google-api-client 0.31.0 → 0.32.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (295) hide show
  1. checksums.yaml +4 -4
  2. data/.kokoro/continuous/linux.cfg +11 -1
  3. data/.kokoro/continuous/osx.cfg +5 -0
  4. data/.kokoro/continuous/windows.cfg +10 -0
  5. data/.kokoro/presubmit/linux.cfg +11 -1
  6. data/.kokoro/presubmit/osx.cfg +5 -0
  7. data/.kokoro/presubmit/windows.cfg +10 -0
  8. data/CHANGELOG.md +107 -0
  9. data/generated/google/apis/androidmanagement_v1.rb +1 -1
  10. data/generated/google/apis/androidmanagement_v1/classes.rb +12 -1
  11. data/generated/google/apis/androidmanagement_v1/representations.rb +1 -0
  12. data/generated/google/apis/bigquery_v2.rb +1 -1
  13. data/generated/google/apis/bigquery_v2/classes.rb +241 -0
  14. data/generated/google/apis/bigquery_v2/representations.rb +115 -0
  15. data/generated/google/apis/bigqueryconnection_v1beta1.rb +1 -1
  16. data/generated/google/apis/bigqueryconnection_v1beta1/classes.rb +62 -29
  17. data/generated/google/apis/bigquerydatatransfer_v1.rb +1 -1
  18. data/generated/google/apis/bigquerydatatransfer_v1/classes.rb +2 -2
  19. data/generated/google/apis/bigquerydatatransfer_v1/service.rb +30 -26
  20. data/generated/google/apis/bigqueryreservation_v1.rb +1 -1
  21. data/generated/google/apis/bigqueryreservation_v1/classes.rb +7 -7
  22. data/generated/google/apis/bigqueryreservation_v1/representations.rb +3 -3
  23. data/generated/google/apis/bigqueryreservation_v1alpha2.rb +1 -1
  24. data/generated/google/apis/bigqueryreservation_v1alpha2/classes.rb +0 -175
  25. data/generated/google/apis/bigqueryreservation_v1alpha2/representations.rb +0 -65
  26. data/generated/google/apis/bigqueryreservation_v1alpha2/service.rb +0 -140
  27. data/generated/google/apis/bigqueryreservation_v1beta1.rb +37 -0
  28. data/generated/google/apis/bigqueryreservation_v1beta1/classes.rb +497 -0
  29. data/generated/google/apis/bigqueryreservation_v1beta1/representations.rb +236 -0
  30. data/generated/google/apis/bigqueryreservation_v1beta1/service.rb +713 -0
  31. data/generated/google/apis/binaryauthorization_v1.rb +1 -1
  32. data/generated/google/apis/binaryauthorization_v1/classes.rb +307 -0
  33. data/generated/google/apis/binaryauthorization_v1/representations.rb +88 -0
  34. data/generated/google/apis/binaryauthorization_v1/service.rb +230 -0
  35. data/generated/google/apis/binaryauthorization_v1beta1.rb +1 -1
  36. data/generated/google/apis/binaryauthorization_v1beta1/classes.rb +62 -29
  37. data/generated/google/apis/blogger_v3.rb +1 -1
  38. data/generated/google/apis/blogger_v3/service.rb +6 -6
  39. data/generated/google/apis/calendar_v3.rb +1 -1
  40. data/generated/google/apis/calendar_v3/classes.rb +1 -0
  41. data/generated/google/apis/cloudasset_v1.rb +1 -1
  42. data/generated/google/apis/cloudasset_v1/classes.rb +72 -29
  43. data/generated/google/apis/cloudasset_v1/representations.rb +1 -0
  44. data/generated/google/apis/cloudasset_v1/service.rb +1 -1
  45. data/generated/google/apis/cloudasset_v1beta1.rb +1 -1
  46. data/generated/google/apis/cloudasset_v1beta1/classes.rb +62 -29
  47. data/generated/google/apis/cloudasset_v1beta1/service.rb +2 -2
  48. data/generated/google/apis/cloudfunctions_v1.rb +1 -1
  49. data/generated/google/apis/cloudfunctions_v1/classes.rb +7 -2
  50. data/generated/google/apis/cloudfunctions_v1/service.rb +10 -7
  51. data/generated/google/apis/cloudfunctions_v1beta2.rb +1 -1
  52. data/generated/google/apis/cloudfunctions_v1beta2/classes.rb +1 -1
  53. data/generated/google/apis/cloudfunctions_v1beta2/service.rb +7 -6
  54. data/generated/google/apis/cloudidentity_v1.rb +4 -1
  55. data/generated/google/apis/cloudidentity_v1beta1.rb +4 -1
  56. data/generated/google/apis/cloudiot_v1.rb +1 -1
  57. data/generated/google/apis/cloudiot_v1/classes.rb +68 -35
  58. data/generated/google/apis/cloudiot_v1/service.rb +18 -17
  59. data/generated/google/apis/cloudkms_v1.rb +1 -1
  60. data/generated/google/apis/cloudkms_v1/classes.rb +77 -35
  61. data/generated/google/apis/cloudkms_v1/service.rb +33 -27
  62. data/generated/google/apis/cloudprivatecatalogproducer_v1beta1.rb +1 -1
  63. data/generated/google/apis/cloudprivatecatalogproducer_v1beta1/classes.rb +62 -29
  64. data/generated/google/apis/cloudsearch_v1.rb +1 -1
  65. data/generated/google/apis/cloudsearch_v1/classes.rb +354 -0
  66. data/generated/google/apis/cloudsearch_v1/representations.rb +196 -0
  67. data/generated/google/apis/cloudsearch_v1/service.rb +314 -2
  68. data/generated/google/apis/cloudtasks_v2beta3.rb +1 -1
  69. data/generated/google/apis/cloudtasks_v2beta3/classes.rb +62 -29
  70. data/generated/google/apis/cloudtrace_v1.rb +1 -1
  71. data/generated/google/apis/cloudtrace_v1/classes.rb +1 -1
  72. data/generated/google/apis/cloudtrace_v1/service.rb +10 -10
  73. data/generated/google/apis/cloudtrace_v2.rb +1 -1
  74. data/generated/google/apis/cloudtrace_v2/classes.rb +3 -3
  75. data/generated/google/apis/commentanalyzer_v1alpha1.rb +1 -1
  76. data/generated/google/apis/commentanalyzer_v1alpha1/classes.rb +7 -10
  77. data/generated/google/apis/compute_alpha.rb +1 -1
  78. data/generated/google/apis/compute_alpha/classes.rb +38 -42
  79. data/generated/google/apis/compute_alpha/representations.rb +5 -16
