OLD | NEW |
1 { | 1 { |
2 "auth": { | 2 "auth": { |
3 "oauth2": { | 3 "oauth2": { |
4 "scopes": { | 4 "scopes": { |
5 "https://www.googleapis.com/auth/cloud-platform": { | 5 "https://www.googleapis.com/auth/cloud-platform": { |
6 "description": "View and manage your data across Google Clou
d Platform services" | 6 "description": "View and manage your data across Google Clou
d Platform services" |
7 } | 7 } |
8 } | 8 } |
9 } | 9 } |
10 }, | 10 }, |
11 "basePath": "", | 11 "basePath": "", |
12 "baseUrl": "https://iam.googleapis.com/", | 12 "baseUrl": "https://iam.googleapis.com/", |
13 "batchPath": "batch", | 13 "batchPath": "batch", |
14 "canonicalName": "iam", | 14 "canonicalName": "iam", |
15 "description": "Manages identity and access control for Google Cloud Platfor
m resources, including the creation of service accounts, which you can use to au
thenticate to Google and make API calls.", | 15 "description": "Manages identity and access control for Google Cloud Platfor
m resources, including the creation of service accounts, which you can use to au
thenticate to Google and make API calls.", |
16 "discoveryVersion": "v1", | 16 "discoveryVersion": "v1", |
17 "documentationLink": "https://cloud.google.com/iam/", | 17 "documentationLink": "https://cloud.google.com/iam/", |
18 "icons": { | 18 "icons": { |
19 "x16": "http://www.google.com/images/icons/product/search-16.gif", | 19 "x16": "http://www.google.com/images/icons/product/search-16.gif", |
20 "x32": "http://www.google.com/images/icons/product/search-32.gif" | 20 "x32": "http://www.google.com/images/icons/product/search-32.gif" |
21 }, | 21 }, |
22 "id": "iam:v1", | 22 "id": "iam:v1", |
23 "kind": "discovery#restDescription", | 23 "kind": "discovery#restDescription", |
24 "name": "iam", | 24 "name": "iam", |
25 "ownerDomain": "google.com", | 25 "ownerDomain": "google.com", |
26 "ownerName": "Google", | 26 "ownerName": "Google", |
27 "parameters": { | 27 "parameters": { |
| 28 "access_token": { |
| 29 "description": "OAuth access token.", |
| 30 "location": "query", |
| 31 "type": "string" |
| 32 }, |
| 33 "key": { |
| 34 "description": "API key. Your API key identifies your project and pr
ovides you with API access, quota, and reports. Required unless you provide an O
Auth 2.0 token.", |
| 35 "location": "query", |
| 36 "type": "string" |
| 37 }, |
| 38 "quotaUser": { |
| 39 "description": "Available to use for quota purposes for server-side
applications. Can be any arbitrary string assigned to a user, but should not exc
eed 40 characters.", |
| 40 "location": "query", |
| 41 "type": "string" |
| 42 }, |
28 "pp": { | 43 "pp": { |
29 "default": "true", | 44 "default": "true", |
30 "description": "Pretty-print response.", | 45 "description": "Pretty-print response.", |
31 "location": "query", | 46 "location": "query", |
32 "type": "boolean" | 47 "type": "boolean" |
33 }, | 48 }, |
| 49 "oauth_token": { |
| 50 "description": "OAuth 2.0 token for the current user.", |
| 51 "location": "query", |
| 52 "type": "string" |
| 53 }, |
34 "bearer_token": { | 54 "bearer_token": { |
35 "description": "OAuth bearer token.", | 55 "description": "OAuth bearer token.", |
36 "location": "query", | 56 "location": "query", |
37 "type": "string" | 57 "type": "string" |
38 }, | 58 }, |
39 "oauth_token": { | |
40 "description": "OAuth 2.0 token for the current user.", | |
41 "location": "query", | |
42 "type": "string" | |
43 }, | |
44 "upload_protocol": { | 59 "upload_protocol": { |
45 "description": "Upload protocol for media (e.g. \"raw\", \"multipart
\").", | 60 "description": "Upload protocol for media (e.g. \"raw\", \"multipart
\").", |
46 "location": "query", | 61 "location": "query", |
47 "type": "string" | 62 "type": "string" |
48 }, | 63 }, |
49 "prettyPrint": { | 64 "prettyPrint": { |
50 "default": "true", | 65 "default": "true", |
51 "description": "Returns response with indentations and line breaks."
, | 66 "description": "Returns response with indentations and line breaks."
, |
52 "location": "query", | 67 "location": "query", |
53 "type": "boolean" | 68 "type": "boolean" |
54 }, | 69 }, |
55 "uploadType": { | 70 "uploadType": { |
56 "description": "Legacy upload protocol for media (e.g. \"media\", \"
multipart\").", | 71 "description": "Legacy upload protocol for media (e.g. \"media\", \"
multipart\").", |
57 "location": "query", | 72 "location": "query", |
58 "type": "string" | 73 "type": "string" |
59 }, | 74 }, |
60 "fields": { | 75 "fields": { |
61 "description": "Selector specifying which fields to include in a par
tial response.", | 76 "description": "Selector specifying which fields to include in a par
tial response.", |
62 "location": "query", | 77 "location": "query", |
63 "type": "string" | 78 "type": "string" |
64 }, | 79 }, |
| 80 "callback": { |
| 81 "description": "JSONP", |
| 82 "location": "query", |
| 83 "type": "string" |
| 84 }, |
65 "$.xgafv": { | 85 "$.xgafv": { |
66 "description": "V1 error format.", | 86 "description": "V1 error format.", |
67 "enum": [ | 87 "enum": [ |
68 "1", | 88 "1", |
69 "2" | 89 "2" |
70 ], | 90 ], |
71 "enumDescriptions": [ | 91 "enumDescriptions": [ |
72 "v1 error format", | 92 "v1 error format", |
73 "v2 error format" | 93 "v2 error format" |
74 ], | 94 ], |
75 "location": "query", | 95 "location": "query", |
76 "type": "string" | 96 "type": "string" |
77 }, | 97 }, |
78 "callback": { | |
79 "description": "JSONP", | |
80 "location": "query", | |
81 "type": "string" | |
82 }, | |
83 "alt": { | 98 "alt": { |
84 "default": "json", | 99 "default": "json", |
85 "description": "Data format for response.", | 100 "description": "Data format for response.", |
86 "enum": [ | 101 "enum": [ |
87 "json", | 102 "json", |
88 "media", | 103 "media", |
89 "proto" | 104 "proto" |
90 ], | 105 ], |
91 "enumDescriptions": [ | 106 "enumDescriptions": [ |
92 "Responses with Content-Type of application/json", | 107 "Responses with Content-Type of application/json", |
93 "Media download with context-dependent Content-Type", | 108 "Media download with context-dependent Content-Type", |
94 "Responses with Content-Type of application/x-protobuf" | 109 "Responses with Content-Type of application/x-protobuf" |
95 ], | 110 ], |
96 "location": "query", | 111 "location": "query", |
97 "type": "string" | 112 "type": "string" |
98 }, | |
99 "access_token": { | |
100 "description": "OAuth access token.", | |
101 "location": "query", | |
102 "type": "string" | |
103 }, | |
104 "key": { | |
105 "description": "API key. Your API key identifies your project and pr
ovides you with API access, quota, and reports. Required unless you provide an O
Auth 2.0 token.", | |
106 "location": "query", | |
107 "type": "string" | |
108 }, | |
109 "quotaUser": { | |
110 "description": "Available to use for quota purposes for server-side
applications. Can be any arbitrary string assigned to a user, but should not exc
eed 40 characters.", | |
111 "location": "query", | |
112 "type": "string" | |
113 } | 113 } |
114 }, | 114 }, |
115 "protocol": "rest", | 115 "protocol": "rest", |
116 "resources": { | 116 "resources": { |
117 "projects": { | 117 "projects": { |
118 "resources": { | 118 "resources": { |
119 "roles": { | 119 "roles": { |
120 "methods": { | 120 "methods": { |
| 121 "undelete": { |
| 122 "description": "Undelete a Role, bringing it back in
its previous state.", |
| 123 "httpMethod": "POST", |
| 124 "id": "iam.projects.roles.undelete", |
| 125 "parameterOrder": [ |
| 126 "name" |
| 127 ], |
| 128 "parameters": { |
| 129 "name": { |
| 130 "description": "The resource name of the rol
e in one of the following formats:\n`organizations/{ORGANIZATION_ID}/roles/{ROLE
_NAME}`\n`projects/{PROJECT_ID}/roles/{ROLE_NAME}`", |
| 131 "location": "path", |
| 132 "pattern": "^projects/[^/]+/roles/[^/]+$", |
| 133 "required": true, |
| 134 "type": "string" |
| 135 } |
| 136 }, |
| 137 "path": "v1/{+name}:undelete", |
| 138 "request": { |
| 139 "$ref": "UndeleteRoleRequest" |
| 140 }, |
| 141 "response": { |
| 142 "$ref": "Role" |
| 143 }, |
| 144 "scopes": [ |
| 145 "https://www.googleapis.com/auth/cloud-platform" |
| 146 ] |
| 147 }, |
| 148 "get": { |
| 149 "description": "Gets a Role definition.", |
| 150 "httpMethod": "GET", |
| 151 "id": "iam.projects.roles.get", |
| 152 "parameterOrder": [ |
| 153 "name" |
| 154 ], |
| 155 "parameters": { |
| 156 "name": { |
| 157 "description": "The resource name of the rol
e in one of the following formats:\n`roles/{ROLE_NAME}`\n`organizations/{ORGANIZ
ATION_ID}/roles/{ROLE_NAME}`\n`projects/{PROJECT_ID}/roles/{ROLE_NAME}`", |
| 158 "location": "path", |
| 159 "pattern": "^projects/[^/]+/roles/[^/]+$", |
| 160 "required": true, |
| 161 "type": "string" |
| 162 } |
| 163 }, |
| 164 "path": "v1/{+name}", |
| 165 "response": { |
| 166 "$ref": "Role" |
| 167 }, |
| 168 "scopes": [ |
| 169 "https://www.googleapis.com/auth/cloud-platform" |
| 170 ] |
| 171 }, |
| 172 "patch": { |
| 173 "description": "Updates a Role definition.", |
| 174 "httpMethod": "PATCH", |
| 175 "id": "iam.projects.roles.patch", |
| 176 "parameterOrder": [ |
| 177 "name" |
| 178 ], |
| 179 "parameters": { |
| 180 "updateMask": { |
| 181 "description": "A mask describing which fiel
ds in the Role have changed.", |
| 182 "format": "google-fieldmask", |
| 183 "location": "query", |
| 184 "type": "string" |
| 185 }, |
| 186 "name": { |
| 187 "description": "The resource name of the rol
e in one of the following formats:\n`roles/{ROLE_NAME}`\n`organizations/{ORGANIZ
ATION_ID}/roles/{ROLE_NAME}`\n`projects/{PROJECT_ID}/roles/{ROLE_NAME}`", |
| 188 "location": "path", |
| 189 "pattern": "^projects/[^/]+/roles/[^/]+$", |
| 190 "required": true, |
| 191 "type": "string" |
| 192 } |
| 193 }, |
| 194 "path": "v1/{+name}", |
| 195 "request": { |
| 196 "$ref": "Role" |
| 197 }, |
| 198 "response": { |
| 199 "$ref": "Role" |
| 200 }, |
| 201 "scopes": [ |
| 202 "https://www.googleapis.com/auth/cloud-platform" |
| 203 ] |
| 204 }, |
121 "delete": { | 205 "delete": { |
122 "description": "Soft deletes a role. The role is sus
pended and cannot be used to create new\nIAM Policy Bindings.\nThe Role will not
be included in `ListRoles()` unless `show_deleted` is set\nin the `ListRolesReq
uest`. The Role contains the deleted boolean set.\nExisting Bindings remains, bu
t are inactive. The Role can be undeleted\nwithin 7 days. After 7 days the Role
is deleted and all Bindings associated\nwith the role are removed.", | 206 "description": "Soft deletes a role. The role is sus
pended and cannot be used to create new\nIAM Policy Bindings.\nThe Role will not
be included in `ListRoles()` unless `show_deleted` is set\nin the `ListRolesReq
uest`. The Role contains the deleted boolean set.\nExisting Bindings remains, bu
t are inactive. The Role can be undeleted\nwithin 7 days. After 7 days the Role
is deleted and all Bindings associated\nwith the role are removed.", |
123 "httpMethod": "DELETE", | 207 "httpMethod": "DELETE", |
124 "id": "iam.projects.roles.delete", | 208 "id": "iam.projects.roles.delete", |
125 "parameterOrder": [ | 209 "parameterOrder": [ |
126 "name" | 210 "name" |
127 ], | 211 ], |
128 "parameters": { | 212 "parameters": { |
129 "name": { | 213 "name": { |
130 "description": "The resource name of the rol
e in one of the following formats:\n`organizations/{ORGANIZATION_ID}/roles/{ROLE
_NAME}`\n`projects/{PROJECT_ID}/roles/{ROLE_NAME}`", | 214 "description": "The resource name of the rol
e in one of the following formats:\n`organizations/{ORGANIZATION_ID}/roles/{ROLE
_NAME}`\n`projects/{PROJECT_ID}/roles/{ROLE_NAME}`", |
(...skipping 18 matching lines...) Expand all Loading... |
