google-api-client 0.44.1 → 0.46.1

data/generated/google/apis/cloudidentity_v1beta1.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://cloud.google.com/identity/
     module CloudidentityV1beta1
       VERSION = 'V1beta1'
-      REVISION = '20200814'
+      REVISION = '20200927'
 
       # See your device details
       AUTH_CLOUD_IDENTITY_DEVICES_LOOKUP = 'https://www.googleapis.com/auth/cloud-identity.devices.lookup'

data/generated/google/apis/cloudidentity_v1beta1/classes.rb

@@ -239,6 +239,29 @@ module Google
         end
       end
       
+      # The response message for MembershipsService.CheckTransitiveMembership.
+      class CheckTransitiveMembershipResponse
+        include Google::Apis::Core::Hashable
+      
+        # Response does not include the possible roles of a member since the behavior of
+        # this rpc is not all-or-nothing unlike the other rpcs. So, it may not be
+        # possible to list all the roles definitively, due to possible lack of
+        # authorization in some of the paths.
+        # Corresponds to the JSON property `hasMembership`
+        # @return [Boolean]
+        attr_accessor :has_membership
+        alias_method :has_membership?, :has_membership
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @has_membership = args[:has_membership] if args.key?(:has_membership)
+        end
+      end
+      
       # Represents the state associated with an API client calling the Devices API.
       # Resource representing ClientState and supports updates from API users
       class ClientState
@@ -985,7 +1008,10 @@ module Google
         # @return [String]
         attr_accessor :etag
       
-        # The Health score of the resource
+        # The Health score of the resource. The Health score is the callers
+        # specification of the condition of the device from a usability point of view.
+        # For example, a third-party device management provider may specify a health
+        # score based on its compliance with organizational policies.
         # Corresponds to the JSON property `healthScore`
         # @return [String]
         attr_accessor :health_score
@@ -1010,7 +1036,17 @@ module Google
         # Output only. [Resource name](https://cloud.google.com/apis/design/
         # resource_names) of the ClientState in format: `devices/`device_id`/deviceUsers/
         # `device_user_id`/clientState/`partner_id``, where partner_id corresponds to
-        # the partner storing the data.
+        # the partner storing the data. For partners belonging to the "BeyondCorp
+        # Alliance", this is the partner ID specified to you by Google. For all other
+        # callers, this is a string of the form: ``customer_id`-suffix`, where `
+        # customer_id` is your customer ID. The *suffix* is any string the caller
+        # specifies. This string will be displayed verbatim in the administration
+        # console. This suffix is used in setting up Custom Access Levels in Context-
+        # Aware Access. Your organization's customer ID can be obtained from the URL: `
+        # GET https://www.googleapis.com/admin/directory/v1/customers/my_customer` The `
+        # id` field in the response contains the customer ID starting with the letter 'C'
+        # . The customer ID to be used in this API is the string after the letter 'C' (
+        # not including 'C')
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
@@ -1430,13 +1466,13 @@ module Google
       
         # Required. One or more label entries that apply to the Group. Currently
         # supported labels contain a key with an empty value. Google Groups are the
-        # default type of group and have a label with a key of 'cloudidentity.googleapis.
-        # com/groups.discussion_forum' and an empty value. Existing Google Groups can
-        # have an additional label with a key of 'cloudidentity.googleapis.com/groups.
-        # security' and an empty value added to them. **This is an immutable change and
+        # default type of group and have a label with a key of `cloudidentity.googleapis.
+        # com/groups.discussion_forum` and an empty value. Existing Google Groups can
+        # have an additional label with a key of `cloudidentity.googleapis.com/groups.
+        # security` and an empty value added to them. **This is an immutable change and
         # the security label cannot be removed once added.** Dynamic groups have a label
         # with a key of `cloudidentity.googleapis.com/groups.dynamic`. Identity-mapped
-        # groups for Cloud Search have a label with a key of 'system/groups/external'
+        # groups for Cloud Search have a label with a key of `system/groups/external`
         # and an empty value. Examples: `"cloudidentity.googleapis.com/groups.
         # discussion_forum": ""` or `"system/groups/external": ""`.
         # Corresponds to the JSON property `labels`
@@ -1481,6 +1517,58 @@ module Google
         end
       end
       