  80. data/generated/google/apis/compute_beta.rb +1 -1
  81. data/generated/google/apis/compute_beta/classes.rb +10 -5
  82. data/generated/google/apis/compute_v1.rb +1 -1
  83. data/generated/google/apis/compute_v1/classes.rb +1327 -4
  84. data/generated/google/apis/compute_v1/representations.rb +439 -0
  85. data/generated/google/apis/container_v1.rb +1 -1
  86. data/generated/google/apis/container_v1/classes.rb +111 -0
  87. data/generated/google/apis/container_v1/representations.rb +51 -0
  88. data/generated/google/apis/containeranalysis_v1alpha1.rb +1 -1
  89. data/generated/google/apis/containeranalysis_v1alpha1/classes.rb +76 -30
  90. data/generated/google/apis/containeranalysis_v1alpha1/representations.rb +1 -0
  91. data/generated/google/apis/containeranalysis_v1beta1.rb +1 -1
  92. data/generated/google/apis/containeranalysis_v1beta1/classes.rb +70 -30
  93. data/generated/google/apis/content_v2.rb +1 -1
  94. data/generated/google/apis/content_v2/service.rb +0 -226
  95. data/generated/google/apis/dataflow_v1b3.rb +1 -1
  96. data/generated/google/apis/dataflow_v1b3/classes.rb +42 -0
  97. data/generated/google/apis/dataflow_v1b3/representations.rb +4 -0
  98. data/generated/google/apis/dataproc_v1.rb +1 -1
  99. data/generated/google/apis/dataproc_v1/classes.rb +324 -38
  100. data/generated/google/apis/dataproc_v1/representations.rb +97 -0
  101. data/generated/google/apis/dataproc_v1/service.rb +613 -1
  102. data/generated/google/apis/dataproc_v1beta2.rb +1 -1
  103. data/generated/google/apis/dataproc_v1beta2/classes.rb +100 -54
  104. data/generated/google/apis/dataproc_v1beta2/service.rb +29 -22
  105. data/generated/google/apis/dialogflow_v2.rb +1 -1
  106. data/generated/google/apis/dialogflow_v2/classes.rb +363 -167
  107. data/generated/google/apis/dialogflow_v2/representations.rb +160 -49
  108. data/generated/google/apis/dialogflow_v2/service.rb +1 -1
  109. data/generated/google/apis/dialogflow_v2beta1.rb +1 -1
  110. data/generated/google/apis/dialogflow_v2beta1/classes.rb +433 -178
  111. data/generated/google/apis/dialogflow_v2beta1/representations.rb +199 -59
  112. data/generated/google/apis/dialogflow_v2beta1/service.rb +39 -0
  113. data/generated/google/apis/dlp_v2.rb +1 -1
  114. data/generated/google/apis/dlp_v2/classes.rb +3 -4
  115. data/generated/google/apis/doubleclickbidmanager_v1.rb +1 -1
  116. data/generated/google/apis/drive_v2.rb +1 -1
  117. data/generated/google/apis/drive_v2/classes.rb +2 -2
  118. data/generated/google/apis/drive_v3.rb +1 -1
  119. data/generated/google/apis/drive_v3/classes.rb +2 -2
  120. data/generated/google/apis/fcm_v1.rb +1 -1
  121. data/generated/google/apis/fcm_v1/classes.rb +9 -4
  122. data/generated/google/apis/file_v1.rb +1 -1
  123. data/generated/google/apis/file_v1/classes.rb +8 -0
  124. data/generated/google/apis/file_v1/representations.rb +1 -0
  125. data/generated/google/apis/file_v1/service.rb +2 -0
  126. data/generated/google/apis/file_v1beta1.rb +1 -1
  127. data/generated/google/apis/file_v1beta1/classes.rb +8 -0
  128. data/generated/google/apis/file_v1beta1/representations.rb +1 -0
  129. data/generated/google/apis/file_v1beta1/service.rb +2 -0
  130. data/generated/google/apis/firebase_v1beta1.rb +1 -1
  131. data/generated/google/apis/firebase_v1beta1/classes.rb +41 -4
  132. data/generated/google/apis/firebase_v1beta1/representations.rb +2 -0
  133. data/generated/google/apis/firebase_v1beta1/service.rb +22 -14
  134. data/generated/google/apis/fitness_v1.rb +19 -19
  135. data/generated/google/apis/healthcare_v1beta1.rb +1 -1
  136. data/generated/google/apis/healthcare_v1beta1/classes.rb +136 -100
  137. data/generated/google/apis/healthcare_v1beta1/representations.rb +1 -1
  138. data/generated/google/apis/healthcare_v1beta1/service.rb +124 -119
  139. data/generated/google/apis/iam_v1.rb +1 -1
  140. data/generated/google/apis/iam_v1/classes.rb +87 -41
  141. data/generated/google/apis/iap_v1.rb +1 -1
  142. data/generated/google/apis/iap_v1/classes.rb +62 -29
  143. data/generated/google/apis/iap_v1beta1.rb +1 -1
  144. data/generated/google/apis/iap_v1beta1/classes.rb +62 -29
  145. data/generated/google/apis/ml_v1.rb +1 -1
  146. data/generated/google/apis/ml_v1/classes.rb +114 -49
  147. data/generated/google/apis/ml_v1/representations.rb +2 -0
  148. data/generated/google/apis/ml_v1/service.rb +12 -6
  149. data/generated/google/apis/monitoring_v3.rb +1 -1
  150. data/generated/google/apis/monitoring_v3/classes.rb +14 -10
  151. data/generated/google/apis/monitoring_v3/representations.rb +1 -0
  152. data/generated/google/apis/oslogin_v1.rb +1 -1
  153. data/generated/google/apis/oslogin_v1/classes.rb +12 -0
  154. data/generated/google/apis/oslogin_v1/representations.rb +2 -0
  155. data/generated/google/apis/oslogin_v1alpha.rb +1 -1
  156. data/generated/google/apis/oslogin_v1alpha/classes.rb +12 -0
  157. data/generated/google/apis/oslogin_v1alpha/representations.rb +2 -0
  158. data/generated/google/apis/oslogin_v1beta.rb +1 -1
  159. data/generated/google/apis/oslogin_v1beta/classes.rb +12 -0
  160. data/generated/google/apis/oslogin_v1beta/representations.rb +2 -0
  161. data/generated/google/apis/policytroubleshooter_v1beta.rb +34 -0