149 ] | 233 ] |
150 }, | 234 }, |
151 "list": { | 235 "list": { |
152 "description": "Lists the Roles defined on a resourc
e.", | 236 "description": "Lists the Roles defined on a resourc
e.", |
153 "httpMethod": "GET", | 237 "httpMethod": "GET", |
154 "id": "iam.projects.roles.list", | 238 "id": "iam.projects.roles.list", |
155 "parameterOrder": [ | 239 "parameterOrder": [ |
156 "parent" | 240 "parent" |
157 ], | 241 ], |
158 "parameters": { | 242 "parameters": { |
159 "parent": { | |
160 "description": "The resource name of the par
ent resource in one of the following formats:\n`` (empty string) -- this refers
to curated roles.\n`organizations/{ORGANIZATION_ID}`\n`projects/{PROJECT_ID}`", | |
161 "location": "path", | |
162 "pattern": "^projects/[^/]+$", | |
163 "required": true, | |
164 "type": "string" | |
165 }, | |
166 "showDeleted": { | 243 "showDeleted": { |
167 "description": "Include Roles that have been
deleted.", | 244 "description": "Include Roles that have been
deleted.", |
168 "location": "query", | 245 "location": "query", |
169 "type": "boolean" | 246 "type": "boolean" |
170 }, | 247 }, |
171 "pageToken": { | 248 "pageToken": { |
172 "description": "Optional pagination token re
turned in an earlier ListRolesResponse.", | 249 "description": "Optional pagination token re
turned in an earlier ListRolesResponse.", |
173 "location": "query", | 250 "location": "query", |
174 "type": "string" | 251 "type": "string" |
175 }, | 252 }, |
176 "pageSize": { | 253 "pageSize": { |
177 "description": "Optional limit on the number
of roles to include in the response.", | 254 "description": "Optional limit on the number
of roles to include in the response.", |
178 "format": "int32", | 255 "format": "int32", |
179 "location": "query", | 256 "location": "query", |
180 "type": "integer" | 257 "type": "integer" |
181 }, | 258 }, |
182 "view": { | 259 "view": { |
183 "description": "Optional view for the return
ed Role objects.", | 260 "description": "Optional view for the return
ed Role objects.", |
184 "enum": [ | 261 "enum": [ |
185 "BASIC", | 262 "BASIC", |
186 "FULL" | 263 "FULL" |
187 ], | 264 ], |
188 "location": "query", | 265 "location": "query", |
189 "type": "string" | 266 "type": "string" |
| 267 }, |
| 268 "parent": { |
| 269 "description": "The resource name of the par
ent resource in one of the following formats:\n`` (empty string) -- this refers
to curated roles.\n`organizations/{ORGANIZATION_ID}`\n`projects/{PROJECT_ID}`", |
| 270 "location": "path", |
| 271 "pattern": "^projects/[^/]+$", |
| 272 "required": true, |
| 273 "type": "string" |
190 } | 274 } |
191 }, | 275 }, |
192 "path": "v1/{+parent}/roles", | 276 "path": "v1/{+parent}/roles", |
193 "response": { | 277 "response": { |
194 "$ref": "ListRolesResponse" | 278 "$ref": "ListRolesResponse" |
195 }, | 279 }, |
196 "scopes": [ | 280 "scopes": [ |
197 "https://www.googleapis.com/auth/cloud-platform" | 281 "https://www.googleapis.com/auth/cloud-platform" |
198 ] | 282 ] |
199 }, | 283 }, |
(...skipping 16 matching lines...) Expand all Loading... |
216 "path": "v1/{+parent}/roles", | 300 "path": "v1/{+parent}/roles", |
217 "request": { | 301 "request": { |
218 "$ref": "CreateRoleRequest" | 302 "$ref": "CreateRoleRequest" |
219 }, | 303 }, |
220 "response": { | 304 "response": { |
221 "$ref": "Role" | 305 "$ref": "Role" |
222 }, | 306 }, |
223 "scopes": [ | 307 "scopes": [ |
224 "https://www.googleapis.com/auth/cloud-platform" | 308 "https://www.googleapis.com/auth/cloud-platform" |
225 ] | 309 ] |
226 }, | |
227 "patch": { | |
228 "description": "Updates a Role definition.", | |
229 "httpMethod": "PATCH", | |
230 "id": "iam.projects.roles.patch", | |
231 "parameterOrder": [ | |
232 "name" | |
233 ], | |
234 "parameters": { | |
235 "updateMask": { | |
236 "description": "A mask describing which fiel
ds in the Role have changed.", | |
237 "format": "google-fieldmask", | |
238 "location": "query", | |
239 "type": "string" | |
240 }, | |
241 "name": { | |
242 "description": "The resource name of the rol
e in one of the following formats:\n`roles/{ROLE_NAME}`\n`organizations/{ORGANIZ
ATION_ID}/roles/{ROLE_NAME}`\n`projects/{PROJECT_ID}/roles/{ROLE_NAME}`", | |
243 "location": "path", | |
244 "pattern": "^projects/[^/]+/roles/[^/]+$", | |
245 "required": true, | |
246 "type": "string" | |
247 } | |
248 }, | |
249 "path": "v1/{+name}", | |
250 "request": { | |
251 "$ref": "Role" | |
252 }, | |
253 "response": { | |
254 "$ref": "Role" | |
255 }, | |
256 "scopes": [ | |
257 "https://www.googleapis.com/auth/cloud-platform" | |
258 ] | |
259 }, | |
260 "undelete": { | |
261 "description": "Undelete a Role, bringing it back in
its previous state.", | |
262 "httpMethod": "POST", | |
263 "id": "iam.projects.roles.undelete", | |
264 "parameterOrder": [ | |
265 "name" | |
266 ], | |
267 "parameters": { | |
268 "name": { | |
269 "description": "The resource name of the rol
e in one of the following formats:\n`organizations/{ORGANIZATION_ID}/roles/{ROLE
_NAME}`\n`projects/{PROJECT_ID}/roles/{ROLE_NAME}`", | |
270 "location": "path", | |
271 "pattern": "^projects/[^/]+/roles/[^/]+$", | |
272 "required": true, | |
273 "type": "string" | |
274 } | |
275 }, | |
276 "path": "v1/{+name}:undelete", | |
277 "request": { | |
278 "$ref": "UndeleteRoleRequest" | |
279 }, | |
280 "response": { | |
281 "$ref": "Role" | |
282 }, | |
283 "scopes": [ | |
284 "https://www.googleapis.com/auth/cloud-platform" | |
285 ] | |
286 }, | |
287 "get": { | |
288 "description": "Gets a Role definition.", | |
289 "httpMethod": "GET", | |
290 "id": "iam.projects.roles.get", | |
291 "parameterOrder": [ | |
292 "name" | |
293 ], | |
294 "parameters": { | |
295 "name": { | |
296 "description": "The resource name of the rol
e in one of the following formats:\n`roles/{ROLE_NAME}`\n`organizations/{ORGANIZ
ATION_ID}/roles/{ROLE_NAME}`\n`projects/{PROJECT_ID}/roles/{ROLE_NAME}`", | |
297 "location": "path", | |
298 "pattern": "^projects/[^/]+/roles/[^/]+$", | |
299 "required": true, | |
300 "type": "string" | |
301 } | |
302 }, | |
303 "path": "v1/{+name}", | |
304 "response": { | |
305 "$ref": "Role" | |
306 }, | |
307 "scopes": [ | |
308 "https://www.googleapis.com/auth/cloud-platform" | |
309 ] | |
310 } | 310 } |
311 } | 311 } |
312 }, | 312 }, |
313 "serviceAccounts": { | 313 "serviceAccounts": { |
314 "methods": { | 314 "methods": { |
| 315 "get": { |
| 316 "description": "Gets a ServiceAccount.", |
| 317 "httpMethod": "GET", |
| 318 "id": "iam.projects.serviceAccounts.get", |
| 319 "parameterOrder": [ |
| 320 "name" |
| 321 ], |
| 322 "parameters": { |
| 323 "name": { |
| 324 "description": "The resource name of the ser
vice account in the following format:\n`projects/{PROJECT_ID}/serviceAccounts/{S
ERVICE_ACCOUNT_EMAIL}`.\nUsing `-` as a wildcard for the project will infer the
project from\nthe account. The `account` value can be the `email` address or the
\n`unique_id` of the service account.", |
| 325 "location": "path", |
| 326 "pattern": "^projects/[^/]+/serviceAccounts/
[^/]+$", |
| 327 "required": true, |
| 328 "type": "string" |
| 329 } |
| 330 }, |
| 331 "path": "v1/{+name}", |
| 332 "response": { |
| 333 "$ref": "ServiceAccount" |
| 334 }, |
| 335 "scopes": [ |
| 336 "https://www.googleapis.com/auth/cloud-platform" |
| 337 ] |
| 338 }, |
315 "update": { | 339 "update": { |
316 "description": "Updates a ServiceAccount.\n\nCurrent
ly, only the following fields are updatable:\n`display_name` .\nThe `etag` is ma
ndatory.", | 340 "description": "Updates a ServiceAccount.\n\nCurrent
ly, only the following fields are updatable:\n`display_name` .\nThe `etag` is ma
ndatory.", |
317 "httpMethod": "PUT", | 341 "httpMethod": "PUT", |
318 "id": "iam.projects.serviceAccounts.update", | 342 "id": "iam.projects.serviceAccounts.update", |
319 "parameterOrder": [ | 343 "parameterOrder": [ |
320 "name" | 344 "name" |
321 ], | 345 ], |
322 "parameters": { | 346 "parameters": { |
323 "name": { | 347 "name": { |
324 "description": "The resource name of the ser
vice account in the following format:\n`projects/{PROJECT_ID}/serviceAccounts/{S
ERVICE_ACCOUNT_EMAIL}`.\n\nRequests using `-` as a wildcard for the project will
infer the project\nfrom the `account` and the `account` value can be the `email
` address or\nthe `unique_id` of the service account.\n\nIn responses the resour
ce name will always be in the format\n`projects/{PROJECT_ID}/serviceAccounts/{SE
RVICE_ACCOUNT_EMAIL}`.", | 348 "description": "The resource name of the ser
vice account in the following format:\n`projects/{PROJECT_ID}/serviceAccounts/{S
ERVICE_ACCOUNT_EMAIL}`.\n\nRequests using `-` as a wildcard for the project will
infer the project\nfrom the `account` and the `account` value can be the `email
` address or\nthe `unique_id` of the service account.\n\nIn responses the resour
ce name will always be in the format\n`projects/{PROJECT_ID}/serviceAccounts/{SE
RVICE_ACCOUNT_EMAIL}`.", |
(...skipping 120 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
445 } | 469 } |
446 }, | 470 }, |
447 "path": "v1/{+name}/serviceAccounts", | 471 "path": "v1/{+name}/serviceAccounts", |
448 "response": { | 472 "response": { |
449 "$ref": "ListServiceAccountsResponse" | 473 "$ref": "ListServiceAccountsResponse" |
450 }, | 474 }, |
451 "scopes": [ | 475 "scopes": [ |
452 "https://www.googleapis.com/auth/cloud-platform" | 476 "https://www.googleapis.com/auth/cloud-platform" |
453 ] | 477 ] |
454 }, | 478 }, |
455 "create": { | 479 "setIamPolicy": { |
456 "description": "Creates a ServiceAccount\nand return
s it.", | 480 "description": "Sets the IAM access control policy f
or a\nServiceAccount.", |
457 "httpMethod": "POST", | 481 "httpMethod": "POST", |
458 "id": "iam.projects.serviceAccounts.create", | 482 "id": "iam.projects.serviceAccounts.setIamPolicy", |
459 "parameterOrder": [ | 483 "parameterOrder": [ |
460 "name" | 484 "resource" |
461 ], | 485 ], |
462 "parameters": { | 486 "parameters": { |
463 "name": { | 487 "resource": { |
464 "description": "Required. The resource name
of the project associated with the service\naccounts, such as `projects/my-proje
ct-123`.", | 488 "description": "REQUIRED: The resource for w
hich the policy is being specified.\nSee the operation documentation for the app
ropriate value for this field.", |
465 "location": "path", | 489 "location": "path", |
466 "pattern": "^projects/[^/]+$", | 490 "pattern": "^projects/[^/]+/serviceAccounts/
[^/]+$", |
467 "required": true, | 491 "required": true, |
468 "type": "string" | 492 "type": "string" |
469 } | 493 } |
470 }, | 494 }, |
471 "path": "v1/{+name}/serviceAccounts", | 495 "path": "v1/{+resource}:setIamPolicy", |
472 "request": { | 496 "request": { |
473 "$ref": "CreateServiceAccountRequest" | 497 "$ref": "SetIamPolicyRequest" |
474 }, | 498 }, |
475 "response": { | 499 "response": { |
476 "$ref": "ServiceAccount" | 500 "$ref": "Policy" |
477 }, | 501 }, |
478 "scopes": [ | 502 "scopes": [ |
479 "https://www.googleapis.com/auth/cloud-platform" | 503 "https://www.googleapis.com/auth/cloud-platform" |
480 ] | 504 ] |
481 }, | 505 }, |
482 "signJwt": { | 506 "signJwt": { |
483 "description": "Signs a JWT using a service account'
s system-managed private key.\n\nIf no expiry time (`exp`) is provided in the `S
ignJwtRequest`, IAM sets an\nan expiry time of one hour by default. If you reque
st an expiry time of\nmore than one hour, the request will fail.", | 507 "description": "Signs a JWT using a service account'
s system-managed private key.\n\nIf no expiry time (`exp`) is provided in the `S
ignJwtRequest`, IAM sets an\nan expiry time of one hour by default. If you reque
