MethodDefault._DEFAULT_VALUE, timeout: Union[float, object] = _MethodDefault._DEFAULT_VALUE, metadata: Sequence[Tuple[str, str]] = ()) → google.cloud.accessapproval_v1.types.accessapproval.ApprovalRequest[source]

Dismisses a request. Returns the updated ApprovalRequest.

NOTE: This does not deny access to the resource if another request has been made and approved. It is equivalent in effect to ignoring the request altogether.

Returns NOT_FOUND if the request does not exist.

Returns FAILED_PRECONDITION if the request exists but is not in a pending state.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import accessapproval_v1

def sample_dismiss_approval_request():
    # Create a client
    client = accessapproval_v1.AccessApprovalClient()

    # Initialize request argument(s)
    request = accessapproval_v1.DismissApprovalRequestMessage(
    )

    # Make the request
    response = client.dismiss_approval_request(request=request)

    # Handle the response
    print(response)
Parameters
Returns

A request for the customer to approve access to a resource.

Return type

google.cloud.accessapproval_v1.types.ApprovalRequest

classmethod from_service_account_file(filename: str, *args, **kwargs)[source]
Creates an instance of this client using the provided credentials

file.

Parameters

  • filename (str) – The path to the service account private key json file.

  • args – Additional arguments to pass to the constructor.

  • kwargs – Additional arguments to pass to the constructor.

Returns

The constructed client.

Return type

AccessApprovalClient

classmethod from_service_account_info(info: dict, *args, **kwargs)[source]
Creates an instance of this client using the provided credentials

info.

Parameters

  • info (dict) – The service account private key info.

  • args – Additional arguments to pass to the constructor.

  • kwargs – Additional arguments to pass to the constructor.

Returns

The constructed client.

Return type

AccessApprovalClient

classmethod from_service_account_json(filename: str, *args, **kwargs)
Creates an instance of this client using the provided credentials

file.

Parameters

  • filename (str) – The path to the service account private key json file.

  • args – Additional arguments to pass to the constructor.

  • kwargs – Additional arguments to pass to the constructor.

Returns

The constructed client.

Return type

AccessApprovalClient

get_access_approval_service_account(request: Optional[Union[google.cloud.accessapproval_v1.types.accessapproval.GetAccessApprovalServiceAccountMessage, dict]] = None, *, name: Optional[str] = None, retry: Optional[Union[google.api_core.retry.retry_unary.Retry, google.api_core.gapic_v1.method._MethodDefault]] = _MethodDefault._DEFAULT_VALUE, timeout: Union[float, object] = _MethodDefault._DEFAULT_VALUE, metadata: Sequence[Tuple[str, str]] = ()) → google.cloud.accessapproval_v1.types.accessapproval.AccessApprovalServiceAccount[source]

Retrieves the service account that is used by Access Approval to access KMS keys for signing approved approval requests.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import accessapproval_v1

def sample_get_access_approval_service_account():
    # Create a client
    client = accessapproval_v1.AccessApprovalClient()

    # Initialize request argument(s)
    request = accessapproval_v1.GetAccessApprovalServiceAccountMessage(
    )

    # Make the request
    response = client.get_access_approval_service_account(request=request)

    # Handle the response
    print(response)
Parameters

  • request (Union[google.cloud.accessapproval_v1.types.GetAccessApprovalServiceAccountMessage, dict]) – The request object. Request to get an Access Approval service account.

  • name (str) –

    Name of the AccessApprovalServiceAccount to retrieve.

    This corresponds to the name field on the request instance; if request is provided, this should not be set.

  • retry (google.api_core.retry.Retry) – Designation of what errors, if any, should be retried.

  • timeout (float) – The timeout for this request.

  • metadata (Sequence[Tuple[str, str]]) – Strings which should be sent along with the request as metadata.

Returns

Access Approval service account related to a project/folder/organization.

