Class: Google::Apis::AccesscontextmanagerV1::GcpUserAccessBinding

Inherits:
Object
  • Object
show all
Includes:
Core::Hashable, Core::JsonObjectSupport
Defined in:
lib/google/apis/accesscontextmanager_v1/classes.rb,
lib/google/apis/accesscontextmanager_v1/representations.rb,
lib/google/apis/accesscontextmanager_v1/representations.rb

Overview

Restricts access to Cloud Console and Google Cloud APIs for a set of users using Context-Aware Access.

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(**args) ⇒ GcpUserAccessBinding

Returns a new instance of GcpUserAccessBinding.



1144
1145
1146
 
# File 'lib/google/apis/accesscontextmanager_v1/classes.rb', line 1144

def initialize(**args)
   update!(**args)
end

Instance Attribute Details

#access_levels ⇒ Array<String>

Optional. Access level that a user must have to be granted access. Only one access level is supported, not multiple. This repeated field must have exactly one element. Example: "accessPolicies/9522/accessLevels/device_trusted" Corresponds to the JSON property accessLevels

Returns:

  • (Array<String>) 


1087
1088
1089
 
# File 'lib/google/apis/accesscontextmanager_v1/classes.rb', line 1087

def access_levels
  @access_levels
end

#dry_run_access_levels ⇒ Array<String>

Optional. Dry run access level that will be evaluated but will not be enforced. The access denial based on dry run policy will be logged. Only one access level is supported, not multiple. This list must have exactly one element. Example: "accessPolicies/9522/accessLevels/device_trusted" Corresponds to the JSON property dryRunAccessLevels

Returns:

  • (Array<String>) 


1095
1096
1097
 
# File 'lib/google/apis/accesscontextmanager_v1/classes.rb', line 1095

def dry_run_access_levels
  @dry_run_access_levels
end

#group_key ⇒ String

Optional. Immutable. Google Group id whose users are subject to this binding's restrictions. See "id" in the Google Workspace Directory API's Group Resource. If a group's email address/alias is changed, this resource will continue to point at the changed group. This field does not accept group email addresses or aliases. Example: "01d520gv4vjcrht" Corresponds to the JSON property groupKey

Returns:

  • (String) 


1105
1106
1107
 
# File 'lib/google/apis/accesscontextmanager_v1/classes.rb', line 1105

def group_key
  @group_key
end

#name ⇒ String

Immutable. Assigned by the server during creation. The last segment has an arbitrary length and has only URI unreserved characters (as defined by RFC 3986 Section 2.3). Should not be specified by the client during creation. Example: "organizations/256/ gcpUserAccessBindings/b3-BhcX_Ud5N" Corresponds to the JSON property name

Returns:

  • (String) 


1114
1115
1116
 
# File 'lib/google/apis/accesscontextmanager_v1/classes.rb', line 1114

def name
  @name
end

#principal ⇒ Google::Apis::AccesscontextmanagerV1::Principal

The comprehensive identity container supporting identities including groups, service accounts, and federated identities. Only one of them can be set to create an access binding. Corresponds to the JSON property principal

Returns:



1121
1122
1123
 
# File 'lib/google/apis/accesscontextmanager_v1/classes.rb', line 1121

def principal
  @principal
end

#restricted_client_applications ⇒ Array<Google::Apis::AccesscontextmanagerV1::Application>

Optional. Deprecated: Use scoped_access_settings instead. A list of applications that are subject to this binding's restrictions. If the list is empty, the binding restrictions will universally apply to all applications. Corresponds to the JSON property restrictedClientApplications

Returns:



1128
1129
1130
 
# File 'lib/google/apis/accesscontextmanager_v1/classes.rb', line 1128

def restricted_client_applications
  @restricted_client_applications
end

#scoped_access_settings ⇒ Array<Google::Apis::AccesscontextmanagerV1::ScopedAccessSettings>

Optional. A list of scoped access settings that set this binding's restrictions on a subset of applications. This field cannot be set if restricted_client_applications is set. Corresponds to the JSON property scopedAccessSettings

Returns:



1135
1136
1137
 
# File 'lib/google/apis/accesscontextmanager_v1/classes.rb', line 1135

def scoped_access_settings
  @scoped_access_settings
end

#session_settings ⇒ Google::Apis::AccesscontextmanagerV1::SessionSettings

Stores settings related to Google Cloud Session Length including session duration, the type of challenge (i.e. method) they should face when their session expires, and other related settings. Corresponds to the JSON property sessionSettings

Returns:



1142
1143
1144
 
# File 'lib/google/apis/accesscontextmanager_v1/classes.rb', line 1142

def session_settings
  @session_settings
end

Instance Method Details

#update!(**args) ⇒ Object

Update properties of this object



1149
1150
1151
1152
1153
1154
1155
1156
1157
1158
 
# File 'lib/google/apis/accesscontextmanager_v1/classes.rb', line 1149

def update!(**args)
  @access_levels = args[:access_levels] if args.key?(:access_levels)
  @dry_run_access_levels = args[:dry_run_access_levels] if args.key?(:dry_run_access_levels)
  @group_key = args[:group_key] if args.key?(:group_key)
  @name = args[:name] if args.key?(:name)
  @principal = args[:principal] if args.key?(:principal)
  @restricted_client_applications = args[:restricted_client_applications] if args.key?(:restricted_client_applications)
  @scoped_access_settings = args[:scoped_access_settings] if args.key?(:scoped_access_settings)
  @session_settings = args[:session_settings] if args.key?(:session_settings)
end