st an expiry time of\nmore than one hour, the request will fail.", |
484 "httpMethod": "POST", | 508 "httpMethod": "POST", |
485 "id": "iam.projects.serviceAccounts.signJwt", | 509 "id": "iam.projects.serviceAccounts.signJwt", |
486 "parameterOrder": [ | 510 "parameterOrder": [ |
(...skipping 12 matching lines...) Expand all Loading... |
499 "request": { | 523 "request": { |
500 "$ref": "SignJwtRequest" | 524 "$ref": "SignJwtRequest" |
501 }, | 525 }, |
502 "response": { | 526 "response": { |
503 "$ref": "SignJwtResponse" | 527 "$ref": "SignJwtResponse" |
504 }, | 528 }, |
505 "scopes": [ | 529 "scopes": [ |
506 "https://www.googleapis.com/auth/cloud-platform" | 530 "https://www.googleapis.com/auth/cloud-platform" |
507 ] | 531 ] |
508 }, | 532 }, |
509 "setIamPolicy": { | 533 "create": { |
510 "description": "Sets the IAM access control policy f
or a\nServiceAccount.", | 534 "description": "Creates a ServiceAccount\nand return
s it.", |
511 "httpMethod": "POST", | 535 "httpMethod": "POST", |
512 "id": "iam.projects.serviceAccounts.setIamPolicy", | 536 "id": "iam.projects.serviceAccounts.create", |
513 "parameterOrder": [ | 537 "parameterOrder": [ |
514 "resource" | 538 "name" |
515 ], | 539 ], |
516 "parameters": { | 540 "parameters": { |
517 "resource": { | 541 "name": { |
518 "description": "REQUIRED: The resource for w
hich the policy is being specified.\nSee the operation documentation for the app
ropriate value for this field.", | 542 "description": "Required. The resource name
of the project associated with the service\naccounts, such as `projects/my-proje
ct-123`.", |
519 "location": "path", | 543 "location": "path", |
520 "pattern": "^projects/[^/]+/serviceAccounts/
[^/]+$", | 544 "pattern": "^projects/[^/]+$", |
521 "required": true, | 545 "required": true, |
522 "type": "string" | 546 "type": "string" |
523 } | 547 } |
524 }, | 548 }, |
525 "path": "v1/{+resource}:setIamPolicy", | 549 "path": "v1/{+name}/serviceAccounts", |
526 "request": { | 550 "request": { |
527 "$ref": "SetIamPolicyRequest" | 551 "$ref": "CreateServiceAccountRequest" |
528 }, | 552 }, |
529 "response": { | 553 "response": { |
530 "$ref": "Policy" | 554 "$ref": "ServiceAccount" |
531 }, | 555 }, |
532 "scopes": [ | 556 "scopes": [ |
533 "https://www.googleapis.com/auth/cloud-platform" | 557 "https://www.googleapis.com/auth/cloud-platform" |
534 ] | 558 ] |
535 }, | 559 }, |
536 "getIamPolicy": { | 560 "getIamPolicy": { |
537 "description": "Returns the IAM access control polic
y for a\nServiceAccount.", | 561 "description": "Returns the IAM access control polic
y for a\nServiceAccount.", |
538 "httpMethod": "POST", | 562 "httpMethod": "POST", |
539 "id": "iam.projects.serviceAccounts.getIamPolicy", | 563 "id": "iam.projects.serviceAccounts.getIamPolicy", |
540 "parameterOrder": [ | 564 "parameterOrder": [ |
541 "resource" | 565 "resource" |
542 ], | 566 ], |
543 "parameters": { | 567 "parameters": { |
544 "resource": { | 568 "resource": { |
545 "description": "REQUIRED: The resource for w
hich the policy is being requested.\nSee the operation documentation for the app
ropriate value for this field.", | 569 "description": "REQUIRED: The resource for w
hich the policy is being requested.\nSee the operation documentation for the app
ropriate value for this field.", |
546 "location": "path", | 570 "location": "path", |
547 "pattern": "^projects/[^/]+/serviceAccounts/
[^/]+$", | 571 "pattern": "^projects/[^/]+/serviceAccounts/
[^/]+$", |
548 "required": true, | 572 "required": true, |
549 "type": "string" | 573 "type": "string" |
550 } | 574 } |
551 }, | 575 }, |
552 "path": "v1/{+resource}:getIamPolicy", | 576 "path": "v1/{+resource}:getIamPolicy", |
553 "response": { | 577 "response": { |
554 "$ref": "Policy" | 578 "$ref": "Policy" |
555 }, | 579 }, |
556 "scopes": [ | 580 "scopes": [ |
557 "https://www.googleapis.com/auth/cloud-platform" | 581 "https://www.googleapis.com/auth/cloud-platform" |
558 ] | 582 ] |
559 }, | |
560 "get": { | |
561 "description": "Gets a ServiceAccount.", | |
562 "httpMethod": "GET", | |
563 "id": "iam.projects.serviceAccounts.get", | |
564 "parameterOrder": [ | |
565 "name" | |
566 ], | |
567 "parameters": { | |
568 "name": { | |
569 "description": "The resource name of the ser
vice account in the following format:\n`projects/{PROJECT_ID}/serviceAccounts/{S
ERVICE_ACCOUNT_EMAIL}`.\nUsing `-` as a wildcard for the project will infer the
project from\nthe account. The `account` value can be the `email` address or the
\n`unique_id` of the service account.", | |
570 "location": "path", | |
571 "pattern": "^projects/[^/]+/serviceAccounts/
[^/]+$", | |
572 "required": true, | |
573 "type": "string" | |
574 } | |
575 }, | |
576 "path": "v1/{+name}", | |
577 "response": { | |
578 "$ref": "ServiceAccount" | |
579 }, | |
580 "scopes": [ | |
581 "https://www.googleapis.com/auth/cloud-platform" | |
582 ] | |
583 } | 583 } |
584 }, | 584 }, |
585 "resources": { | 585 "resources": { |
586 "keys": { | 586 "keys": { |
587 "methods": { | 587 "methods": { |
588 "create": { | |
589 "description": "Creates a ServiceAccountKey\
nand returns it.", | |
590 "httpMethod": "POST", | |
591 "id": "iam.projects.serviceAccounts.keys.cre
ate", | |
592 "parameterOrder": [ | |
593 "name" | |
594 ], | |
595 "parameters": { | |
596 "name": { | |
597 "description": "The resource name of
the service account in the following format:\n`projects/{PROJECT_ID}/serviceAcc
ounts/{SERVICE_ACCOUNT_EMAIL}`.\nUsing `-` as a wildcard for the project will in
fer the project from\nthe account. The `account` value can be the `email` addres
s or the\n`unique_id` of the service account.", | |
598 "location": "path", | |
599 "pattern": "^projects/[^/]+/serviceA
ccounts/[^/]+$", | |
600 "required": true, | |
601 "type": "string" | |
602 } | |
603 }, | |
604 "path": "v1/{+name}/keys", | |
605 "request": { | |
606 "$ref": "CreateServiceAccountKeyRequest" | |
607 }, | |
608 "response": { | |
609 "$ref": "ServiceAccountKey" | |
610 }, | |
611 "scopes": [ | |
612 "https://www.googleapis.com/auth/cloud-p
latform" | |
613 ] | |
614 }, | |
615 "delete": { | |
616 "description": "Deletes a ServiceAccountKey.
", | |
617 "httpMethod": "DELETE", | |
618 "id": "iam.projects.serviceAccounts.keys.del
ete", | |
619 "parameterOrder": [ | |
620 "name" | |
621 ], | |
622 "parameters": { | |
623 "name": { | |
624 "description": "The resource name of
the service account key in the following format:\n`projects/{PROJECT_ID}/servic
eAccounts/{SERVICE_ACCOUNT_EMAIL}/keys/{key}`.\nUsing `-` as a wildcard for the
project will infer the project from\nthe account. The `account` value can be the
`email` address or the\n`unique_id` of the service account.", | |
625 "location": "path", | |
626 "pattern": "^projects/[^/]+/serviceA
ccounts/[^/]+/keys/[^/]+$", | |
627 "required": true, | |
628 "type": "string" | |
629 } | |
630 }, | |
631 "path": "v1/{+name}", | |
632 "response": { | |
633 "$ref": "Empty" | |
634 }, | |
635 "scopes": [ | |
636 "https://www.googleapis.com/auth/cloud-p
latform" | |
637 ] | |
638 }, | |
639 "get": { | 588 "get": { |
640 "description": "Gets the ServiceAccountKey\n
by key id.", | 589 "description": "Gets the ServiceAccountKey\n
by key id.", |
641 "httpMethod": "GET", | 590 "httpMethod": "GET", |
642 "id": "iam.projects.serviceAccounts.keys.get
", | 591 "id": "iam.projects.serviceAccounts.keys.get
", |
643 "parameterOrder": [ | 592 "parameterOrder": [ |
644 "name" | 593 "name" |
645 ], | 594 ], |
646 "parameters": { | 595 "parameters": { |
647 "publicKeyType": { | 596 "publicKeyType": { |
648 "description": "The output format of
the public key requested.\nX509_PEM is the default output format.", | 597 "description": "The output format of
the public key requested.\nX509_PEM is the default output format.", |
(...skipping 22 matching lines...) Expand all Loading... |
671 ] | 620 ] |
672 }, | 621 }, |
673 "list": { | 622 "list": { |
674 "description": "Lists ServiceAccountKeys.", | 623 "description": "Lists ServiceAccountKeys.", |
675 "httpMethod": "GET", | 624 "httpMethod": "GET", |
676 "id": "iam.projects.serviceAccounts.keys.lis
t", | 625 "id": "iam.projects.serviceAccounts.keys.lis
t", |
677 "parameterOrder": [ | 626 "parameterOrder": [ |
678 "name" | 627 "name" |
679 ], | 628 ], |
680 "parameters": { | 629 "parameters": { |
| 630 "name": { |
| 631 "description": "The resource name of
the service account in the following format:\n`projects/{PROJECT_ID}/serviceAcc
ounts/{SERVICE_ACCOUNT_EMAIL}`.\n\nUsing `-` as a wildcard for the project, will
infer the project from\nthe account. The `account` value can be the `email` add
ress or the\n`unique_id` of the service account.", |
| 632 "location": "path", |
| 633 "pattern": "^projects/[^/]+/serviceA
ccounts/[^/]+$", |
| 634 "required": true, |
| 635 "type": "string" |
| 636 }, |
681 "keyTypes": { | 637 "keyTypes": { |
682 "description": "Filters the types of
keys the user wants to include in the list\nresponse. Duplicate key types are n
ot allowed. If no key type\nis provided, all keys are returned.", | 638 "description": "Filters the types of
keys the user wants to include in the list\nresponse. Duplicate key types are n
ot allowed. If no key type\nis provided, all keys are returned.", |
683 "enum": [ | 639 "enum": [ |
684 "KEY_TYPE_UNSPECIFIED", | 640 "KEY_TYPE_UNSPECIFIED", |
685 "USER_MANAGED", | 641 "USER_MANAGED", |
686 "SYSTEM_MANAGED" | 642 "SYSTEM_MANAGED" |
687 ], | 643 ], |
688 "location": "query", | 644 "location": "query", |
689 "repeated": true, | 645 "repeated": true, |
690 "type": "string" | 646 "type": "string" |
691 }, | 647 } |
| 648 }, |
| 649 "path": "v1/{+name}/keys", |
| 650 "response": { |
| 651 "$ref": "ListServiceAccountKeysResponse" |
| 652 }, |
| 653 "scopes": [ |
| 654 "https://www.googleapis.com/auth/cloud-p
latform" |
| 655 ] |
| 656 }, |
| 657 "create": { |
| 658 "description": "Creates a ServiceAccountKey\
nand returns it.", |
| 659 "httpMethod": "POST", |
| 660 "id": "iam.projects.serviceAccounts.keys.cre
ate", |
| 661 "parameterOrder": [ |
| 662 "name" |
| 663 ], |
| 664 "parameters": { |
692 "name": { | 665 "name": { |
693 "description": "The resource name of
the service account in the following format:\n`projects/{PROJECT_ID}/serviceAcc
ounts/{SERVICE_ACCOUNT_EMAIL}`.\n\nUsing `-` as a wildcard for the project, will
infer the project from\nthe account. The `account` value can be the `email` add
ress or the\n`unique_id` of the service account.", | 666 "description": "The resource name of
the service account in the following format:\n`projects/{PROJECT_ID}/serviceAcc
ounts/{SERVICE_ACCOUNT_EMAIL}`.\nUsing `-` as a wildcard for the project will in
fer the project from\nthe account. The `account` value can be the `email` addres
s or the\n`unique_id` of the service account.", |
694 "location": "path", | 667 "location": "path", |
695 "pattern": "^projects/[^/]+/serviceA
ccounts/[^/]+$", | 668 "pattern": "^projects/[^/]+/serviceA
ccounts/[^/]+$", |
696 "required": true, | 669 "required": true, |
697 "type": "string" | 670 "type": "string" |
698 } | 671 } |
699 }, | 672 }, |
700 "path": "v1/{+name}/keys", | 673 "path": "v1/{+name}/keys", |
| 674 "request": { |
| 675 "$ref": "CreateServiceAccountKeyRequest" |
| 676 }, |
701 "response": { | 677 "response": { |
702 "$ref": "ListServiceAccountKeysResponse" | 678 "$ref": "ServiceAccountKey" |
703 }, | 679 }, |
704 "scopes": [ | 680 "scopes": [ |
705 "https://www.googleapis.com/auth/cloud-p
latform" | 681 "https://www.googleapis.com/auth/cloud-p
latform" |
| 682 ] |
| 683 }, |
| 684 "delete": { |
| 685 "description": "Deletes a ServiceAccountKey.