Return type

google.cloud.accessapproval_v1.types.AccessApprovalServiceAccount

get_access_approval_settings(request: Optional[Union[google.cloud.accessapproval_v1.types.accessapproval.GetAccessApprovalSettingsMessage, dict]] = None, *, name: Optional[str] = None, retry: Optional[Union[google.api_core.retry.retry_unary.Retry, google.api_core.gapic_v1.method._MethodDefault]] = _MethodDefault._DEFAULT_VALUE, timeout: Union[float, object] = _MethodDefault._DEFAULT_VALUE, metadata: Sequence[Tuple[str, str]] = ()) → google.cloud.accessapproval_v1.types.accessapproval.AccessApprovalSettings[source]

Gets the settings associated with a project, folder, or organization.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import accessapproval_v1

def sample_get_access_approval_settings():
    # Create a client
    client = accessapproval_v1.AccessApprovalClient()

    # Initialize request argument(s)
    request = accessapproval_v1.GetAccessApprovalSettingsMessage(
    )

    # Make the request
    response = client.get_access_approval_settings(request=request)

    # Handle the response
    print(response)
Parameters

  • request (Union[google.cloud.accessapproval_v1.types.GetAccessApprovalSettingsMessage, dict]) – The request object. Request to get access approval settings.

  • name (str) –

    The name of the AccessApprovalSettings to retrieve. Format: “{projects|folders|organizations}/{id}/accessApprovalSettings”

    This corresponds to the name field on the request instance; if request is provided, this should not be set.

  • retry (google.api_core.retry.Retry) – Designation of what errors, if any, should be retried.

  • timeout (float) – The timeout for this request.

  • metadata (Sequence[Tuple[str, str]]) – Strings which should be sent along with the request as metadata.

Returns

Settings on a Project/Folder/Organization related to Access Approval.

Return type

google.cloud.accessapproval_v1.types.AccessApprovalSettings

get_approval_request(request: Optional[Union[google.cloud.accessapproval_v1.types.accessapproval.GetApprovalRequestMessage, dict]] = None, *, name: Optional[str] = None, retry: Optional[Union[google.api_core.retry.retry_unary.Retry, google.api_core.gapic_v1.method._MethodDefault]] = _MethodDefault._DEFAULT_VALUE, timeout: Union[float, object] = _MethodDefault._DEFAULT_VALUE, metadata: Sequence[Tuple[str, str]] = ()) → google.cloud.accessapproval_v1.types.accessapproval.ApprovalRequest[source]

Gets an approval request. Returns NOT_FOUND if the request does not exist.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import accessapproval_v1

def sample_get_approval_request():
    # Create a client
    client = accessapproval_v1.AccessApprovalClient()

    # Initialize request argument(s)
    request = accessapproval_v1.GetApprovalRequestMessage(
    )

    # Make the request
    response = client.get_approval_request(request=request)

    # Handle the response
    print(response)
Parameters

  • request (Union[google.cloud.accessapproval_v1.types.GetApprovalRequestMessage, dict]) – The request object. Request to get an approval request.

  • name (str) –

    The name of the approval request to retrieve. Format: “{projects|folders|organizations}/{id}/approvalRequests/{approval_request}”

    This corresponds to the name field on the request instance; if request is provided, this should not be set.

  • retry (google.api_core.retry.Retry) – Designation of what errors, if any, should be retried.

  • timeout (float) – The timeout for this request.

  • metadata (Sequence[Tuple[str, str]]) – Strings which should be sent along with the request as metadata.

Returns

A request for the customer to approve access to a resource.

Return type

google.cloud.accessapproval_v1.types.ApprovalRequest

classmethod get_mtls_endpoint_and_cert_source(client_options: Optional[google.api_core.client_options.ClientOptions] = None)[source]

Deprecated. Return the API endpoint and client cert source for mutual TLS.

The client cert source is determined in the following order: (1) if GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable is not “true”, the client cert source is None. (2) if client_options.client_cert_source is provided, use the provided one; if the default client cert source exists, use the default one; otherwise the client cert source is None.

The API endpoint is determined in the following order: (1) if client_options.api_endpoint if provided, use the provided one. (2) if GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable is “always”, use the default mTLS endpoint; if the environment variable is “never”, use the default API endpoint; otherwise if client cert source exists, use the default mTLS endpoint, otherwise use the default API endpoint.

More details can be found at https://google.aip.dev/auth/4114.

Parameters

client_options (google.api_core.client_options.ClientOptions) – Custom options for the client. Only the api_endpoint and client_cert_source properties may be used in this method.

Returns

returns the API endpoint and the

client cert source to use.