  162. data/generated/google/apis/policytroubleshooter_v1beta/classes.rb +621 -0
  163. data/generated/google/apis/policytroubleshooter_v1beta/representations.rb +203 -0
  164. data/generated/google/apis/policytroubleshooter_v1beta/service.rb +91 -0
  165. data/generated/google/apis/proximitybeacon_v1beta1.rb +1 -1
  166. data/generated/google/apis/proximitybeacon_v1beta1/classes.rb +7 -4
  167. data/generated/google/apis/proximitybeacon_v1beta1/service.rb +60 -58
  168. data/generated/google/apis/recommender_v1beta1.rb +34 -0
  169. data/generated/google/apis/recommender_v1beta1/classes.rb +502 -0
  170. data/generated/google/apis/recommender_v1beta1/representations.rb +232 -0
  171. data/generated/google/apis/recommender_v1beta1/service.rb +262 -0
  172. data/generated/google/apis/remotebuildexecution_v1.rb +1 -1
  173. data/generated/google/apis/remotebuildexecution_v1/classes.rb +49 -1100
  174. data/generated/google/apis/remotebuildexecution_v1/representations.rb +1 -276
  175. data/generated/google/apis/remotebuildexecution_v1/service.rb +0 -77
  176. data/generated/google/apis/remotebuildexecution_v1alpha.rb +1 -1
  177. data/generated/google/apis/remotebuildexecution_v1alpha/classes.rb +12 -990
  178. data/generated/google/apis/remotebuildexecution_v1alpha/representations.rb +1 -245
  179. data/generated/google/apis/remotebuildexecution_v2.rb +1 -1
  180. data/generated/google/apis/remotebuildexecution_v2/classes.rb +12 -990
  181. data/generated/google/apis/remotebuildexecution_v2/representations.rb +1 -245
  182. data/generated/google/apis/run_v1.rb +1 -1
  183. data/generated/google/apis/run_v1/classes.rb +3553 -33
  184. data/generated/google/apis/run_v1/representations.rb +1186 -4
  185. data/generated/google/apis/run_v1/service.rb +2509 -23
  186. data/generated/google/apis/run_v1alpha1.rb +1 -1
  187. data/generated/google/apis/run_v1alpha1/classes.rb +103 -140
  188. data/generated/google/apis/run_v1alpha1/representations.rb +5 -43
  189. data/generated/google/apis/run_v1beta1.rb +35 -0
  190. data/generated/google/apis/run_v1beta1/classes.rb +1209 -0
  191. data/generated/google/apis/run_v1beta1/representations.rb +421 -0
  192. data/generated/google/apis/run_v1beta1/service.rb +172 -0
  193. data/generated/google/apis/runtimeconfig_v1beta1.rb +1 -1
  194. data/generated/google/apis/runtimeconfig_v1beta1/classes.rb +62 -29
  195. data/generated/google/apis/safebrowsing_v4.rb +5 -2
  196. data/generated/google/apis/safebrowsing_v4/service.rb +4 -1
  197. data/generated/google/apis/securitycenter_v1.rb +1 -1
  198. data/generated/google/apis/securitycenter_v1/classes.rb +70 -35
  199. data/generated/google/apis/securitycenter_v1/service.rb +13 -12
  200. data/generated/google/apis/securitycenter_v1beta1.rb +1 -1
  201. data/generated/google/apis/securitycenter_v1beta1/classes.rb +71 -35
  202. data/generated/google/apis/securitycenter_v1beta1/service.rb +13 -12
  203. data/generated/google/apis/servicebroker_v1.rb +1 -1
  204. data/generated/google/apis/servicebroker_v1/classes.rb +62 -29
  205. data/generated/google/apis/servicebroker_v1alpha1.rb +1 -1
  206. data/generated/google/apis/servicebroker_v1alpha1/classes.rb +62 -29
  207. data/generated/google/apis/servicebroker_v1beta1.rb +1 -1
  208. data/generated/google/apis/servicebroker_v1beta1/classes.rb +62 -29
  209. data/generated/google/apis/serviceconsumermanagement_v1.rb +1 -1
  210. data/generated/google/apis/serviceconsumermanagement_v1/classes.rb +11 -2
  211. data/generated/google/apis/serviceconsumermanagement_v1/representations.rb +1 -0
  212. data/generated/google/apis/servicemanagement_v1.rb +1 -1
  213. data/generated/google/apis/servicemanagement_v1/classes.rb +63 -33
  214. data/generated/google/apis/servicenetworking_v1.rb +1 -1
  215. data/generated/google/apis/servicenetworking_v1/classes.rb +11 -2
  216. data/generated/google/apis/servicenetworking_v1/representations.rb +1 -0
  217. data/generated/google/apis/servicenetworking_v1beta.rb +1 -1
  218. data/generated/google/apis/servicenetworking_v1beta/classes.rb +11 -2
  219. data/generated/google/apis/servicenetworking_v1beta/representations.rb +1 -0
  220. data/generated/google/apis/serviceusage_v1.rb +1 -1
  221. data/generated/google/apis/serviceusage_v1/classes.rb +11 -2
  222. data/generated/google/apis/serviceusage_v1/representations.rb +1 -0
  223. data/generated/google/apis/serviceusage_v1beta1.rb +1 -1
  224. data/generated/google/apis/serviceusage_v1beta1/classes.rb +11 -2
  225. data/generated/google/apis/serviceusage_v1beta1/representations.rb +1 -0
  226. data/generated/google/apis/spanner_v1.rb +1 -1
  227. data/generated/google/apis/spanner_v1/classes.rb +78 -2
  228. data/generated/google/apis/spanner_v1/representations.rb +44 -0
  229. data/generated/google/apis/spanner_v1/service.rb +35 -0
  230. data/generated/google/apis/speech_v1.rb +1 -1
  231. data/generated/google/apis/speech_v1/classes.rb +73 -19
  232. data/generated/google/apis/speech_v1/representations.rb +18 -0
  233. data/generated/google/apis/speech_v1p1beta1.rb +1 -1
  234. data/generated/google/apis/speech_v1p1beta1/classes.rb +31 -35
  235. data/generated/google/apis/speech_v2beta.rb +1 -1
  236. data/generated/google/apis/speech_v2beta/classes.rb +6 -6
  237. data/generated/google/apis/speech_v2beta/representations.rb +2 -2