", |
| 686 "httpMethod": "DELETE", |
| 687 "id": "iam.projects.serviceAccounts.keys.del
ete", |
| 688 "parameterOrder": [ |
| 689 "name" |
| 690 ], |
| 691 "parameters": { |
| 692 "name": { |
| 693 "description": "The resource name of
the service account key in the following format:\n`projects/{PROJECT_ID}/servic
eAccounts/{SERVICE_ACCOUNT_EMAIL}/keys/{key}`.\nUsing `-` as a wildcard for the
project will infer the project from\nthe account. The `account` value can be the
`email` address or the\n`unique_id` of the service account.", |
| 694 "location": "path", |
| 695 "pattern": "^projects/[^/]+/serviceA
ccounts/[^/]+/keys/[^/]+$", |
| 696 "required": true, |
| 697 "type": "string" |
| 698 } |
| 699 }, |
| 700 "path": "v1/{+name}", |
| 701 "response": { |
| 702 "$ref": "Empty" |
| 703 }, |
| 704 "scopes": [ |
| 705 "https://www.googleapis.com/auth/cloud-p
latform" |
706 ] | 706 ] |
707 } | 707 } |
708 } | 708 } |
709 } | 709 } |
710 } | 710 } |
711 } | 711 } |
712 } | 712 } |
713 }, | 713 }, |
714 "permissions": { | 714 "permissions": { |
715 "methods": { | 715 "methods": { |
(...skipping 58 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
774 "scopes": [ | 774 "scopes": [ |
775 "https://www.googleapis.com/auth/cloud-platform" | 775 "https://www.googleapis.com/auth/cloud-platform" |
776 ] | 776 ] |
777 }, | 777 }, |
778 "list": { | 778 "list": { |
779 "description": "Lists the Roles defined on a resource.", | 779 "description": "Lists the Roles defined on a resource.", |
780 "httpMethod": "GET", | 780 "httpMethod": "GET", |
781 "id": "iam.roles.list", | 781 "id": "iam.roles.list", |
782 "parameterOrder": [], | 782 "parameterOrder": [], |
783 "parameters": { | 783 "parameters": { |
784 "pageToken": { | |
785 "description": "Optional pagination token returned i
n an earlier ListRolesResponse.", | |
786 "location": "query", | |
787 "type": "string" | |
788 }, | |
789 "pageSize": { | |
790 "description": "Optional limit on the number of role
s to include in the response.", | |
791 "format": "int32", | |
792 "location": "query", | |
793 "type": "integer" | |
794 }, | |
795 "view": { | 784 "view": { |
796 "description": "Optional view for the returned Role
objects.", | 785 "description": "Optional view for the returned Role
objects.", |
797 "enum": [ | 786 "enum": [ |
798 "BASIC", | 787 "BASIC", |
799 "FULL" | 788 "FULL" |
800 ], | 789 ], |
801 "location": "query", | 790 "location": "query", |
802 "type": "string" | 791 "type": "string" |
803 }, | 792 }, |
804 "parent": { | 793 "parent": { |
805 "description": "The resource name of the parent reso
urce in one of the following formats:\n`` (empty string) -- this refers to curat
ed roles.\n`organizations/{ORGANIZATION_ID}`\n`projects/{PROJECT_ID}`", | 794 "description": "The resource name of the parent reso
urce in one of the following formats:\n`` (empty string) -- this refers to curat
ed roles.\n`organizations/{ORGANIZATION_ID}`\n`projects/{PROJECT_ID}`", |
806 "location": "query", | 795 "location": "query", |
807 "type": "string" | 796 "type": "string" |
808 }, | 797 }, |
809 "showDeleted": { | 798 "showDeleted": { |
810 "description": "Include Roles that have been deleted
.", | 799 "description": "Include Roles that have been deleted
.", |
811 "location": "query", | 800 "location": "query", |
812 "type": "boolean" | 801 "type": "boolean" |
| 802 }, |
| 803 "pageToken": { |
| 804 "description": "Optional pagination token returned i
n an earlier ListRolesResponse.", |
| 805 "location": "query", |
| 806 "type": "string" |
| 807 }, |
| 808 "pageSize": { |
| 809 "description": "Optional limit on the number of role
s to include in the response.", |
| 810 "format": "int32", |
| 811 "location": "query", |
| 812 "type": "integer" |
813 } | 813 } |
814 }, | 814 }, |
815 "path": "v1/roles", | 815 "path": "v1/roles", |
816 "response": { | 816 "response": { |
817 "$ref": "ListRolesResponse" | 817 "$ref": "ListRolesResponse" |
818 }, | 818 }, |
819 "scopes": [ | 819 "scopes": [ |
820 "https://www.googleapis.com/auth/cloud-platform" | 820 "https://www.googleapis.com/auth/cloud-platform" |
821 ] | 821 ] |
822 } | 822 } |
823 } | 823 } |
824 }, | 824 }, |
825 "organizations": { | 825 "organizations": { |
826 "resources": { | 826 "resources": { |
827 "roles": { | 827 "roles": { |
828 "methods": { | 828 "methods": { |
829 "list": { | 829 "undelete": { |
830 "description": "Lists the Roles defined on a resourc
e.", | 830 "description": "Undelete a Role, bringing it back in
its previous state.", |
831 "httpMethod": "GET", | 831 "httpMethod": "POST", |
832 "id": "iam.organizations.roles.list", | 832 "id": "iam.organizations.roles.undelete", |
833 "parameterOrder": [ | 833 "parameterOrder": [ |
834 "parent" | 834 "name" |
835 ], | 835 ], |
836 "parameters": { | 836 "parameters": { |
837 "pageToken": { | 837 "name": { |
838 "description": "Optional pagination token re
turned in an earlier ListRolesResponse.", | 838 "description": "The resource name of the rol
e in one of the following formats:\n`organizations/{ORGANIZATION_ID}/roles/{ROLE
_NAME}`\n`projects/{PROJECT_ID}/roles/{ROLE_NAME}`", |
839 "location": "query", | |
840 "type": "string" | |
841 }, | |
842 "pageSize": { | |
843 "description": "Optional limit on the number
of roles to include in the response.", | |
844 "format": "int32", | |
845 "location": "query", | |
846 "type": "integer" | |
847 }, | |
848 "view": { | |
849 "description": "Optional view for the return
ed Role objects.", | |
850 "enum": [ | |
851 "BASIC", | |
852 "FULL" | |
853 ], | |
854 "location": "query", | |
855 "type": "string" | |
856 }, | |
857 "parent": { | |
858 "description": "The resource name of the par
ent resource in one of the following formats:\n`` (empty string) -- this refers
to curated roles.\n`organizations/{ORGANIZATION_ID}`\n`projects/{PROJECT_ID}`", | |
859 "location": "path", | 839 "location": "path", |
860 "pattern": "^organizations/[^/]+$", | 840 "pattern": "^organizations/[^/]+/roles/[^/]+
$", |
861 "required": true, | 841 "required": true, |
862 "type": "string" | 842 "type": "string" |
863 }, | |
864 "showDeleted": { | |
865 "description": "Include Roles that have been
deleted.", | |
866 "location": "query", | |
867 "type": "boolean" | |
868 } | 843 } |
869 }, | 844 }, |
870 "path": "v1/{+parent}/roles", | 845 "path": "v1/{+name}:undelete", |
| 846 "request": { |
| 847 "$ref": "UndeleteRoleRequest" |
| 848 }, |
871 "response": { | 849 "response": { |
872 "$ref": "ListRolesResponse" | 850 "$ref": "Role" |
873 }, | 851 }, |
874 "scopes": [ | 852 "scopes": [ |
875 "https://www.googleapis.com/auth/cloud-platform" | 853 "https://www.googleapis.com/auth/cloud-platform" |
876 ] | 854 ] |
877 }, | 855 }, |
878 "create": { | 856 "get": { |
879 "description": "Creates a new Role.", | 857 "description": "Gets a Role definition.", |
880 "httpMethod": "POST", | 858 "httpMethod": "GET", |
881 "id": "iam.organizations.roles.create", | 859 "id": "iam.organizations.roles.get", |
882 "parameterOrder": [ | 860 "parameterOrder": [ |
883 "parent" | 861 "name" |
884 ], | 862 ], |
885 "parameters": { | 863 "parameters": { |
886 "parent": { | 864 "name": { |
887 "description": "The resource name of the par
ent resource in one of the following formats:\n`organizations/{ORGANIZATION_ID}`
\n`projects/{PROJECT_ID}`", | 865 "description": "The resource name of the rol
e in one of the following formats:\n`roles/{ROLE_NAME}`\n`organizations/{ORGANIZ
ATION_ID}/roles/{ROLE_NAME}`\n`projects/{PROJECT_ID}/roles/{ROLE_NAME}`", |
888 "location": "path", | 866 "location": "path", |
889 "pattern": "^organizations/[^/]+$", | 867 "pattern": "^organizations/[^/]+/roles/[^/]+
$", |
890 "required": true, | 868 "required": true, |
891 "type": "string" | 869 "type": "string" |
892 } | 870 } |
893 }, | 871 }, |
894 "path": "v1/{+parent}/roles", | 872 "path": "v1/{+name}", |
895 "request": { | |
896 "$ref": "CreateRoleRequest" | |
897 }, | |
898 "response": { | 873 "response": { |
899 "$ref": "Role" | 874 "$ref": "Role" |
900 }, | 875 }, |
901 "scopes": [ | 876 "scopes": [ |
902 "https://www.googleapis.com/auth/cloud-platform" | 877 "https://www.googleapis.com/auth/cloud-platform" |
903 ] | 878 ] |
904 }, | 879 }, |
905 "patch": { | 880 "patch": { |
906 "description": "Updates a Role definition.", | 881 "description": "Updates a Role definition.", |
907 "httpMethod": "PATCH", | 882 "httpMethod": "PATCH", |
908 "id": "iam.organizations.roles.patch", | 883 "id": "iam.organizations.roles.patch", |
909 "parameterOrder": [ | 884 "parameterOrder": [ |
910 "name" | 885 "name" |
911 ], | 886 ], |
912 "parameters": { | 887 "parameters": { |
| 888 "updateMask": { |
| 889 "description": "A mask describing which fiel
ds in the Role have changed.", |
| 890 "format": "google-fieldmask", |
| 891 "location": "query", |
| 892 "type": "string" |
| 893 }, |
913 "name": { | 894 "name": { |
914 "description": "The resource name of the rol
e in one of the following formats:\n`roles/{ROLE_NAME}`\n`organizations/{ORGANIZ
ATION_ID}/roles/{ROLE_NAME}`\n`projects/{PROJECT_ID}/roles/{ROLE_NAME}`", | 895 "description": "The resource name of the rol
e in one of the following formats:\n`roles/{ROLE_NAME}`\n`organizations/{ORGANIZ
ATION_ID}/roles/{ROLE_NAME}`\n`projects/{PROJECT_ID}/roles/{ROLE_NAME}`", |
915 "location": "path", | 896 "location": "path", |
916 "pattern": "^organizations/[^/]+/roles/[^/]+
$", | 897 "pattern": "^organizations/[^/]+/roles/[^/]+
$", |
917 "required": true, | 898 "required": true, |
918 "type": "string" | 899 "type": "string" |
919 }, | |
920 "updateMask": { | |
921 "description": "A mask describing which fiel
ds in the Role have changed.", | |
922 "format": "google-fieldmask", | |
923 "location": "query", | |
924 "type": "string" | |
925 } | 900 } |
926 }, | 901 }, |
927 "path": "v1/{+name}", | 902 "path": "v1/{+name}", |
928 "request": { | 903 "request": { |
929 "$ref": "Role" | 904 "$ref": "Role" |
930 }, | 905 }, |
931 "response": { | 906 "response": { |
932 "$ref": "Role" | 907 "$ref": "Role" |
933 }, | 908 }, |
934 "scopes": [ | 909 "scopes": [ |
935 "https://www.googleapis.com/auth/cloud-platform" | 910 "https://www.googleapis.com/auth/cloud-platform" |
936 ] | 911 ] |
937 }, | 912 }, |
938 "undelete": { | 913 "delete": { |
939 "description": "Undelete a Role, bringing it back in
its previous state.", | 914 "description": "Soft deletes a role. The role is sus
pended and cannot be used to create new\nIAM Policy Bindings.\nThe Role will not
be included in `ListRoles()` unless `show_deleted` is set\nin the `ListRolesReq
uest`. The Role contains the deleted boolean set.\nExisting Bindings remains, bu
t are inactive. The Role can be undeleted\nwithin 7 days. After 7 days the Role
is deleted and all Bindings associated\nwith the role are removed.", |
940 "httpMethod": "POST", | 915 "httpMethod": "DELETE", |
941 "id": "iam.organizations.roles.undelete", | 916 "id": "iam.organizations.roles.delete", |
942 "parameterOrder": [ | 917 "parameterOrder": [ |
943 "name" | 918 "name" |
944 ], | 919 ], |
945 "parameters": { | 920 "parameters": { |
946 "name": { | 921 "name": { |
947 "description": "The resource name of the rol
e in one of the following formats:\n`organizations/{ORGANIZATION_ID}/roles/{ROLE
_NAME}`\n`projects/{PROJECT_ID}/roles/{ROLE_NAME}`", | 922 "description": "The resource name of the rol
e in one of the following formats:\n`organizations/{ORGANIZATION_ID}/roles/{ROLE
_NAME}`\n`projects/{PROJECT_ID}/roles/{ROLE_NAME}`", |
948 "location": "path", | 923 "location": "path", |
949 "pattern": "^organizations/[^/]+/roles/[^/]+
$", | 924 "pattern": "^organizations/[^/]+/roles/[^/]+
$", |
950 "required": true, | 925 "required": true, |
951 "type": "string" | 926 "type": "string" |
| 927 }, |
| 928 "etag": { |
| 929 "description": "Used to perform a consistent
read-modify-write.", |
| 930 "format": "byte", |
| 931 "location": "query", |
| 932 "type": "string" |
952 } | 933 } |
953 }, | 934 }, |
954 "path": "v1/{+name}:undelete", | 935 "path": "v1/{+name}", |
955 "request": { | |
956 "$ref": "UndeleteRoleRequest" | |
957 }, | |
958 "response": { | 936 "response": { |
959 "$ref": "Role" | 937 "$ref": "Role" |
960 }, | 938 }, |
961 "scopes": [ | 939 "scopes": [ |
962 "https://www.googleapis.com/auth/cloud-platform" | 940 "https://www.googleapis.com/auth/cloud-platform" |
963 ] | 941 ] |
964 }, | 942 }, |
965 "get": { | 943 "list": { |
966 "description": "Gets a Role definition.", | 944 "description": "Lists the Roles defined on a resourc
e.", |
967 "httpMethod": "GET", | 945 "httpMethod": "GET", |
968 "id": "iam.organizations.roles.get", | 946 "id": "iam.organizations.roles.list", |
969 "parameterOrder": [ | 947 "parameterOrder": [ |
970 "name" | 948 "parent" |
971 ], | 949 ], |
972 "parameters": { | 950 "parameters": { |
973 "name": { | 951 "showDeleted": { |
974 "description": "The resource name of the rol
e in one of the following formats:\n`roles/{ROLE_NAME}`\n`organizations/{ORGANIZ