Return type

Tuple[str, Callable[[], Tuple[bytes, bytes]]]

Raises

google.auth.exceptions.MutualTLSChannelError – If any errors happen.

invalidate_approval_request(request: Optional[Union[google.cloud.accessapproval_v1.types.accessapproval.InvalidateApprovalRequestMessage, dict]] = None, *, retry: Optional[Union[google.api_core.retry.retry_unary.Retry, google.api_core.gapic_v1.method._MethodDefault]] = _MethodDefault._DEFAULT_VALUE, timeout: Union[float, object] = _MethodDefault._DEFAULT_VALUE, metadata: Sequence[Tuple[str, str]] = ()) → google.cloud.accessapproval_v1.types.accessapproval.ApprovalRequest[source]

Invalidates an existing ApprovalRequest. Returns the updated ApprovalRequest.

NOTE: This does not deny access to the resource if another request has been made and approved. It only invalidates a single approval.

Returns FAILED_PRECONDITION if the request exists but is not in an approved state.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import accessapproval_v1

def sample_invalidate_approval_request():
    # Create a client
    client = accessapproval_v1.AccessApprovalClient()

    # Initialize request argument(s)
    request = accessapproval_v1.InvalidateApprovalRequestMessage(
    )

    # Make the request
    response = client.invalidate_approval_request(request=request)

    # Handle the response
    print(response)
Parameters
Returns

A request for the customer to approve access to a resource.

Return type

google.cloud.accessapproval_v1.types.ApprovalRequest

list_approval_requests(request: Optional[Union[google.cloud.accessapproval_v1.types.accessapproval.ListApprovalRequestsMessage, dict]] = None, *, parent: Optional[str] = None, retry: Optional[Union[google.api_core.retry.retry_unary.Retry, google.api_core.gapic_v1.method._MethodDefault]] = _MethodDefault._DEFAULT_VALUE, timeout: Union[float, object] = _MethodDefault._DEFAULT_VALUE, metadata: Sequence[Tuple[str, str]] = ()) → google.cloud.accessapproval_v1.services.access_approval.pagers.ListApprovalRequestsPager[source]

Lists approval requests associated with a project, folder, or organization. Approval requests can be filtered by state (pending, active, dismissed). The order is reverse chronological.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import accessapproval_v1

def sample_list_approval_requests():
    # Create a client
    client = accessapproval_v1.AccessApprovalClient()

    # Initialize request argument(s)
    request = accessapproval_v1.ListApprovalRequestsMessage(
    )

    # Make the request
    page_result = client.list_approval_requests(request=request)

    # Handle the response
    for response in page_result:
        print(response)
Parameters

  • request (Union[google.cloud.accessapproval_v1.types.ListApprovalRequestsMessage, dict]) – The request object. Request to list approval requests.

  • parent (str) –

    The parent resource. This may be “projects/{project}”, “folders/{folder}”, or “organizations/{organization}”.

    This corresponds to the parent field on the request instance; if request is provided, this should not be set.

  • retry (google.api_core.retry.Retry) – Designation of what errors, if any, should be retried.

  • timeout (float) – The timeout for this request.

  • metadata (Sequence[Tuple[str, str]]) – Strings which should be sent along with the request as metadata.

Returns

Response to listing of ApprovalRequest objects. Iterating over this object will yield results and resolve additional pages automatically.

Return type

google.cloud.accessapproval_v1.services.access_approval.pagers.ListApprovalRequestsPager

static parse_access_approval_service_account_path(path: str) → Dict[str, str][source]

Parses a access_approval_service_account path into its component segments.

static parse_access_approval_settings_path(path: str) → Dict[str, str][source]

Parses a access_approval_settings path into its component segments.

static parse_approval_request_path(path: str) → Dict[str, str][source]

Parses a approval_request path into its component segments.

static parse_common_billing_account_path(path: str) → Dict[str, str][source]

Parse a billing_account path into its component segments.

static parse_common_folder_path(path: str) → Dict[str, str][source]

Parse a folder path into its component segments.

static parse_common_location_path(path: str) → Dict[str, str][source]

Parse a location path into its component segments.

static parse_common_organization_path(path: str) → Dict[str, str][source]

Parse a organization path into its component segments.

static parse_common_project_path(path: str) → Dict[str, str][source]

Parse a project path into its component segments.

property transport: google.cloud.accessapproval_v1.services.access_approval.transports.base.AccessApprovalTransport

Returns the transport used by the client instance.