  238. data/generated/google/apis/storage_v1.rb +1 -1
  239. data/generated/google/apis/storage_v1/classes.rb +1 -1
  240. data/generated/google/apis/storage_v1/representations.rb +2 -1
  241. data/generated/google/apis/storage_v1beta1.rb +1 -1
  242. data/generated/google/apis/storage_v1beta2.rb +1 -1
  243. data/generated/google/apis/streetviewpublish_v1.rb +1 -1
  244. data/generated/google/apis/streetviewpublish_v1/classes.rb +1 -1
  245. data/generated/google/apis/streetviewpublish_v1/service.rb +9 -5
  246. data/generated/google/apis/testing_v1.rb +1 -1
  247. data/generated/google/apis/testing_v1/classes.rb +42 -0
  248. data/generated/google/apis/testing_v1/representations.rb +18 -0
  249. data/generated/google/apis/texttospeech_v1.rb +1 -1
  250. data/generated/google/apis/texttospeech_v1/classes.rb +6 -5
  251. data/generated/google/apis/texttospeech_v1/service.rb +1 -1
  252. data/generated/google/apis/texttospeech_v1beta1.rb +1 -1
  253. data/generated/google/apis/texttospeech_v1beta1/classes.rb +6 -5
  254. data/generated/google/apis/texttospeech_v1beta1/service.rb +1 -1
  255. data/generated/google/apis/toolresults_v1beta3.rb +1 -1
  256. data/generated/google/apis/toolresults_v1beta3/classes.rb +1 -1
  257. data/generated/google/apis/translate_v3beta1.rb +1 -1
  258. data/generated/google/apis/translate_v3beta1/classes.rb +22 -16
  259. data/generated/google/apis/translate_v3beta1/service.rb +31 -31
  260. data/generated/google/apis/videointelligence_v1.rb +1 -1
  261. data/generated/google/apis/videointelligence_v1/classes.rb +45 -10
  262. data/generated/google/apis/videointelligence_v1beta2.rb +1 -1
  263. data/generated/google/apis/videointelligence_v1beta2/classes.rb +45 -10
  264. data/generated/google/apis/videointelligence_v1p1beta1.rb +1 -1
  265. data/generated/google/apis/videointelligence_v1p1beta1/classes.rb +45 -10
  266. data/generated/google/apis/videointelligence_v1p2beta1.rb +1 -1
  267. data/generated/google/apis/videointelligence_v1p2beta1/classes.rb +45 -10
  268. data/generated/google/apis/videointelligence_v1p3beta1.rb +1 -1
  269. data/generated/google/apis/videointelligence_v1p3beta1/classes.rb +45 -10
  270. data/generated/google/apis/vision_v1.rb +1 -1
  271. data/generated/google/apis/vision_v1/classes.rb +6 -156
  272. data/generated/google/apis/vision_v1/representations.rb +0 -44
  273. data/generated/google/apis/vision_v1p1beta1.rb +1 -1
  274. data/generated/google/apis/vision_v1p1beta1/classes.rb +6 -156
  275. data/generated/google/apis/vision_v1p1beta1/representations.rb +0 -44
  276. data/generated/google/apis/vision_v1p2beta1.rb +1 -1
  277. data/generated/google/apis/vision_v1p2beta1/classes.rb +6 -156
  278. data/generated/google/apis/vision_v1p2beta1/representations.rb +0 -44
  279. data/generated/google/apis/websecurityscanner_v1.rb +1 -1
  280. data/generated/google/apis/websecurityscanner_v1alpha.rb +1 -1
  281. data/generated/google/apis/websecurityscanner_v1alpha/classes.rb +21 -31
  282. data/generated/google/apis/websecurityscanner_v1alpha/service.rb +1 -1
  283. data/generated/google/apis/websecurityscanner_v1beta.rb +1 -1
  284. data/generated/google/apis/websecurityscanner_v1beta/classes.rb +30 -42
  285. data/generated/google/apis/websecurityscanner_v1beta/service.rb +1 -1
  286. data/generated/google/apis/youtube_partner_v1.rb +1 -1
  287. data/generated/google/apis/youtube_partner_v1/classes.rb +0 -83
  288. data/generated/google/apis/youtube_partner_v1/representations.rb +0 -35
  289. data/generated/google/apis/youtube_partner_v1/service.rb +0 -100
  290. data/lib/google/apis/version.rb +1 -1
  291. metadata +18 -6
  292. data/generated/google/apis/dfareporting_v3_1.rb +0 -40
  293. data/generated/google/apis/dfareporting_v3_1/classes.rb +0 -11998
  294. data/generated/google/apis/dfareporting_v3_1/representations.rb +0 -4313
  295. data/generated/google/apis/dfareporting_v3_1/service.rb +0 -8688
@@ -27,7 +27,7 @@ module Google
27
27
  # @see https://cloud.google.com/iam/
28
28
  module IamV1
29
29
  VERSION = 'V1'
30
- REVISION = '20190906'
30
+ REVISION = '20190927'
31
31
 
32
32
  # View and manage your data across Google Cloud Platform services
33
33
  AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'
@@ -519,25 +519,34 @@ module Google
519
519
 
520
520
  # Defines an Identity and Access Management (IAM) policy. It is used to
521
521
  # specify access control policies for Cloud Platform resources.
522
- # A `Policy` consists of a list of `bindings`. A `binding` binds a list of
523
- # `members` to a `role`, where the members can be user accounts, Google groups,
524
- # Google domains, and service accounts. A `role` is a named list of permissions
525
- # defined by IAM.
522
+ # A `Policy` is a collection of `bindings`. A `binding` binds one or more
523
+ # `members` to a single `role`. Members can be user accounts, service accounts,
524
+ # Google groups, and domains (such as G Suite). A `role` is a named list of
525
+ # permissions (defined by IAM or configured by users). A `binding` can
526
+ # optionally specify a `condition`, which is a logic expression that further
527
+ # constrains the role binding based on attributes about the request and/or
528
+ # target resource.