ATION_ID}/roles/{ROLE_NAME}`\n`projects/{PROJECT_ID}/roles/{ROLE_NAME}`", | 952 "description": "Include Roles that have been
deleted.", |
| 953 "location": "query", |
| 954 "type": "boolean" |
| 955 }, |
| 956 "pageToken": { |
| 957 "description": "Optional pagination token re
turned in an earlier ListRolesResponse.", |
| 958 "location": "query", |
| 959 "type": "string" |
| 960 }, |
| 961 "pageSize": { |
| 962 "description": "Optional limit on the number
of roles to include in the response.", |
| 963 "format": "int32", |
| 964 "location": "query", |
| 965 "type": "integer" |
| 966 }, |
| 967 "view": { |
| 968 "description": "Optional view for the return
ed Role objects.", |
| 969 "enum": [ |
| 970 "BASIC", |
| 971 "FULL" |
| 972 ], |
| 973 "location": "query", |
| 974 "type": "string" |
| 975 }, |
| 976 "parent": { |
| 977 "description": "The resource name of the par
ent resource in one of the following formats:\n`` (empty string) -- this refers
to curated roles.\n`organizations/{ORGANIZATION_ID}`\n`projects/{PROJECT_ID}`", |
975 "location": "path", | 978 "location": "path", |
976 "pattern": "^organizations/[^/]+/roles/[^/]+
$", | 979 "pattern": "^organizations/[^/]+$", |
977 "required": true, | 980 "required": true, |
978 "type": "string" | 981 "type": "string" |
979 } | 982 } |
980 }, | 983 }, |
981 "path": "v1/{+name}", | 984 "path": "v1/{+parent}/roles", |
982 "response": { | 985 "response": { |
983 "$ref": "Role" | 986 "$ref": "ListRolesResponse" |
984 }, | 987 }, |
985 "scopes": [ | 988 "scopes": [ |
986 "https://www.googleapis.com/auth/cloud-platform" | 989 "https://www.googleapis.com/auth/cloud-platform" |
987 ] | 990 ] |
988 }, | 991 }, |
989 "delete": { | 992 "create": { |
990 "description": "Soft deletes a role. The role is sus
pended and cannot be used to create new\nIAM Policy Bindings.\nThe Role will not
be included in `ListRoles()` unless `show_deleted` is set\nin the `ListRolesReq
uest`. The Role contains the deleted boolean set.\nExisting Bindings remains, bu
t are inactive. The Role can be undeleted\nwithin 7 days. After 7 days the Role
is deleted and all Bindings associated\nwith the role are removed.", | 993 "description": "Creates a new Role.", |
991 "httpMethod": "DELETE", | 994 "httpMethod": "POST", |
992 "id": "iam.organizations.roles.delete", | 995 "id": "iam.organizations.roles.create", |
993 "parameterOrder": [ | 996 "parameterOrder": [ |
994 "name" | 997 "parent" |
995 ], | 998 ], |
996 "parameters": { | 999 "parameters": { |
997 "name": { | 1000 "parent": { |
998 "description": "The resource name of the rol
e in one of the following formats:\n`organizations/{ORGANIZATION_ID}/roles/{ROLE
_NAME}`\n`projects/{PROJECT_ID}/roles/{ROLE_NAME}`", | 1001 "description": "The resource name of the par
ent resource in one of the following formats:\n`organizations/{ORGANIZATION_ID}`
\n`projects/{PROJECT_ID}`", |
999 "location": "path", | 1002 "location": "path", |
1000 "pattern": "^organizations/[^/]+/roles/[^/]+
$", | 1003 "pattern": "^organizations/[^/]+$", |
1001 "required": true, | 1004 "required": true, |
1002 "type": "string" | 1005 "type": "string" |
1003 }, | |
1004 "etag": { | |
1005 "description": "Used to perform a consistent
read-modify-write.", | |
1006 "format": "byte", | |
1007 "location": "query", | |
1008 "type": "string" | |
1009 } | 1006 } |
1010 }, | 1007 }, |
1011 "path": "v1/{+name}", | 1008 "path": "v1/{+parent}/roles", |
| 1009 "request": { |
| 1010 "$ref": "CreateRoleRequest" |
| 1011 }, |
1012 "response": { | 1012 "response": { |
1013 "$ref": "Role" | 1013 "$ref": "Role" |
1014 }, | 1014 }, |
1015 "scopes": [ | 1015 "scopes": [ |
1016 "https://www.googleapis.com/auth/cloud-platform" | 1016 "https://www.googleapis.com/auth/cloud-platform" |
1017 ] | 1017 ] |
1018 } | 1018 } |
1019 } | 1019 } |
1020 } | 1020 } |
1021 } | 1021 } |
1022 } | 1022 } |
1023 }, | 1023 }, |
1024 "revision": "20170722", | 1024 "revision": "20170811", |
1025 "rootUrl": "https://iam.googleapis.com/", | 1025 "rootUrl": "https://iam.googleapis.com/", |
1026 "schemas": { | 1026 "schemas": { |
1027 "Empty": { | |
1028 "description": "A generic empty message that you can re-use to avoid
defining duplicated\nempty messages in your APIs. A typical example is to use i
t as the request\nor the response type of an API method. For instance:\n\n se
rvice Foo {\n rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty
);\n }\n\nThe JSON representation for `Empty` is empty JSON object `{}`.", | |
1029 "id": "Empty", | |
1030 "properties": {}, | |
1031 "type": "object" | |
1032 }, | |
1033 "CreateServiceAccountKeyRequest": { | |
1034 "description": "The service account key create request.", | |
1035 "id": "CreateServiceAccountKeyRequest", | |
1036 "properties": { | |
1037 "includePublicKeyData": { | |
1038 "type": "boolean" | |
1039 }, | |
1040 "keyAlgorithm": { | |
1041 "description": "Which type of key and algorithm to use for t
he key.\nThe default is currently a 2K RSA key. However this may change in the\
nfuture.", | |
1042 "enum": [ | |
1043 "KEY_ALG_UNSPECIFIED", | |
1044 "KEY_ALG_RSA_1024", | |
1045 "KEY_ALG_RSA_2048" | |
1046 ], | |
1047 "enumDescriptions": [ | |
1048 "An unspecified key algorithm.", | |
1049 "1k RSA Key.", | |
1050 "2k RSA Key." | |
1051 ], | |
1052 "type": "string" | |
1053 }, | |
1054 "privateKeyType": { | |
1055 "description": "The output format of the private key. `GOOGL
E_CREDENTIALS_FILE` is the\ndefault output format.", | |
1056 "enum": [ | |
1057 "TYPE_UNSPECIFIED", | |
1058 "TYPE_PKCS12_FILE", | |
1059 "TYPE_GOOGLE_CREDENTIALS_FILE" | |
1060 ], | |
1061 "enumDescriptions": [ | |
1062 "Unspecified. Equivalent to `TYPE_GOOGLE_CREDENTIALS_FIL
E`.", | |
1063 "PKCS12 format.\nThe password for the PKCS12 file is `no
tasecret`.\nFor more information, see https://tools.ietf.org/html/rfc7292.", | |
1064 "Google Credentials File format." | |
1065 ], | |
1066 "type": "string" | |
1067 } | |
1068 }, | |
1069 "type": "object" | |
1070 }, | |
1071 "SignJwtResponse": { | |
1072 "description": "The service account sign JWT response.", | |
1073 "id": "SignJwtResponse", | |
1074 "properties": { | |
1075 "signedJwt": { | |
1076 "description": "The signed JWT.", | |
1077 "type": "string" | |
1078 }, | |
1079 "keyId": { | |
1080 "description": "The id of the key used to sign the JWT.", | |
1081 "type": "string" | |
1082 } | |
1083 }, | |
1084 "type": "object" | |
1085 }, | |
1086 "TestIamPermissionsRequest": { | |
1087 "description": "Request message for `TestIamPermissions` method.", | |
1088 "id": "TestIamPermissionsRequest", | |
1089 "properties": { | |
1090 "permissions": { | |
1091 "description": "The set of permissions to check for the `res
ource`. Permissions with\nwildcards (such as '*' or 'storage.*') are not allowed
. For more\ninformation see\n[IAM Overview](https://cloud.google.com/iam/docs/ov
erview#permissions).", | |
1092 "items": { | |
1093 "type": "string" | |
1094 }, | |
1095 "type": "array" | |
1096 } | |
1097 }, | |
1098 "type": "object" | |
1099 }, | |
1100 "Policy": { | |
1101 "description": "Defines an Identity and Access Management (IAM) poli
cy. It is used to\nspecify access control policies for Cloud Platform resources.
\n\n\nA `Policy` consists of a list of `bindings`. A `Binding` binds a list of\n
`members` to a `role`, where the members can be user accounts, Google groups,\nG
oogle domains, and service accounts. A `role` is a named list of permissions\nde
fined by IAM.\n\n**Example**\n\n {\n \"bindings\": [\n {\n
\"role\": \"roles/owner\",\n \"members\": [\n \"user:mike
@example.com\",\n \"group:admins@example.com\",\n \"domain
:google.com\",\n \"serviceAccount:my-other-app@appspot.gserviceaccoun
t.com\",\n ]\n },\n {\n \"role\": \"roles/viewer
\",\n \"members\": [\"user:sean@example.com\"]\n }\n ]\n
}\n\nFor a description of IAM and its features, see the\n[IAM developer's guide
](https://cloud.google.com/iam).", | |
1102 "id": "Policy", | |
1103 "properties": { | |
1104 "etag": { | |
1105 "description": "`etag` is used for optimistic concurrency co
ntrol as a way to help\nprevent simultaneous updates of a policy from overwritin
g each other.\nIt is strongly suggested that systems make use of the `etag` in t
he\nread-modify-write cycle to perform policy updates in order to avoid race\nco
nditions: An `etag` is returned in the response to `getIamPolicy`, and\nsystems
are expected to put that etag in the request to `setIamPolicy` to\nensure that t
heir change will be applied to the same version of the policy.\n\nIf no `etag` i
s provided in the call to `setIamPolicy`, then the existing\npolicy is overwritt
en blindly.", | |
1106 "format": "byte", | |
1107 "type": "string" | |
1108 }, | |
1109 "version": { | |
1110 "description": "Version of the `Policy`. The default version
is 0.", | |
1111 "format": "int32", | |
1112 "type": "integer" | |
1113 }, | |
1114 "bindings": { | |
1115 "description": "Associates a list of `members` to a `role`.\
n`bindings` with no members will result in an error.", | |
1116 "items": { | |
1117 "$ref": "Binding" | |
1118 }, | |
1119 "type": "array" | |
1120 } | |
1121 }, | |
1122 "type": "object" | |
1123 }, | |
1124 "ListRolesResponse": { | |
1125 "description": "The response containing the roles defined under a re
source.", | |
1126 "id": "ListRolesResponse", | |
1127 "properties": { | |
1128 "nextPageToken": { | |
1129 "description": "To retrieve the next page of results, set\n`
ListRolesRequest.page_token` to this value.", | |
1130 "type": "string" | |
1131 }, | |
1132 "roles": { | |
1133 "description": "The Roles defined on this resource.", | |
1134 "items": { | |
1135 "$ref": "Role" | |
1136 }, | |
1137 "type": "array" | |
1138 } | |
1139 }, | |
1140 "type": "object" | |
1141 }, | |
1142 "AuditData": { | |
1143 "description": "Audit log information specific to Cloud IAM. This me
ssage is serialized\nas an `Any` type in the `ServiceData` message of an\n`Audit
Log` message.", | |
1144 "id": "AuditData", | |
1145 "properties": { | |
1146 "policyDelta": { | |
1147 "$ref": "PolicyDelta", | |
1148 "description": "Policy delta between the original policy and
the newly set policy." | |
1149 } | |
1150 }, | |
1151 "type": "object" | |
1152 }, | |
1153 "BindingDelta": { | |
1154 "description": "One delta entry for Binding. Each individual change
(only one member in each\nentry) to a binding will be a separate entry.", | |
1155 "id": "BindingDelta", | |
1156 "properties": { | |
1157 "condition": { | |
1158 "$ref": "Expr", | |
1159 "description": "The condition that is associated with this b
inding.\nThis field is GOOGLE_INTERNAL.\nThis field is not logged in IAM side be
cause it's only for audit logging.\nOptional" | |
1160 }, | |
1161 "member": { | |
1162 "description": "A single identity requesting access for a Cl
oud Platform resource.\nFollows the same format of Binding.members.\nRequired", | |
1163 "type": "string" | |
1164 }, | |
1165 "role": { | |
1166 "description": "Role that is assigned to `members`.\nFor exa
mple, `roles/viewer`, `roles/editor`, or `roles/owner`.\nRequired", | |
1167 "type": "string" | |
1168 }, | |
1169 "action": { | |
1170 "description": "The action that was performed on a Binding.\
nRequired", | |
1171 "enum": [ | |
1172 "ACTION_UNSPECIFIED", | |
1173 "ADD", | |
1174 "REMOVE" | |
1175 ], | |
1176 "enumDescriptions": [ | |
1177 "Unspecified.", | |
1178 "Addition of a Binding.", | |
1179 "Removal of a Binding." | |
1180 ], | |
1181 "type": "string" | |
1182 } | |
1183 }, | |
1184 "type": "object" | |
1185 }, | |
1186 "UndeleteRoleRequest": { | |
1187 "description": "The request to undelete an existing role.", | |
1188 "id": "UndeleteRoleRequest", | |
1189 "properties": { | |
1190 "etag": { | |
1191 "description": "Used to perform a consistent read-modify-wri
te.", | |
1192 "format": "byte", | |
1193 "type": "string" | |
1194 } | |
1195 }, | |
1196 "type": "object" | |
1197 }, | |
1198 "CreateServiceAccountRequest": { | |
1199 "description": "The service account create request.", | |
1200 "id": "CreateServiceAccountRequest", | |
1201 "properties": { | |
1202 "serviceAccount": { | |
1203 "$ref": "ServiceAccount", | |
1204 "description": "The ServiceAccount resource to create.\nCurr
ently, only the following values are user assignable:\n`display_name` ." | |
1205 }, | |
1206 "accountId": { | |
1207 "description": "Required. The account id that is used to gen
erate the service account\nemail address and a stable unique id. It is unique wi
thin a project,\nmust be 6-30 characters long, and match the regular expression\
n`[a-z]([-a-z0-9]*[a-z0-9])` to comply with RFC1035.", | |
1208 "type": "string" | |
1209 } | |
1210 }, | |
1211 "type": "object" | |
1212 }, | |
1213 "Role": { | |
1214 "description": "A role in the Identity and Access Management API.", | |
1215 "id": "Role", | |
1216 "properties": { | |
1217 "deleted": { | |
1218 "description": "The current deleted state of the role. This
field is read only.\nIt will be ignored in calls to CreateRole and UpdateRole.", | |
1219 "type": "boolean" | |
1220 }, | |
1221 "title": { | |