+      # Message representing a transitive group of a user or a group.
+      class GroupRelation
+        include Google::Apis::Core::Hashable
+      
+        # Display name for this group.
+        # Corresponds to the JSON property `displayName`
+        # @return [String]
+        attr_accessor :display_name
+      
+        # Resource name for this group.
+        # Corresponds to the JSON property `group`
+        # @return [String]
+        attr_accessor :group
+      
+        # A unique identifier for an entity in the Cloud Identity Groups API. An entity
+        # can represent either a group with an optional `namespace` or a user without a `
+        # namespace`. The combination of `id` and `namespace` must be unique; however,
+        # the same `id` can be used with different `namespace`s.
+        # Corresponds to the JSON property `groupKey`
+        # @return [Google::Apis::CloudidentityV1beta1::EntityKey]
+        attr_accessor :group_key
+      
+        # Labels for Group resource.
+        # Corresponds to the JSON property `labels`
+        # @return [Hash<String,String>]
+        attr_accessor :labels
+      
+        # The relation between the member and the transitive group.
+        # Corresponds to the JSON property `relationType`
+        # @return [String]
+        attr_accessor :relation_type
+      
+        # Membership roles of the member for the group.
+        # Corresponds to the JSON property `roles`
+        # @return [Array<Google::Apis::CloudidentityV1beta1::TransitiveMembershipRole>]
+        attr_accessor :roles
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @display_name = args[:display_name] if args.key?(:display_name)
+          @group = args[:group] if args.key?(:group)
+          @group_key = args[:group_key] if args.key?(:group_key)
+          @labels = args[:labels] if args.key?(:labels)
+          @relation_type = args[:relation_type] if args.key?(:relation_type)
+          @roles = args[:roles] if args.key?(:roles)
+        end
+      end
+      
       # Response message that is returned in LRO result of ListClientStates Operation.
       class ListClientStatesResponse
         include Google::Apis::Core::Hashable
@@ -1685,6 +1773,44 @@ module Google
         end
       end
       
+      # Message representing a transitive membership of a group.
+      class MemberRelation
+        include Google::Apis::Core::Hashable
+      
+        # Resource name for this member if member is a GROUP, otherwise it is empty.
+        # Corresponds to the JSON property `member`
+        # @return [String]
+        attr_accessor :member
+      
+        # Entity key has an id and a namespace. In case of discussion forums, the id
+        # will be an email address without a namespace.
+        # Corresponds to the JSON property `preferredMemberKey`
+        # @return [Array<Google::Apis::CloudidentityV1beta1::EntityKey>]
+        attr_accessor :preferred_member_key
+      
+        # The relation between the group and the transitive member.
+        # Corresponds to the JSON property `relationType`
+        # @return [String]
+        attr_accessor :relation_type
+      
+        # The membership role details (i.e name of role and expiry time).
+        # Corresponds to the JSON property `roles`
+        # @return [Array<Google::Apis::CloudidentityV1beta1::TransitiveMembershipRole>]
+        attr_accessor :roles
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @member = args[:member] if args.key?(:member)
+          @preferred_member_key = args[:preferred_member_key] if args.key?(:preferred_member_key)
+          @relation_type = args[:relation_type] if args.key?(:relation_type)
+          @roles = args[:roles] if args.key?(:roles)
+        end
+      end
+      
       # A membership within the Cloud Identity Groups API. A `Membership` defines a
       # relationship between a `Group` and an entity belonging to that `Group`,
       # referred to as a "member".
@@ -1757,6 +1883,9 @@ module Google
         include Google::Apis::Core::Hashable
       
         # Each edge contains information about the member that belongs to this group.
+        # Note: Fields returned here will help identify the specific Membership resource
+        # (e.g name, preferred_member_key and role), but may not be a comprehensive list
+        # of all fields.
         # Corresponds to the JSON property `edges`
         # @return [Array<Google::Apis::CloudidentityV1beta1::Membership>]
         attr_accessor :edges
@@ -1951,6 +2080,58 @@ module Google
         end
       end
       
+      # The response message for MembershipsService.SearchTransitiveGroups.
+      class SearchTransitiveGroupsResponse
+        include Google::Apis::Core::Hashable
+      
+        # List of transitive groups satisfying the query.
+        # Corresponds to the JSON property `memberships`
+        # @return [Array<Google::Apis::CloudidentityV1beta1::GroupRelation>]
+        attr_accessor :memberships
+      
+        # Token to retrieve the next page of results, or empty if there are no more
+        # results available for listing.
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @memberships = args[:memberships] if args.key?(:memberships)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+        end
+      end
+      
+      # The response message for MembershipsService.SearchTransitiveMemberships.
+      class SearchTransitiveMembershipsResponse
+        include Google::Apis::Core::Hashable
+      
+        # List of transitive members satisfying the query.
+        # Corresponds to the JSON property `memberships`
+        # @return [Array<Google::Apis::CloudidentityV1beta1::MemberRelation>]
+        attr_accessor :memberships
+      
+        # Token to retrieve the next page of results, or empty if there are no more
+        # results.
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @memberships = args[:memberships] if args.key?(:memberships)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+        end
+      end
+      
       # The `Status` type defines a logical error model that is suitable for different
       # programming environments, including REST APIs and RPC APIs. It is used by [
       # gRPC](https://github.com/grpc). Each `Status` message contains three pieces of
@@ -1990,6 +2171,26 @@ module Google
         end
       end
       