526
529
  # **JSON Example**
527
530
  # `
528
531
  # "bindings": [
529
532
  # `
530
- # "role": "roles/owner",
533
+ # "role": "roles/resourcemanager.organizationAdmin",
531
534
  # "members": [
532
535
  # "user:mike@example.com",
533
536
  # "group:admins@example.com",
534
537
  # "domain:google.com",
535
- # "serviceAccount:my-other-app@appspot.gserviceaccount.com"
538
+ # "serviceAccount:my-project-id@appspot.gserviceaccount.com"
536
539
  # ]
537
540
  # `,
538
541
  # `
539
- # "role": "roles/viewer",
540
- # "members": ["user:sean@example.com"]
542
+ # "role": "roles/resourcemanager.organizationViewer",
543
+ # "members": ["user:eve@example.com"],
544
+ # "condition": `
545
+ # "title": "expirable access",
546
+ # "description": "Does not grant access after Sep 2020",
547
+ # "expression": "request.time <
548
+ # timestamp('2020-10-01T00:00:00.000Z')",
549
+ # `
541
550
  # `
542
551
  # ]
543
552
  # `
@@ -547,11 +556,15 @@ module Google
547
556
  # - user:mike@example.com
548
557
  # - group:admins@example.com
549
558
  # - domain:google.com
550
- # - serviceAccount:my-other-app@appspot.gserviceaccount.com
551
- # role: roles/owner
559
+ # - serviceAccount:my-project-id@appspot.gserviceaccount.com
560
+ # role: roles/resourcemanager.organizationAdmin
552
561
  # - members:
553
- # - user:sean@example.com
554
- # role: roles/viewer
562
+ # - user:eve@example.com
563
+ # role: roles/resourcemanager.organizationViewer
564
+ # condition:
565
+ # title: expirable access
566
+ # description: Does not grant access after Sep 2020
567
+ # expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
555
568
  # For a description of IAM and its features, see the
556
569
  # [IAM developer's guide](https://cloud.google.com/iam/docs).
557
570
  # Corresponds to the JSON property `policy`
@@ -872,25 +885,34 @@ module Google
872
885
 
873
886
  # Defines an Identity and Access Management (IAM) policy. It is used to
874
887
  # specify access control policies for Cloud Platform resources.
875
- # A `Policy` consists of a list of `bindings`. A `binding` binds a list of
876
- # `members` to a `role`, where the members can be user accounts, Google groups,
877
- # Google domains, and service accounts. A `role` is a named list of permissions
878
- # defined by IAM.
888
+ # A `Policy` is a collection of `bindings`. A `binding` binds one or more
889
+ # `members` to a single `role`. Members can be user accounts, service accounts,
890
+ # Google groups, and domains (such as G Suite). A `role` is a named list of
891
+ # permissions (defined by IAM or configured by users). A `binding` can
892
+ # optionally specify a `condition`, which is a logic expression that further
893
+ # constrains the role binding based on attributes about the request and/or
894
+ # target resource.
879
895
  # **JSON Example**
880
896
  # `
881
897
  # "bindings": [
882
898
  # `
883
- # "role": "roles/owner",
899
+ # "role": "roles/resourcemanager.organizationAdmin",
884
900
  # "members": [
885
901
  # "user:mike@example.com",
886
902
  # "group:admins@example.com",
887
903
  # "domain:google.com",
888
- # "serviceAccount:my-other-app@appspot.gserviceaccount.com"
904
+ # "serviceAccount:my-project-id@appspot.gserviceaccount.com"
889
905
  # ]
890
906
  # `,
891
907
  # `
892
- # "role": "roles/viewer",
893
- # "members": ["user:sean@example.com"]
908
+ # "role": "roles/resourcemanager.organizationViewer",
909
+ # "members": ["user:eve@example.com"],
910
+ # "condition": `
911
+ # "title": "expirable access",
912
+ # "description": "Does not grant access after Sep 2020",
913
+ # "expression": "request.time <
914
+ # timestamp('2020-10-01T00:00:00.000Z')",
915
+ # `
894
916
  # `
895
917
  # ]
896
918
  # `
@@ -900,11 +922,15 @@ module Google
900
922
  # - user:mike@example.com
901
923
  # - group:admins@example.com
902
924
  # - domain:google.com
903
- # - serviceAccount:my-other-app@appspot.gserviceaccount.com
904
- # role: roles/owner
925
+ # - serviceAccount:my-project-id@appspot.gserviceaccount.com
926
+ # role: roles/resourcemanager.organizationAdmin
905
927
  # - members:
906
- # - user:sean@example.com
907
- # role: roles/viewer
928
+ # - user:eve@example.com
929
+ # role: roles/resourcemanager.organizationViewer
930
+ # condition:
931
+ # title: expirable access
932
+ # description: Does not grant access after Sep 2020
933
+ # expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
908
934
  # For a description of IAM and its features, see the
909
935
  # [IAM developer's guide](https://cloud.google.com/iam/docs).
910
936
  class Policy
@@ -915,7 +941,8 @@ module Google
915
941
  # @return [Array<Google::Apis::IamV1::AuditConfig>]
916
942
  attr_accessor :audit_configs
917
943
 
918
- # Associates a list of `members` to a `role`.
944
+ # Associates a list of `members` to a `role`. Optionally may specify a
945
+ # `condition` that determines when binding is in effect.
919
946
  # `bindings` with no members will result in an error.
920
947
  # Corresponds to the JSON property `bindings`
921
948
  # @return [Array<Google::Apis::IamV1::Binding>]
@@ -929,7 +956,9 @@ module Google
929
956
  # systems are expected to put that etag in the request to `setIamPolicy` to
930
957
  # ensure that their change will be applied to the same version of the policy.
931
958
  # If no `etag` is provided in the call to `setIamPolicy`, then the existing
932
- # policy is overwritten.
959
+ # policy is overwritten. Due to blind-set semantics of an etag-less policy,
960
+ # 'setIamPolicy' will not fail even if either of incoming or stored policy
961
+ # does not meet the version requirements.
933
962
  # Corresponds to the JSON property `etag`
934
963
  # NOTE: Values are automatically base64 encoded/decoded in the client library.
935
964
  # @return [String]
@@ -938,9 +967,13 @@ module Google
938
967
  # Specifies the format of the policy.
939
968
  # Valid values are 0, 1, and 3. Requests specifying an invalid value will be
940
969
  # rejected.
941
- # Policies with any conditional bindings must specify version 3. Policies
942
- # without any conditional bindings may specify any valid value or leave the
943
- # field unset.
970
+ # Operations affecting conditional bindings must specify version 3. This can
971
+ # be either setting a conditional policy, modifying a conditional binding,
972
+ # or removing a conditional binding from the stored conditional policy.
973
+ # Operations on non-conditional policies may specify any valid value or
974
+ # leave the field unset.
975
+ # If no etag is provided in the call to `setIamPolicy`, any version
976
+ # compliance checks on the incoming and/or stored policy is skipped.