1222 "description": "Optional. A human-readable title for the ro
le. Typically this\nis limited to 100 UTF-8 bytes.", | |
1223 "type": "string" | |
1224 }, | |
1225 "includedPermissions": { | |
1226 "description": "The names of the permissions this role grant
s when bound in an IAM policy.", | |
1227 "items": { | |
1228 "type": "string" | |
1229 }, | |
1230 "type": "array" | |
1231 }, | |
1232 "description": { | |
1233 "description": "Optional. A human-readable description for
the role.", | |
1234 "type": "string" | |
1235 }, | |
1236 "etag": { | |
1237 "description": "Used to perform a consistent read-modify-wri
te.", | |
1238 "format": "byte", | |
1239 "type": "string" | |
1240 }, | |
1241 "stage": { | |
1242 "description": "The current launch stage of the role.", | |
1243 "enum": [ | |
1244 "ALPHA", | |
1245 "BETA", | |
1246 "GA", | |
1247 "DEPRECATED", | |
1248 "DISABLED", | |
1249 "EAP" | |
1250 ], | |
1251 "enumDescriptions": [ | |
1252 "The user has indicated this role is currently in an alp
ha phase.", | |
1253 "The user has indicated this role is currently in a beta
phase.", | |
1254 "The user has indicated this role is generally available
.", | |
1255 "The user has indicated this role is being deprecated.", | |
1256 "This role is disabled and will not contribute permissio
ns to any members\nit is granted to in policies.", | |
1257 "The user has indicated this role is currently in an eap
phase." | |
1258 ], | |
1259 "type": "string" | |
1260 }, | |
1261 "name": { | |
1262 "description": "The name of the role.\n\nWhen Role is used i
n CreateRole, the role name must not be set.\n\nWhen Role is used in output and
other input such as UpdateRole, the role\nname is the complete path, e.g., roles
/logging.viewer for curated roles\nand organizations/{ORGANIZATION_ID}/roles/log
ging.viewer for custom roles.", | |
1263 "type": "string" | |
1264 } | |
1265 }, | |
1266 "type": "object" | |
1267 }, | |
1268 "Binding": { | 1027 "Binding": { |
1269 "description": "Associates `members` with a `role`.", | 1028 "description": "Associates `members` with a `role`.", |
1270 "id": "Binding", | 1029 "id": "Binding", |
1271 "properties": { | 1030 "properties": { |
1272 "members": { | 1031 "members": { |
1273 "description": "Specifies the identities requesting access f
or a Cloud Platform resource.\n`members` can have the following values:\n\n* `al
lUsers`: A special identifier that represents anyone who is\n on the internet;
with or without a Google account.\n\n* `allAuthenticatedUsers`: A special ident
ifier that represents anyone\n who is authenticated with a Google account or a
service account.\n\n* `user:{emailid}`: An email address that represents a spec
ific Google\n account. For example, `alice@gmail.com` or `joe@example.com`.\n\
n\n* `serviceAccount:{emailid}`: An email address that represents a service\n
account. For example, `my-other-app@appspot.gserviceaccount.com`.\n\n* `group:{e
mailid}`: An email address that represents a Google group.\n For example, `adm
ins@example.com`.\n\n\n* `domain:{domain}`: A Google Apps domain name that repre
sents all the\n users of that domain. For example, `google.com` or `example.co
m`.\n\n", | 1032 "description": "Specifies the identities requesting access f
or a Cloud Platform resource.\n`members` can have the following values:\n\n* `al
lUsers`: A special identifier that represents anyone who is\n on the internet;
with or without a Google account.\n\n* `allAuthenticatedUsers`: A special ident
ifier that represents anyone\n who is authenticated with a Google account or a
service account.\n\n* `user:{emailid}`: An email address that represents a spec
ific Google\n account. For example, `alice@gmail.com` or `joe@example.com`.\n\
n\n* `serviceAccount:{emailid}`: An email address that represents a service\n
account. For example, `my-other-app@appspot.gserviceaccount.com`.\n\n* `group:{e
mailid}`: An email address that represents a Google group.\n For example, `adm
ins@example.com`.\n\n\n* `domain:{domain}`: A Google Apps domain name that repre
sents all the\n users of that domain. For example, `google.com` or `example.co
m`.\n\n", |
1274 "items": { | 1033 "items": { |
1275 "type": "string" | 1034 "type": "string" |
1276 }, | 1035 }, |
1277 "type": "array" | 1036 "type": "array" |
1278 }, | 1037 }, |
1279 "role": { | 1038 "role": { |
1280 "description": "Role that is assigned to `members`.\nFor exa
mple, `roles/viewer`, `roles/editor`, or `roles/owner`.\nRequired", | 1039 "description": "Role that is assigned to `members`.\nFor exa
mple, `roles/viewer`, `roles/editor`, or `roles/owner`.\nRequired", |
1281 "type": "string" | 1040 "type": "string" |
1282 } | 1041 } |
1283 }, | 1042 }, |
1284 "type": "object" | 1043 "type": "object" |
1285 }, | 1044 }, |
1286 "Expr": { | 1045 "Expr": { |
1287 "description": "Represents an expression text. Example:\n\n title
: \"User account presence\"\n description: \"Determines whether the request h
as a user account\"\n expression: \"size(request.user) > 0\"", | 1046 "description": "Represents an expression text. Example:\n\n title
: \"User account presence\"\n description: \"Determines whether the request h
as a user account\"\n expression: \"size(request.user) > 0\"", |
1288 "id": "Expr", | 1047 "id": "Expr", |
1289 "properties": { | 1048 "properties": { |
| 1049 "expression": { |
| 1050 "description": "Textual representation of an expression in\n
Common Expression Language syntax.\n\nThe application context of the containing
message determines which\nwell-known feature set of CEL is supported.", |
| 1051 "type": "string" |
| 1052 }, |
1290 "location": { | 1053 "location": { |
1291 "description": "An optional string indicating the location o
f the expression for error\nreporting, e.g. a file name and a position in the fi
le.", | 1054 "description": "An optional string indicating the location o
f the expression for error\nreporting, e.g. a file name and a position in the fi
le.", |
1292 "type": "string" | 1055 "type": "string" |
1293 }, | 1056 }, |
1294 "title": { | 1057 "title": { |
1295 "description": "An optional title for the expression, i.e. a
short string describing\nits purpose. This can be used e.g. in UIs which allow
to enter the\nexpression.", | 1058 "description": "An optional title for the expression, i.e. a
short string describing\nits purpose. This can be used e.g. in UIs which allow
to enter the\nexpression.", |
1296 "type": "string" | 1059 "type": "string" |
1297 }, | 1060 }, |
1298 "description": { | 1061 "description": { |
1299 "description": "An optional description of the expression. T
his is a longer text which\ndescribes the expression, e.g. when hovered over it
in a UI.", | 1062 "description": "An optional description of the expression. T
his is a longer text which\ndescribes the expression, e.g. when hovered over it
in a UI.", |
1300 "type": "string" | 1063 "type": "string" |
1301 }, | |
1302 "expression": { | |
1303 "description": "Textual representation of an expression in\n
Common Expression Language syntax.\n\nThe application context of the containing
message determines which\nwell-known feature set of CEL is supported.", | |
1304 "type": "string" | |
1305 } | 1064 } |
1306 }, | 1065 }, |
1307 "type": "object" | 1066 "type": "object" |
1308 }, | 1067 }, |
1309 "ServiceAccount": { | 1068 "ServiceAccount": { |
1310 "description": "A service account in the Identity and Access Managem
ent API.\n\nTo create a service account, specify the `project_id` and the `accou
nt_id`\nfor the account. The `account_id` is unique within the project, and is
used\nto generate the service account email address and a stable\n`unique_id`.\n
\nIf the account already exists, the account's resource name is returned\nin uti
l::Status's ResourceInfo.resource_name in the format of\nprojects/{PROJECT_ID}/s
erviceAccounts/{SERVICE_ACCOUNT_EMAIL}. The caller can\nuse the name in other me
thods to access the account.\n\nAll other methods can identify the service accou
nt using the format\n`projects/{PROJECT_ID}/serviceAccounts/{SERVICE_ACCOUNT_EMA
IL}`.\nUsing `-` as a wildcard for the project will infer the project from\nthe
account. The `account` value can be the `email` address or the\n`unique_id` of t
he service account.", | 1069 "description": "A service account in the Identity and Access Managem
ent API.\n\nTo create a service account, specify the `project_id` and the `accou
nt_id`\nfor the account. The `account_id` is unique within the project, and is
used\nto generate the service account email address and a stable\n`unique_id`.\n
\nIf the account already exists, the account's resource name is returned\nin uti
l::Status's ResourceInfo.resource_name in the format of\nprojects/{PROJECT_ID}/s
erviceAccounts/{SERVICE_ACCOUNT_EMAIL}. The caller can\nuse the name in other me
thods to access the account.\n\nAll other methods can identify the service accou
nt using the format\n`projects/{PROJECT_ID}/serviceAccounts/{SERVICE_ACCOUNT_EMA
IL}`.\nUsing `-` as a wildcard for the project will infer the project from\nthe
account. The `account` value can be the `email` address or the\n`unique_id` of t
he service account.", |
1311 "id": "ServiceAccount", | 1070 "id": "ServiceAccount", |
1312 "properties": { | 1071 "properties": { |
1313 "etag": { | |
1314 "description": "Used to perform a consistent read-modify-wri
te.", | |
1315 "format": "byte", | |
1316 "type": "string" | |
1317 }, | |
1318 "name": { | |
1319 "description": "The resource name of the service account in
the following format:\n`projects/{PROJECT_ID}/serviceAccounts/{SERVICE_ACCOUNT_E
MAIL}`.\n\nRequests using `-` as a wildcard for the project will infer the proje
ct\nfrom the `account` and the `account` value can be the `email` address or\nth
e `unique_id` of the service account.\n\nIn responses the resource name will alw
ays be in the format\n`projects/{PROJECT_ID}/serviceAccounts/{SERVICE_ACCOUNT_EM
AIL}`.", | |
1320 "type": "string" | |
1321 }, | |
1322 "email": { | |
1323 "description": "@OutputOnly The email address of the service
account.", | |
1324 "type": "string" | |
1325 }, | |
1326 "projectId": { | |
1327 "description": "@OutputOnly The id of the project that owns
the service account.", | |
1328 "type": "string" | |
1329 }, | |
1330 "oauth2ClientId": { | 1072 "oauth2ClientId": { |
1331 "description": "@OutputOnly. The OAuth2 client id for the se
rvice account.\nThis is used in conjunction with the OAuth2 clientconfig API to
make\nthree legged OAuth2 (3LO) flows to access the data of Google users.", | 1073 "description": "@OutputOnly. The OAuth2 client id for the se
rvice account.\nThis is used in conjunction with the OAuth2 clientconfig API to
make\nthree legged OAuth2 (3LO) flows to access the data of Google users.", |
1332 "type": "string" | 1074 "type": "string" |
1333 }, | 1075 }, |
1334 "uniqueId": { | 1076 "uniqueId": { |
1335 "description": "@OutputOnly The unique and stable id of the
service account.", | 1077 "description": "@OutputOnly The unique and stable id of the
service account.", |
1336 "type": "string" | 1078 "type": "string" |
1337 }, | 1079 }, |
1338 "displayName": { | 1080 "displayName": { |
1339 "description": "Optional. A user-specified description of th
e service account. Must be\nfewer than 100 UTF-8 bytes.", | 1081 "description": "Optional. A user-specified description of th
e service account. Must be\nfewer than 100 UTF-8 bytes.", |
1340 "type": "string" | 1082 "type": "string" |
| 1083 }, |
| 1084 "etag": { |
| 1085 "description": "Used to perform a consistent read-modify-wri
te.", |
| 1086 "format": "byte", |
| 1087 "type": "string" |
| 1088 }, |
| 1089 "email": { |
| 1090 "description": "@OutputOnly The email address of the service
account.", |
| 1091 "type": "string" |
| 1092 }, |
| 1093 "name": { |
| 1094 "description": "The resource name of the service account in
the following format:\n`projects/{PROJECT_ID}/serviceAccounts/{SERVICE_ACCOUNT_E
MAIL}`.\n\nRequests using `-` as a wildcard for the project will infer the proje
ct\nfrom the `account` and the `account` value can be the `email` address or\nth
e `unique_id` of the service account.\n\nIn responses the resource name will alw
ays be in the format\n`projects/{PROJECT_ID}/serviceAccounts/{SERVICE_ACCOUNT_EM
AIL}`.", |
| 1095 "type": "string" |
| 1096 }, |
| 1097 "projectId": { |
| 1098 "description": "@OutputOnly The id of the project that owns
the service account.", |
| 1099 "type": "string" |
1341 } | 1100 } |
1342 }, | 1101 }, |
1343 "type": "object" | 1102 "type": "object" |
1344 }, | 1103 }, |
1345 "QueryGrantableRolesRequest": { | 1104 "QueryGrantableRolesRequest": { |
1346 "description": "The grantable role query request.", | 1105 "description": "The grantable role query request.", |
1347 "id": "QueryGrantableRolesRequest", | 1106 "id": "QueryGrantableRolesRequest", |
1348 "properties": { | 1107 "properties": { |
1349 "fullResourceName": { | 1108 "fullResourceName": { |
1350 "description": "Required. The full resource name to query fr
om the list of grantable roles.\n\nThe name follows the Google Cloud Platform re