Returns

The transport used by the client

instance.

Return type

AccessApprovalTransport

property universe_domain: str

Return the universe domain used by the client instance.

Returns

The universe domain used by the client instance.

Return type

str

update_access_approval_settings(request: Optional[Union[google.cloud.accessapproval_v1.types.accessapproval.UpdateAccessApprovalSettingsMessage, dict]] = None, *, settings: Optional[google.cloud.accessapproval_v1.types.accessapproval.AccessApprovalSettings] = None, update_mask: Optional[google.protobuf.field_mask_pb2.FieldMask] = None, retry: Optional[Union[google.api_core.retry.retry_unary.Retry, google.api_core.gapic_v1.method._MethodDefault]] = _MethodDefault._DEFAULT_VALUE, timeout: Union[float, object] = _MethodDefault._DEFAULT_VALUE, metadata: Sequence[Tuple[str, str]] = ()) → google.cloud.accessapproval_v1.types.accessapproval.AccessApprovalSettings[source]

Updates the settings associated with a project, folder, or organization. Settings to update are determined by the value of field_mask.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import accessapproval_v1

def sample_update_access_approval_settings():
    # Create a client
    client = accessapproval_v1.AccessApprovalClient()

    # Initialize request argument(s)
    request = accessapproval_v1.UpdateAccessApprovalSettingsMessage(
    )

    # Make the request
    response = client.update_access_approval_settings(request=request)

    # Handle the response
    print(response)
Parameters
Returns

Settings on a Project/Folder/Organization related to Access Approval.

Return type

google.cloud.accessapproval_v1.types.AccessApprovalSettings

class google.cloud.accessapproval_v1.services.access_approval.pagers.ListApprovalRequestsAsyncPager(method: Callable[[...], Awaitable[google.cloud.accessapproval_v1.types.accessapproval.ListApprovalRequestsResponse]], request: google.cloud.accessapproval_v1.types.accessapproval.ListApprovalRequestsMessage, response: google.cloud.accessapproval_v1.types.accessapproval.ListApprovalRequestsResponse, *, retry: Optional[Union[google.api_core.retry.retry_unary_async.AsyncRetry, google.api_core.gapic_v1.method._MethodDefault]] = _MethodDefault._DEFAULT_VALUE, timeout: Union[float, object] = _MethodDefault._DEFAULT_VALUE, metadata: Sequence[Tuple[str, str]] = ())[source]

A pager for iterating through list_approval_requests requests.

This class thinly wraps an initial google.cloud.accessapproval_v1.types.ListApprovalRequestsResponse object, and provides an __aiter__ method to iterate through its approval_requests field.

If there are more pages, the __aiter__ method will make additional ListApprovalRequests requests and continue to iterate through the approval_requests field on the corresponding responses.

All the usual google.cloud.accessapproval_v1.types.ListApprovalRequestsResponse attributes are available on the pager. If multiple requests are made, only the most recent response is retained, and thus used for attribute lookup.

Instantiates the pager.

Parameters
class google.cloud.accessapproval_v1.services.access_approval.pagers.ListApprovalRequestsPager(method: Callable[[...], google.cloud.accessapproval_v1.types.accessapproval.ListApprovalRequestsResponse], request: google.cloud.accessapproval_v1.types.accessapproval.ListApprovalRequestsMessage, response: google.cloud.accessapproval_v1.types.accessapproval.ListApprovalRequestsResponse, *, retry: Optional[Union[google.api_core.retry.retry_unary.Retry, google.api_core.gapic_v1.method._MethodDefault]] = _MethodDefault._DEFAULT_VALUE, timeout: Union[float, object] = _MethodDefault._DEFAULT_VALUE, metadata: Sequence[Tuple[str, str]] = ())[source]

A pager for iterating through list_approval_requests requests.

This class thinly wraps an initial google.cloud.accessapproval_v1.types.ListApprovalRequestsResponse object, and provides an __iter__ method to iterate through its approval_requests field.

If there are more pages, the __iter__ method will make additional ListApprovalRequests requests and continue to iterate through the approval_requests field on the corresponding responses.

All the usual google.cloud.accessapproval_v1.types.ListApprovalRequestsResponse attributes are available on the pager. If multiple requests are made, only the most recent response is retained, and thus used for attribute lookup.

Instantiate the pager.

Parameters