944
977
  # Corresponds to the JSON property `version`
945
978
  # @return [Fixnum]
946
979
  attr_accessor :version
@@ -1402,25 +1435,34 @@ module Google
1402
1435
 
1403
1436
  # Defines an Identity and Access Management (IAM) policy. It is used to
1404
1437
  # specify access control policies for Cloud Platform resources.
1405
- # A `Policy` consists of a list of `bindings`. A `binding` binds a list of
1406
- # `members` to a `role`, where the members can be user accounts, Google groups,
1407
- # Google domains, and service accounts. A `role` is a named list of permissions
1408
- # defined by IAM.
1438
+ # A `Policy` is a collection of `bindings`. A `binding` binds one or more
1439
+ # `members` to a single `role`. Members can be user accounts, service accounts,
1440
+ # Google groups, and domains (such as G Suite). A `role` is a named list of
1441
+ # permissions (defined by IAM or configured by users). A `binding` can
1442
+ # optionally specify a `condition`, which is a logic expression that further
1443
+ # constrains the role binding based on attributes about the request and/or
1444
+ # target resource.
1409
1445
  # **JSON Example**
1410
1446
  # `
1411
1447
  # "bindings": [
1412
1448
  # `
1413
- # "role": "roles/owner",
1449
+ # "role": "roles/resourcemanager.organizationAdmin",
1414
1450
  # "members": [
1415
1451
  # "user:mike@example.com",
1416
1452
  # "group:admins@example.com",
1417
1453
  # "domain:google.com",
1418
- # "serviceAccount:my-other-app@appspot.gserviceaccount.com"
1454
+ # "serviceAccount:my-project-id@appspot.gserviceaccount.com"
1419
1455
  # ]
1420
1456
  # `,
1421
1457
  # `
1422
- # "role": "roles/viewer",
1423
- # "members": ["user:sean@example.com"]
1458
+ # "role": "roles/resourcemanager.organizationViewer",
1459
+ # "members": ["user:eve@example.com"],
1460
+ # "condition": `
1461
+ # "title": "expirable access",
1462
+ # "description": "Does not grant access after Sep 2020",
1463
+ # "expression": "request.time <
1464
+ # timestamp('2020-10-01T00:00:00.000Z')",
1465
+ # `
1424
1466
  # `
1425
1467
  # ]
1426
1468
  # `
@@ -1430,11 +1472,15 @@ module Google
1430
1472
  # - user:mike@example.com
1431
1473
  # - group:admins@example.com
1432
1474
  # - domain:google.com
1433
- # - serviceAccount:my-other-app@appspot.gserviceaccount.com
1434
- # role: roles/owner
1475
+ # - serviceAccount:my-project-id@appspot.gserviceaccount.com
1476
+ # role: roles/resourcemanager.organizationAdmin
1435
1477
  # - members:
1436
- # - user:sean@example.com
1437
- # role: roles/viewer
1478
+ # - user:eve@example.com
1479
+ # role: roles/resourcemanager.organizationViewer
1480
+ # condition:
1481
+ # title: expirable access
1482
+ # description: Does not grant access after Sep 2020
1483
+ # expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
1438
1484
  # For a description of IAM and its features, see the
1439
1485
  # [IAM developer's guide](https://cloud.google.com/iam/docs).
1440
1486
  # Corresponds to the JSON property `policy`
@@ -25,7 +25,7 @@ module Google
25
25
  # @see https://cloud.google.com/iap
26
26
  module IapV1
27
27
  VERSION = 'V1'
28
- REVISION = '20190906'
28
+ REVISION = '20190920'
29
29
 
30
30
  # View and manage your data across Google Cloud Platform services
31
31
  AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'
@@ -162,25 +162,34 @@ module Google
162
162
 
163
163
  # Defines an Identity and Access Management (IAM) policy. It is used to
164
164
  # specify access control policies for Cloud Platform resources.
165
- # A `Policy` consists of a list of `bindings`. A `binding` binds a list of
166
- # `members` to a `role`, where the members can be user accounts, Google groups,
167
- # Google domains, and service accounts. A `role` is a named list of permissions
168
- # defined by IAM.
165
+ # A `Policy` is a collection of `bindings`. A `binding` binds one or more
166
+ # `members` to a single `role`. Members can be user accounts, service accounts,
167
+ # Google groups, and domains (such as G Suite). A `role` is a named list of
168
+ # permissions (defined by IAM or configured by users). A `binding` can
169
+ # optionally specify a `condition`, which is a logic expression that further
170
+ # constrains the role binding based on attributes about the request and/or
171
+ # target resource.
169
172
  # **JSON Example**
170
173
  # `
171
174
  # "bindings": [
172
175
  # `
173
- # "role": "roles/owner",
176
+ # "role": "role/resourcemanager.organizationAdmin",
174
177
  # "members": [
175
178
  # "user:mike@example.com",
176
179
  # "group:admins@example.com",
177
180
  # "domain:google.com",
178
- # "serviceAccount:my-other-app@appspot.gserviceaccount.com"
181
+ # "serviceAccount:my-project-id@appspot.gserviceaccount.com"
179
182
  # ]
180
183
  # `,
181
184
  # `
182
- # "role": "roles/viewer",
183
- # "members": ["user:sean@example.com"]
185
+ # "role": "roles/resourcemanager.organizationViewer",
186
+ # "members": ["user:eve@example.com"],
187
+ # "condition": `
188
+ # "title": "expirable access",
189
+ # "description": "Does not grant access after Sep 2020",
190
+ # "expression": "request.time <
191
+ # timestamp('2020-10-01T00:00:00.000Z')",
192
+ # `
184
193
  # `
185
194
  # ]
186
195
  # `
@@ -190,17 +199,22 @@ module Google
190
199
  # - user:mike@example.com
191
200
  # - group:admins@example.com
192
201
  # - domain:google.com
193
- # - serviceAccount:my-other-app@appspot.gserviceaccount.com
194
- # role: roles/owner
202
+ # - serviceAccount:my-project-id@appspot.gserviceaccount.com
203
+ # role: roles/resourcemanager.organizationAdmin
195
204
  # - members:
196
- # - user:sean@example.com
197
- # role: roles/viewer
205
+ # - user:eve@example.com
206
+ # role: roles/resourcemanager.organizationViewer
207
+ # condition:
208
+ # title: expirable access
209
+ # description: Does not grant access after Sep 2020
210
+ # expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
198
211
  # For a description of IAM and its features, see the
199
212
  # [IAM developer's guide](https://cloud.google.com/iam/docs).
200
213
  class Policy
201
214
  include Google::Apis::Core::Hashable
202
215
 
203
- # Associates a list of `members` to a `role`.
216
+ # Associates a list of `members` to a `role`. Optionally may specify a
217
+ # `condition` that determines when binding is in effect.