source format.\nFor example, a Cloud Platform project with id `my-project` will
be named\n`//cloudresourcemanager.googleapis.com/projects/my-project`.", | 1109 "description": "Required. The full resource name to query fr
om the list of grantable roles.\n\nThe name follows the Google Cloud Platform re
source format.\nFor example, a Cloud Platform project with id `my-project` will
be named\n`//cloudresourcemanager.googleapis.com/projects/my-project`.", |
(...skipping 30 matching lines...) Expand all Loading... |
1381 "description": "The role id to use for this role.", | 1140 "description": "The role id to use for this role.", |
1382 "type": "string" | 1141 "type": "string" |
1383 }, | 1142 }, |
1384 "role": { | 1143 "role": { |
1385 "$ref": "Role", | 1144 "$ref": "Role", |
1386 "description": "The Role resource to create." | 1145 "description": "The Role resource to create." |
1387 } | 1146 } |
1388 }, | 1147 }, |
1389 "type": "object" | 1148 "type": "object" |
1390 }, | 1149 }, |
1391 "QueryTestablePermissionsRequest": { | 1150 "ListServiceAccountKeysResponse": { |
1392 "description": "A request to get permissions which can be tested on
a resource.", | 1151 "description": "The service account keys list response.", |
1393 "id": "QueryTestablePermissionsRequest", | 1152 "id": "ListServiceAccountKeysResponse", |
1394 "properties": { | 1153 "properties": { |
1395 "fullResourceName": { | 1154 "keys": { |
1396 "description": "Required. The full resource name to query fr
om the list of testable\npermissions.\n\nThe name follows the Google Cloud Platf
orm resource format.\nFor example, a Cloud Platform project with id `my-project`
will be named\n`//cloudresourcemanager.googleapis.com/projects/my-project`.", | 1155 "description": "The public keys for the service account.", |
1397 "type": "string" | 1156 "items": { |
1398 }, | 1157 "$ref": "ServiceAccountKey" |
1399 "pageToken": { | 1158 }, |
1400 "description": "Optional pagination token returned in an ear
lier\nQueryTestablePermissionsRequest.", | 1159 "type": "array" |
1401 "type": "string" | |
1402 }, | |
1403 "pageSize": { | |
1404 "description": "Optional limit on the number of permissions
to include in the response.", | |
1405 "format": "int32", | |
1406 "type": "integer" | |
1407 } | 1160 } |
1408 }, | 1161 }, |
1409 "type": "object" | 1162 "type": "object" |
1410 }, | 1163 }, |
1411 "TestIamPermissionsResponse": { | 1164 "TestIamPermissionsResponse": { |
1412 "description": "Response message for `TestIamPermissions` method.", | 1165 "description": "Response message for `TestIamPermissions` method.", |
1413 "id": "TestIamPermissionsResponse", | 1166 "id": "TestIamPermissionsResponse", |
1414 "properties": { | 1167 "properties": { |
1415 "permissions": { | 1168 "permissions": { |
1416 "description": "A subset of `TestPermissionsRequest.permissi
ons` that the caller is\nallowed.", | 1169 "description": "A subset of `TestPermissionsRequest.permissi
ons` that the caller is\nallowed.", |
1417 "items": { | 1170 "items": { |
1418 "type": "string" | 1171 "type": "string" |
1419 }, | 1172 }, |
1420 "type": "array" | 1173 "type": "array" |
1421 } | 1174 } |
1422 }, | 1175 }, |
1423 "type": "object" | 1176 "type": "object" |
1424 }, | 1177 }, |
1425 "ListServiceAccountKeysResponse": { | 1178 "QueryTestablePermissionsRequest": { |
1426 "description": "The service account keys list response.", | 1179 "description": "A request to get permissions which can be tested on
a resource.", |
1427 "id": "ListServiceAccountKeysResponse", | 1180 "id": "QueryTestablePermissionsRequest", |
1428 "properties": { | 1181 "properties": { |
1429 "keys": { | 1182 "fullResourceName": { |
1430 "description": "The public keys for the service account.", | 1183 "description": "Required. The full resource name to query fr
om the list of testable\npermissions.\n\nThe name follows the Google Cloud Platf
orm resource format.\nFor example, a Cloud Platform project with id `my-project`
will be named\n`//cloudresourcemanager.googleapis.com/projects/my-project`.", |
1431 "items": { | 1184 "type": "string" |
1432 "$ref": "ServiceAccountKey" | 1185 }, |
1433 }, | 1186 "pageToken": { |
1434 "type": "array" | 1187 "description": "Optional pagination token returned in an ear
lier\nQueryTestablePermissionsRequest.", |
| 1188 "type": "string" |
| 1189 }, |
| 1190 "pageSize": { |
| 1191 "description": "Optional limit on the number of permissions
to include in the response.", |
| 1192 "format": "int32", |
| 1193 "type": "integer" |
1435 } | 1194 } |
1436 }, | 1195 }, |
1437 "type": "object" | 1196 "type": "object" |
1438 }, | 1197 }, |
1439 "ServiceAccountKey": { | 1198 "ServiceAccountKey": { |
1440 "description": "Represents a service account key.\n\nA service accou
nt has two sets of key-pairs: user-managed, and\nsystem-managed.\n\nUser-managed
key-pairs can be created and deleted by users. Users are\nresponsible for rota
ting these keys periodically to ensure security of\ntheir service accounts. Use
rs retain the private key of these key-pairs,\nand Google retains ONLY the publi
c key.\n\nSystem-managed key-pairs are managed automatically by Google, and rota
ted\ndaily without user intervention. The private key never leaves Google's\nse
rvers to maximize security.\n\nPublic keys for all service accounts are also pub
lished at the OAuth2\nService Account API.", | 1199 "description": "Represents a service account key.\n\nA service accou
nt has two sets of key-pairs: user-managed, and\nsystem-managed.\n\nUser-managed
key-pairs can be created and deleted by users. Users are\nresponsible for rota
ting these keys periodically to ensure security of\ntheir service accounts. Use
rs retain the private key of these key-pairs,\nand Google retains ONLY the publi
c key.\n\nSystem-managed key-pairs are managed automatically by Google, and rota
ted\ndaily without user intervention. The private key never leaves Google's\nse
rvers to maximize security.\n\nPublic keys for all service accounts are also pub
lished at the OAuth2\nService Account API.", |
1441 "id": "ServiceAccountKey", | 1200 "id": "ServiceAccountKey", |
1442 "properties": { | 1201 "properties": { |
| 1202 "privateKeyData": { |
| 1203 "description": "The private key data. Only provided in `Crea
teServiceAccountKey`\nresponses. Make sure to keep the private key data secure b
ecause it\nallows for the assertion of the service account identity.\nWhen decod
ed, the private key data can be used to authenticate with\nGoogle API client lib
raries and with\n<a href=\"/sdk/gcloud/reference/auth/activate-service-account\"
>gcloud\nauth activate-service-account</a>.", |
| 1204 "format": "byte", |
| 1205 "type": "string" |
| 1206 }, |
1443 "publicKeyData": { | 1207 "publicKeyData": { |
1444 "description": "The public key data. Only provided in `GetSe
rviceAccountKey` responses.", | 1208 "description": "The public key data. Only provided in `GetSe
rviceAccountKey` responses.", |
1445 "format": "byte", | 1209 "format": "byte", |
1446 "type": "string" | 1210 "type": "string" |
1447 }, | 1211 }, |
1448 "name": { | 1212 "name": { |
1449 "description": "The resource name of the service account key
in the following format\n`projects/{PROJECT_ID}/serviceAccounts/{SERVICE_ACCOUN
T_EMAIL}/keys/{key}`.", | 1213 "description": "The resource name of the service account key
in the following format\n`projects/{PROJECT_ID}/serviceAccounts/{SERVICE_ACCOUN
T_EMAIL}/keys/{key}`.", |
1450 "type": "string" | 1214 "type": "string" |
1451 }, | 1215 }, |
1452 "validBeforeTime": { | 1216 "validBeforeTime": { |
(...skipping 26 matching lines...) Expand all Loading... |
1479 "Unspecified. Equivalent to `TYPE_GOOGLE_CREDENTIALS_FIL
E`.", | 1243 "Unspecified. Equivalent to `TYPE_GOOGLE_CREDENTIALS_FIL
E`.", |
1480 "PKCS12 format.\nThe password for the PKCS12 file is `no
tasecret`.\nFor more information, see https://tools.ietf.org/html/rfc7292.", | 1244 "PKCS12 format.\nThe password for the PKCS12 file is `no
tasecret`.\nFor more information, see https://tools.ietf.org/html/rfc7292.", |
1481 "Google Credentials File format." | 1245 "Google Credentials File format." |
1482 ], | 1246 ], |
1483 "type": "string" | 1247 "type": "string" |
1484 }, | 1248 }, |
1485 "validAfterTime": { | 1249 "validAfterTime": { |
1486 "description": "The key can be used after this timestamp.", | 1250 "description": "The key can be used after this timestamp.", |
1487 "format": "google-datetime", | 1251 "format": "google-datetime", |
1488 "type": "string" | 1252 "type": "string" |
1489 }, | |
1490 "privateKeyData": { | |
1491 "description": "The private key data. Only provided in `Crea
teServiceAccountKey`\nresponses. Make sure to keep the private key data secure b
ecause it\nallows for the assertion of the service account identity.\nWhen decod
ed, the private key data can be used to authenticate with\nGoogle API client lib
raries and with\n<a href=\"/sdk/gcloud/reference/auth/activate-service-account\"
>gcloud\nauth activate-service-account</a>.", | |
1492 "format": "byte", | |
1493 "type": "string" | |
1494 } | 1253 } |
1495 }, | 1254 }, |
1496 "type": "object" | 1255 "type": "object" |
1497 }, | 1256 }, |
1498 "SignBlobResponse": { | 1257 "SignBlobResponse": { |
1499 "description": "The service account sign blob response.", | 1258 "description": "The service account sign blob response.", |
1500 "id": "SignBlobResponse", | 1259 "id": "SignBlobResponse", |
1501 "properties": { | 1260 "properties": { |
1502 "keyId": { | 1261 "keyId": { |
1503 "description": "The id of the key used to sign the blob.", | 1262 "description": "The id of the key used to sign the blob.", |
1504 "type": "string" | 1263 "type": "string" |
1505 }, | 1264 }, |
1506 "signature": { | 1265 "signature": { |
1507 "description": "The signed blob.", | 1266 "description": "The signed blob.", |
1508 "format": "byte", | 1267 "format": "byte", |
1509 "type": "string" | 1268 "type": "string" |
1510 } | 1269 } |
1511 }, | 1270 }, |
1512 "type": "object" | 1271 "type": "object" |
1513 }, | 1272 }, |
| 1273 "SignJwtRequest": { |
| 1274 "description": "The service account sign JWT request.", |
| 1275 "id": "SignJwtRequest", |
| 1276 "properties": { |
| 1277 "payload": { |
| 1278 "description": "The JWT payload to sign, a JSON JWT Claim se
t.", |
| 1279 "type": "string" |
| 1280 } |
| 1281 }, |
| 1282 "type": "object" |
| 1283 }, |
1514 "Permission": { | 1284 "Permission": { |
1515 "description": "A permission which can be included by a role.", | 1285 "description": "A permission which can be included by a role.", |
1516 "id": "Permission", | 1286 "id": "Permission", |
1517 "properties": { | 1287 "properties": { |
| 1288 "title": { |
| 1289 "description": "The title of this Permission.", |
| 1290 "type": "string" |
| 1291 }, |
1518 "description": { | 1292 "description": { |
1519 "description": "A brief description of what this Permission
is used for.", | 1293 "description": "A brief description of what this Permission
is used for.", |
1520 "type": "string" | 1294 "type": "string" |
1521 }, | 1295 }, |
1522 "customRolesSupportLevel": { | 1296 "customRolesSupportLevel": { |
1523 "description": "The current custom role support level.", | 1297 "description": "The current custom role support level.", |
1524 "enum": [ | 1298 "enum": [ |
1525 "SUPPORTED", | 1299 "SUPPORTED", |
1526 "TESTING", | 1300 "TESTING", |
1527 "NOT_SUPPORTED" | 1301 "NOT_SUPPORTED" |
(...skipping 21 matching lines...) Expand all Loading... |
1549 ], | 1323 ], |
1550 "type": "string" | 1324 "type": "string" |
1551 }, | 1325 }, |
1552 "name": { | 1326 "name": { |
1553 "description": "The name of this Permission.", | 1327 "description": "The name of this Permission.", |
1554 "type": "string" | 1328 "type": "string" |
1555 }, | 1329 }, |
1556 "onlyInPredefinedRoles": { | 1330 "onlyInPredefinedRoles": { |
1557 "description": "This permission can ONLY be used in predefin
ed roles.", | 1331 "description": "This permission can ONLY be used in predefin
ed roles.", |
1558 "type": "boolean" | 1332 "type": "boolean" |
1559 }, | |
1560 "title": { | |
1561 "description": "The title of this Permission.", | |
1562 "type": "string" | |
1563 } | 1333 } |
1564 }, | 1334 }, |
1565 "type": "object" | 1335 "type": "object" |
1566 }, | |
1567 "SignJwtRequest": { | |
1568 "description": "The service account sign JWT request.", | |
1569 "id": "SignJwtRequest", | |
1570 "properties": { | |
1571 "payload": { | |
1572 "description": "The JWT payload to sign, a JSON JWT Claim se
t.", | |
1573 "type": "string" | |
1574 } | |
1575 }, | |
1576 "type": "object" | |
1577 }, | 1336 }, |
1578 "PolicyDelta": { | 1337 "PolicyDelta": { |
1579 "description": "The difference delta between two policies.", | 1338 "description": "The difference delta between two policies.", |
1580 "id": "PolicyDelta", | 1339 "id": "PolicyDelta", |
1581 "properties": { | 1340 "properties": { |
1582 "bindingDeltas": { | 1341 "bindingDeltas": { |
1583 "description": "The delta for Bindings between two policies.
", | 1342 "description": "The delta for Bindings between two policies.
", |
1584 "items": { | 1343 "items": { |
1585 "$ref": "BindingDelta" | 1344 "$ref": "BindingDelta" |
1586 }, | 1345 }, |
(...skipping 71 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
1658 }, | 1417 }, |
1659 "permissions": { | 1418 "permissions": { |
1660 "description": "The Permissions testable on the requested re
source.", | 1419 "description": "The Permissions testable on the requested re
source.", |
1661 "items": { | 1420 "items": { |
1662 "$ref": "Permission" | 1421 "$ref": "Permission" |
1663 }, | 1422 }, |
1664 "type": "array" | 1423 "type": "array" |
1665 } | 1424 } |
1666 }, | 1425 }, |
1667 "type": "object" | 1426 "type": "object" |
| 1427 }, |
| 1428 "Empty": { |
| 1429 "description": "A generic empty message that you can re-use to avoid
defining duplicated\nempty messages in your APIs. A typical example is to use i
t as the request\nor the response type of an API method. For instance:\n\n se
rvice Foo {\n rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty
);\n }\n\nThe JSON representation for `Empty` is empty JSON object `{}`.", |
| 1430 "id": "Empty", |
| 1431 "properties": {}, |
| 1432 "type": "object" |
| 1433 }, |
| 1434 "CreateServiceAccountKeyRequest": { |
| 1435 "description": "The service account key create request.", |
| 1436 "id": "CreateServiceAccountKeyRequest", |
| 1437 "properties": { |
| 1438 "keyAlgorithm": { |
| 1439 "description": "Which type of key and algorithm to use for t
he key.\nThe default is currently a 2K RSA key. However this may change in the\
nfuture.", |
| 1440 "enum": [ |
| 1441 "KEY_ALG_UNSPECIFIED", |
| 1442 "KEY_ALG_RSA_1024", |
| 1443 "KEY_ALG_RSA_2048" |
| 1444 ], |
| 1445 "enumDescriptions": [ |
| 1446 "An unspecified key algorithm.", |
| 1447 "1k RSA Key.", |
| 1448 "2k RSA Key." |
| 1449 ], |
| 1450 "type": "string" |
| 1451 }, |
| 1452 "privateKeyType": { |
| 1453 "description": "The output format of the private key. `GOOGL
E_CREDENTIALS_FILE` is the\ndefault output format.", |
| 1454 "enum": [ |
| 1455 "TYPE_UNSPECIFIED", |
| 1456 "TYPE_PKCS12_FILE", |
| 1457 "TYPE_GOOGLE_CREDENTIALS_FILE" |
| 1458 ], |
| 1459 "enumDescriptions": [ |
| 1460 "Unspecified. Equivalent to `TYPE_GOOGLE_CREDENTIALS_FIL
E`.", |
| 1461 "PKCS12 format.\nThe password for the PKCS12 file is `no
tasecret`.\nFor more information, see https://tools.ietf.org/html/rfc7292.", |
| 1462 "Google Credentials File format." |
| 1463 ], |
| 1464 "type": "string" |
| 1465 } |
| 1466 }, |
| 1467 "type": "object" |
| 1468 }, |
| 1469 "TestIamPermissionsRequest": { |
| 1470 "description": "Request message for `TestIamPermissions` method.", |
| 1471 "id": "TestIamPermissionsRequest", |
| 1472 "properties": { |
| 1473 "permissions": { |
| 1474 "description": "The set of permissions to check for the `res
ource`. Permissions with\nwildcards (such as '*' or 'storage.*') are not allowed
. For more\ninformation see\n[IAM Overview](https://cloud.google.com/iam/docs/ov
erview#permissions).", |
| 1475 "items": { |
| 1476 "type": "string" |
| 1477 }, |
| 1478 "type": "array" |
| 1479 } |
| 1480 }, |
| 1481 "type": "object" |
| 1482 }, |
| 1483 "SignJwtResponse": { |
| 1484 "description": "The service account sign JWT response.", |
| 1485 "id": "SignJwtResponse", |
| 1486 "properties": { |
| 1487 "signedJwt": { |
| 1488 "description": "The signed JWT.", |
| 1489 "type": "string" |
| 1490 }, |
| 1491 "keyId": { |
| 1492 "description": "The id of the key used to sign the JWT.", |
| 1493 "type": "string" |
| 1494 } |
| 1495 }, |
| 1496 "type": "object" |
| 1497 }, |
| 1498 "Policy": { |
| 1499 "description": "Defines an Identity and Access Management (IAM) poli
cy. It is used to\nspecify access control policies for Cloud Platform resources.
\n\n\nA `Policy` consists of a list of `bindings`. A `Binding` binds a list of\n
`members` to a `role`, where the members can be user accounts, Google groups,\nG
oogle domains, and service accounts. A `role` is a named list of permissions\nde
fined by IAM.\n\n**Example**\n\n {\n \"bindings\": [\n {\n
\"role\": \"roles/owner\",\n \"members\": [\n \"user:mike
@example.com\",\n \"group:admins@example.com\",\n \"domain
:google.com\",\n \"serviceAccount:my-other-app@appspot.gserviceaccoun
t.com\",\n ]\n },\n {\n \"role\": \"roles/viewer
\",\n \"members\": [\"user:sean@example.com\"]\n }\n ]\n
}\n\nFor a description of IAM and its features, see the\n[IAM developer's guide
](https://cloud.google.com/iam).", |
| 1500 "id": "Policy", |
| 1501 "properties": { |
| 1502 "bindings": { |
| 1503 "description": "Associates a list of `members` to a `role`.\
n`bindings` with no members will result in an error.", |
| 1504 "items": { |
| 1505 "$ref": "Binding" |
| 1506 }, |
| 1507 "type": "array" |
| 1508 }, |
| 1509 "etag": { |
| 1510 "description": "`etag` is used for optimistic concurrency co
ntrol as a way to help\nprevent simultaneous updates of a policy from overwritin
g each other.\nIt is strongly suggested that systems make use of the `etag` in t
he\nread-modify-write cycle to perform policy updates in order to avoid race\nco
nditions: An `etag` is returned in the response to `getIamPolicy`, and\nsystems
are expected to put that etag in the request to `setIamPolicy` to\nensure that t
heir change will be applied to the same version of the policy.\n\nIf no `etag` i
s provided in the call to `setIamPolicy`, then the existing\npolicy is overwritt
en blindly.", |
| 1511 "format": "byte", |
| 1512 "type": "string" |
| 1513 }, |
| 1514 "version": { |
| 1515 "description": "Version of the `Policy`. The default version
is 0.", |
| 1516 "format": "int32", |
| 1517 "type": "integer" |
| 1518 } |
| 1519 }, |
| 1520 "type": "object" |
| 1521 }, |
| 1522 "ListRolesResponse": { |
| 1523 "description": "The response containing the roles defined under a re
source.", |
| 1524 "id": "ListRolesResponse", |
| 1525 "properties": { |
| 1526 "nextPageToken": { |
| 1527 "description": "To retrieve the next page of results, set\n`
ListRolesRequest.page_token` to this value.", |
| 1528 "type": "string" |
| 1529 }, |
| 1530 "roles": { |
| 1531 "description": "The Roles defined on this resource.", |
| 1532 "items": { |
| 1533 "$ref": "Role" |
| 1534 }, |
| 1535 "type": "array" |
| 1536 } |
| 1537 }, |
| 1538 "type": "object" |
| 1539 }, |
| 1540 "AuditData": { |
| 1541 "description": "Audit log information specific to Cloud IAM. This me
ssage is serialized\nas an `Any` type in the `ServiceData` message of an\n`Audit
Log` message.", |
| 1542 "id": "AuditData", |
| 1543 "properties": { |
| 1544 "policyDelta": { |
| 1545 "$ref": "PolicyDelta", |
| 1546 "description": "Policy delta between the original policy and
the newly set policy." |
| 1547 } |
| 1548 }, |
| 1549 "type": "object" |
| 1550 }, |
| 1551 "BindingDelta": { |
| 1552 "description": "One delta entry for Binding. Each individual change
(only one member in each\nentry) to a binding will be a separate entry.", |
| 1553 "id": "BindingDelta", |
| 1554 "properties": { |
| 1555 "condition": { |
| 1556 "$ref": "Expr", |
| 1557 "description": "The condition that is associated with this b
inding.\nThis field is GOOGLE_INTERNAL.\nThis field is not logged in IAM side be
cause it's only for audit logging.\nOptional" |
| 1558 }, |
| 1559 "member": { |
| 1560 "description": "A single identity requesting access for a Cl
oud Platform resource.\nFollows the same format of Binding.members.\nRequired", |
| 1561 "type": "string" |
| 1562 }, |
| 1563 "role": { |
| 1564 "description": "Role that is assigned to `members`.\nFor exa
mple, `roles/viewer`, `roles/editor`, or `roles/owner`.\nRequired", |
| 1565 "type": "string" |
| 1566 }, |
| 1567 "action": { |
| 1568 "description": "The action that was performed on a Binding.\
nRequired", |
| 1569 "enum": [ |
| 1570 "ACTION_UNSPECIFIED", |
| 1571 "ADD", |
| 1572 "REMOVE" |
| 1573 ], |
| 1574 "enumDescriptions": [ |
| 1575 "Unspecified.", |
| 1576 "Addition of a Binding.", |
| 1577 "Removal of a Binding." |
| 1578 ], |
| 1579 "type": "string" |
| 1580 } |
| 1581 }, |
| 1582 "type": "object" |
| 1583 }, |
| 1584 "UndeleteRoleRequest": { |
| 1585 "description": "The request to undelete an existing role.", |
| 1586 "id": "UndeleteRoleRequest", |
| 1587 "properties": { |
| 1588 "etag": { |
| 1589 "description": "Used to perform a consistent read-modify-wri
te.", |
| 1590 "format": "byte", |
| 1591 "type": "string" |
| 1592 } |
| 1593 }, |
| 1594 "type": "object" |
| 1595 }, |
| 1596 "CreateServiceAccountRequest": { |
| 1597 "description": "The service account create request.", |
| 1598 "id": "CreateServiceAccountRequest", |
| 1599 "properties": { |
| 1600 "serviceAccount": { |
| 1601 "$ref": "ServiceAccount", |
| 1602 "description": "The ServiceAccount resource to create.\nCurr
ently, only the following values are user assignable:\n`display_name` ." |
| 1603 }, |
| 1604 "accountId": { |
| 1605 "description": "Required. The account id that is used to gen
erate the service account\nemail address and a stable unique id. It is unique wi
thin a project,\nmust be 6-30 characters long, and match the regular expression\
n`[a-z]([-a-z0-9]*[a-z0-9])` to comply with RFC1035.", |
| 1606 "type": "string" |
| 1607 } |
| 1608 }, |
| 1609 "type": "object" |
| 1610 }, |
| 1611 "Role": { |
| 1612 "description": "A role in the Identity and Access Management API.", |
| 1613 "id": "Role", |
| 1614 "properties": { |
| 1615 "deleted": { |
| 1616 "description": "The current deleted state of the role. This
field is read only.\nIt will be ignored in calls to CreateRole and UpdateRole.", |
| 1617 "type": "boolean" |
| 1618 }, |
| 1619 "title": { |
| 1620 "description": "Optional. A human-readable title for the ro
le. Typically this\nis limited to 100 UTF-8 bytes.", |
| 1621 "type": "string" |
| 1622 }, |
| 1623 "includedPermissions": { |
| 1624 "description": "The names of the permissions this role grant
s when bound in an IAM policy.", |
| 1625 "items": { |
| 1626 "type": "string" |
| 1627 }, |
| 1628 "type": "array" |
| 1629 }, |
| 1630 "description": { |
| 1631 "description": "Optional. A human-readable description for
the role.", |
| 1632 "type": "string" |
| 1633 }, |
| 1634 "etag": { |
| 1635 "description": "Used to perform a consistent read-modify-wri
te.", |
| 1636 "format": "byte", |
| 1637 "type": "string" |
| 1638 }, |
| 1639 "stage": { |
| 1640 "description": "The current launch stage of the role.", |
| 1641 "enum": [ |
| 1642 "ALPHA", |
| 1643 "BETA", |
| 1644 "GA", |
| 1645 "DEPRECATED", |
| 1646 "DISABLED", |
| 1647 "EAP" |
| 1648 ], |
| 1649 "enumDescriptions": [ |
| 1650 "The user has indicated this role is currently in an alp
ha phase.", |
| 1651 "The user has indicated this role is currently in a beta
phase.", |
| 1652 "The user has indicated this role is generally available
.", |
| 1653 "The user has indicated this role is being deprecated.", |
| 1654 "This role is disabled and will not contribute permissio
ns to any members\nit is granted to in policies.", |
| 1655 "The user has indicated this role is currently in an eap
phase." |
| 1656 ], |
| 1657 "type": "string" |
| 1658 }, |
| 1659 "name": { |
| 1660 "description": "The name of the role.\n\nWhen Role is used i
n CreateRole, the role name must not be set.\n\nWhen Role is used in output and
other input such as UpdateRole, the role\nname is the complete path, e.g., roles
/logging.viewer for curated roles\nand organizations/{ORGANIZATION_ID}/roles/log
ging.viewer for custom roles.", |
| 1661 "type": "string" |
| 1662 } |
| 1663 }, |
| 1664 "type": "object" |
1668 } | 1665 } |
1669 }, | 1666 }, |
1670 "servicePath": "", | 1667 "servicePath": "", |
1671 "title": "Google Identity and Access Management (IAM) API", | 1668 "title": "Google Identity and Access Management (IAM) API", |
1672 "version": "v1" | 1669 "version": "v1" |
1673 } | 1670 } |
OLD | NEW |