204
218
  # `bindings` with no members will result in an error.
205
219
  # Corresponds to the JSON property `bindings`
206
220
  # @return [Array<Google::Apis::IapV1::Binding>]
@@ -214,7 +228,9 @@ module Google
214
228
  # systems are expected to put that etag in the request to `setIamPolicy` to
215
229
  # ensure that their change will be applied to the same version of the policy.
216
230
  # If no `etag` is provided in the call to `setIamPolicy`, then the existing
217
- # policy is overwritten.
231
+ # policy is overwritten. Due to blind-set semantics of an etag-less policy,
232
+ # 'setIamPolicy' will not fail even if either of incoming or stored policy
233
+ # does not meet the version requirements.
218
234
  # Corresponds to the JSON property `etag`
219
235
  # NOTE: Values are automatically base64 encoded/decoded in the client library.
220
236
  # @return [String]
@@ -223,9 +239,13 @@ module Google
223
239
  # Specifies the format of the policy.
224
240
  # Valid values are 0, 1, and 3. Requests specifying an invalid value will be
225
241
  # rejected.
226
- # Policies with any conditional bindings must specify version 3. Policies
227
- # without any conditional bindings may specify any valid value or leave the
228
- # field unset.
242
+ # Operations affecting conditional bindings must specify version 3. This can
243
+ # be either setting a conditional policy, modifying a conditional binding,
244
+ # or removing a conditional binding from the stored conditional policy.
245
+ # Operations on non-conditional policies may specify any valid value or
246
+ # leave the field unset.
247
+ # If no etag is provided in the call to `setIamPolicy`, any version
248
+ # compliance checks on the incoming and/or stored policy is skipped.
229
249
  # Corresponds to the JSON property `version`
230
250
  # @return [Fixnum]
231
251
  attr_accessor :version
@@ -248,25 +268,34 @@ module Google
248
268
 
249
269
  # Defines an Identity and Access Management (IAM) policy. It is used to
250
270
  # specify access control policies for Cloud Platform resources.
251
- # A `Policy` consists of a list of `bindings`. A `binding` binds a list of
252
- # `members` to a `role`, where the members can be user accounts, Google groups,
253
- # Google domains, and service accounts. A `role` is a named list of permissions
254
- # defined by IAM.
271
+ # A `Policy` is a collection of `bindings`. A `binding` binds one or more
272
+ # `members` to a single `role`. Members can be user accounts, service accounts,
273
+ # Google groups, and domains (such as G Suite). A `role` is a named list of
274
+ # permissions (defined by IAM or configured by users). A `binding` can
275
+ # optionally specify a `condition`, which is a logic expression that further
276
+ # constrains the role binding based on attributes about the request and/or
277
+ # target resource.
255
278
  # **JSON Example**
256
279
  # `
257
280
  # "bindings": [
258
281
  # `
259
- # "role": "roles/owner",
282
+ # "role": "role/resourcemanager.organizationAdmin",
260
283
  # "members": [
261
284
  # "user:mike@example.com",
262
285
  # "group:admins@example.com",
263
286
  # "domain:google.com",
264
- # "serviceAccount:my-other-app@appspot.gserviceaccount.com"
287
+ # "serviceAccount:my-project-id@appspot.gserviceaccount.com"
265
288
  # ]
266
289
  # `,
267
290
  # `
268
- # "role": "roles/viewer",
269
- # "members": ["user:sean@example.com"]
291
+ # "role": "roles/resourcemanager.organizationViewer",
292
+ # "members": ["user:eve@example.com"],
293
+ # "condition": `
294
+ # "title": "expirable access",
295
+ # "description": "Does not grant access after Sep 2020",
296
+ # "expression": "request.time <
297
+ # timestamp('2020-10-01T00:00:00.000Z')",
298
+ # `
270
299
  # `
271
300
  # ]
272
301
  # `
@@ -276,11 +305,15 @@ module Google
276
305
  # - user:mike@example.com
277
306
  # - group:admins@example.com
278
307
  # - domain:google.com
279
- # - serviceAccount:my-other-app@appspot.gserviceaccount.com
280
- # role: roles/owner
308
+ # - serviceAccount:my-project-id@appspot.gserviceaccount.com
309
+ # role: roles/resourcemanager.organizationAdmin
281
310
  # - members:
282
- # - user:sean@example.com
283
- # role: roles/viewer
311
+ # - user:eve@example.com
312
+ # role: roles/resourcemanager.organizationViewer
313
+ # condition:
314
+ # title: expirable access
315
+ # description: Does not grant access after Sep 2020
316
+ # expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
284
317
  # For a description of IAM and its features, see the
285
318
  # [IAM developer's guide](https://cloud.google.com/iam/docs).
286
319
  # Corresponds to the JSON property `policy`
@@ -25,7 +25,7 @@ module Google
25
25
  # @see https://cloud.google.com/iap
26
26
  module IapV1beta1
27
27
  VERSION = 'V1beta1'
28
- REVISION = '20190906'
28
+ REVISION = '20190920'
29
29
 
30
30
  # View and manage your data across Google Cloud Platform services
31
31
  AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'
@@ -162,25 +162,34 @@ module Google
162
162
 
163
163
  # Defines an Identity and Access Management (IAM) policy. It is used to
164
164
  # specify access control policies for Cloud Platform resources.
165
- # A `Policy` consists of a list of `bindings`. A `binding` binds a list of
166
- # `members` to a `role`, where the members can be user accounts, Google groups,
167
- # Google domains, and service accounts. A `role` is a named list of permissions
168
- # defined by IAM.
165
+ # A `Policy` is a collection of `bindings`. A `binding` binds one or more
166
+ # `members` to a single `role`. Members can be user accounts, service accounts,
167
+ # Google groups, and domains (such as G Suite). A `role` is a named list of
168
+ # permissions (defined by IAM or configured by users). A `binding` can
169
+ # optionally specify a `condition`, which is a logic expression that further
170
+ # constrains the role binding based on attributes about the request and/or
171
+ # target resource.
169
172
  # **JSON Example**
170
173
  # `
171
174
  # "bindings": [
172
175
  # `
173
- # "role": "roles/owner",
176
+ # "role": "role/resourcemanager.organizationAdmin",
174
177
  # "members": [
175
178
  # "user:mike@example.com",
176
179
  # "group:admins@example.com",
177
180
  # "domain:google.com",
178
- # "serviceAccount:my-other-app@appspot.gserviceaccount.com"
181
+ # "serviceAccount:my-project-id@appspot.gserviceaccount.com"
179
182
  # ]
180
183
  # `,
181
184
  # `
182
- # "role": "roles/viewer",
183
- # "members": ["user:sean@example.com"]
185
+ # "role": "roles/resourcemanager.organizationViewer",
186
+ # "members": ["user:eve@example.com"],
187
+ # "condition": `
188
+ # "title": "expirable access",
189
+ # "description": "Does not grant access after Sep 2020",
190
+ # "expression": "request.time <
191
+ # timestamp('2020-10-01T00:00:00.000Z')",
192
+ # `
184
193
  # `
185
194
  # ]
186
195
  # `
@@ -190,17 +199,22 @@ module Google
190
199
  # - user:mike@example.com
191
200
  # - group:admins@example.com
192
201
  # - domain:google.com
193
- # - serviceAccount:my-other-app@appspot.gserviceaccount.com
194
- # role: roles/owner
202
+ # - serviceAccount:my-project-id@appspot.gserviceaccount.com
203
+ # role: roles/resourcemanager.organizationAdmin
195
204
  # - members:
196
- # - user:sean@example.com
197
- # role: roles/viewer
205
+ # - user:eve@example.com
206
+ # role: roles/resourcemanager.organizationViewer
207
+ # condition:
208
+ # title: expirable access
209
+ # description: Does not grant access after Sep 2020
210
+ # expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
198
211
  # For a description of IAM and its features, see the
199
212
  # [IAM developer's guide](https://cloud.google.com/iam/docs).
200
213
  class Policy
201
214
  include Google::Apis::Core::Hashable
202
215
 
203
- # Associates a list of `members` to a `role`.
216
+ # Associates a list of `members` to a `role`. Optionally may specify a
217
+ # `condition` that determines when binding is in effect.
204
218
  # `bindings` with no members will result in an error.
205
219
  # Corresponds to the JSON property `bindings`
206
220
  # @return [Array<Google::Apis::IapV1beta1::Binding>]
@@ -214,7 +228,9 @@ module Google
214
228
  # systems are expected to put that etag in the request to `setIamPolicy` to
215
229
  # ensure that their change will be applied to the same version of the policy.
216
230
  # If no `etag` is provided in the call to `setIamPolicy`, then the existing
217
- # policy is overwritten.
231
+ # policy is overwritten. Due to blind-set semantics of an etag-less policy,
232
+ # 'setIamPolicy' will not fail even if either of incoming or stored policy
233
+ # does not meet the version requirements.
218
234
  # Corresponds to the JSON property `etag`
219
235
  # NOTE: Values are automatically base64 encoded/decoded in the client library.
220
236
  # @return [String]
@@ -223,9 +239,13 @@ module Google
223
239
  # Specifies the format of the policy.
224
240
  # Valid values are 0, 1, and 3. Requests specifying an invalid value will be
225
241
  # rejected.
226
- # Policies with any conditional bindings must specify version 3. Policies
227
- # without any conditional bindings may specify any valid value or leave the
228
- # field unset.
242
+ # Operations affecting conditional bindings must specify version 3. This can
243
+ # be either setting a conditional policy, modifying a conditional binding,
244
+ # or removing a conditional binding from the stored conditional policy.
245
+ # Operations on non-conditional policies may specify any valid value or
246
+ # leave the field unset.
247
+ # If no etag is provided in the call to `setIamPolicy`, any version
248
+ # compliance checks on the incoming and/or stored policy is skipped.
229
249
  # Corresponds to the JSON property `version`
230
250
  # @return [Fixnum]
231
251
  attr_accessor :version
@@ -248,25 +268,34 @@ module Google
248
268
 
249
269
  # Defines an Identity and Access Management (IAM) policy. It is used to
250
270
  # specify access control policies for Cloud Platform resources.
251
- # A `Policy` consists of a list of `bindings`. A `binding` binds a list of
252
- # `members` to a `role`, where the members can be user accounts, Google groups,
253
- # Google domains, and service accounts. A `role` is a named list of permissions
254
- # defined by IAM.
271
+ # A `Policy` is a collection of `bindings`. A `binding` binds one or more
272
+ # `members` to a single `role`. Members can be user accounts, service accounts,
273
+ # Google groups, and domains (such as G Suite). A `role` is a named list of
274
+ # permissions (defined by IAM or configured by users). A `binding` can
275
+ # optionally specify a `condition`, which is a logic expression that further
276
+ # constrains the role binding based on attributes about the request and/or
277
+ # target resource.
255
278
  # **JSON Example**
256
279
  # `
257
280
  # "bindings": [
258
281
  # `
259
- # "role": "roles/owner",
282
+ # "role": "role/resourcemanager.organizationAdmin",
260
283
  # "members": [
261
284
  # "user:mike@example.com",
262
285
  # "group:admins@example.com",
263
286
  # "domain:google.com",
264
- # "serviceAccount:my-other-app@appspot.gserviceaccount.com"
287
+ # "serviceAccount:my-project-id@appspot.gserviceaccount.com"
265
288
  # ]
266
289
  # `,
267
290
  # `
268
- # "role": "roles/viewer",
269
- # "members": ["user:sean@example.com"]
291
+ # "role": "roles/resourcemanager.organizationViewer",
292
+ # "members": ["user:eve@example.com"],
293
+ # "condition": `
294
+ # "title": "expirable access",
295
+ # "description": "Does not grant access after Sep 2020",
296
+ # "expression": "request.time <
297
+ # timestamp('2020-10-01T00:00:00.000Z')",
298
+ # `
270
299
  # `
271
300
  # ]
272
301
  # `
@@ -276,11 +305,15 @@ module Google
276
305
  # - user:mike@example.com
277
306
  # - group:admins@example.com
278
307
  # - domain:google.com
279
- # - serviceAccount:my-other-app@appspot.gserviceaccount.com
280
- # role: roles/owner
308
+ # - serviceAccount:my-project-id@appspot.gserviceaccount.com
309
+ # role: roles/resourcemanager.organizationAdmin
281
310
  # - members:
282
- # - user:sean@example.com
283
- # role: roles/viewer
311
+ # - user:eve@example.com
312
+ # role: roles/resourcemanager.organizationViewer
313
+ # condition:
314
+ # title: expirable access
315
+ # description: Does not grant access after Sep 2020
316
+ # expression: request.time < timestamp('2020-10-01T00:00:00.000Z')
284
317
  # For a description of IAM and its features, see the
285
318
  # [IAM developer's guide](https://cloud.google.com/iam/docs).
286
319
  # Corresponds to the JSON property `policy`