+      # Message representing the role of a TransitiveMembership.
+      class TransitiveMembershipRole
+        include Google::Apis::Core::Hashable
+      
+        # TransitiveMembershipRole in string format. Currently supported
+        # TransitiveMembershipRoles: `"MEMBER"`, `"OWNER"`, and `"MANAGER"`.
+        # Corresponds to the JSON property `role`
+        # @return [String]
+        attr_accessor :role
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @role = args[:role] if args.key?(:role)
+        end
+      end
+      
       # The details of an update to a `MembershipRole`.
       class UpdateMembershipRolesParams
         include Google::Apis::Core::Hashable

data/generated/google/apis/cloudidentity_v1beta1/representations.rb

@@ -76,6 +76,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class CheckTransitiveMembershipResponse
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class ClientState
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -214,6 +220,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class GroupRelation
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class ListClientStatesResponse
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -262,6 +274,12 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class MemberRelation
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class Membership
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -304,12 +322,30 @@ module Google
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class SearchTransitiveGroupsResponse
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
+      class SearchTransitiveMembershipsResponse
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class Status
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
         include Google::Apis::Core::JsonObjectSupport
       end
       
+      class TransitiveMembershipRole
+        class Representation < Google::Apis::Core::JsonRepresentation; end
+      
+        include Google::Apis::Core::JsonObjectSupport
+      end
+      
       class UpdateMembershipRolesParams
         class Representation < Google::Apis::Core::JsonRepresentation; end
       
@@ -410,6 +446,13 @@ module Google
         end
       end
       
+      class CheckTransitiveMembershipResponse
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :has_membership, as: 'hasMembership'
+        end
+      end
+      
       class ClientState
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -705,6 +748,20 @@ module Google
         end
       end
       
+      class GroupRelation
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :display_name, as: 'displayName'
+          property :group, as: 'group'
+          property :group_key, as: 'groupKey', class: Google::Apis::CloudidentityV1beta1::EntityKey, decorator: Google::Apis::CloudidentityV1beta1::EntityKey::Representation
+      
+          hash :labels, as: 'labels'
+          property :relation_type, as: 'relationType'
+          collection :roles, as: 'roles', class: Google::Apis::CloudidentityV1beta1::TransitiveMembershipRole, decorator: Google::Apis::CloudidentityV1beta1::TransitiveMembershipRole::Representation
+      
+        end
+      end
+      
       class ListClientStatesResponse
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -773,6 +830,18 @@ module Google
         end
       end
       
+      class MemberRelation
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :member, as: 'member'
+          collection :preferred_member_key, as: 'preferredMemberKey', class: Google::Apis::CloudidentityV1beta1::EntityKey, decorator: Google::Apis::CloudidentityV1beta1::EntityKey::Representation
+      
+          property :relation_type, as: 'relationType'
+          collection :roles, as: 'roles', class: Google::Apis::CloudidentityV1beta1::TransitiveMembershipRole, decorator: Google::Apis::CloudidentityV1beta1::TransitiveMembershipRole::Representation
+      
+        end
+      end
+      
       class Membership
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -847,6 +916,24 @@ module Google
         end
       end
       
+      class SearchTransitiveGroupsResponse
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :memberships, as: 'memberships', class: Google::Apis::CloudidentityV1beta1::GroupRelation, decorator: Google::Apis::CloudidentityV1beta1::GroupRelation::Representation
+      
+          property :next_page_token, as: 'nextPageToken'
+        end
+      end
+      
+      class SearchTransitiveMembershipsResponse
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          collection :memberships, as: 'memberships', class: Google::Apis::CloudidentityV1beta1::MemberRelation, decorator: Google::Apis::CloudidentityV1beta1::MemberRelation::Representation
+      
+          property :next_page_token, as: 'nextPageToken'
+        end
+      end
+      
       class Status
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation
@@ -856,6 +943,13 @@ module Google
         end
       end
       
+      class TransitiveMembershipRole
+        # @private
+        class Representation < Google::Apis::Core::JsonRepresentation
+          property :role, as: 'role'
+        end
+      end
+      
       class UpdateMembershipRolesParams
         # @private
         class Representation < Google::Apis::Core::JsonRepresentation

data/generated/google/apis/cloudidentity_v1beta1/service.rb

@@ -992,6 +992,49 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
+        # Check a potential member for membership in a group. A member has membership to
+        # a group as long as there is a single viewable transitive membership between
+        # the group and the member. The actor must have view permissions to at least one
+        # transitive membership between the member and group.
+        # @param [String] parent
+        #   [Resource name](https://cloud.google.com/apis/design/resource_names) of the
+        #   group to check the transitive membership in. Format: `groups/`group_id``,
+        #   where `group_id` is the unique id assigned to the Group to which the
+        #   Membership belongs to.
+        # @param [String] query
+        #   Required. A CEL expression that MUST include member specification. This is a `
+        #   required` field. Certain groups are uniquely identified by both a '
+        #   member_key_id' and a 'member_key_namespace', which requires an additional
+        #   query input: 'member_key_namespace'. Example query: `member_key_id == '
+        #   member_key_id_value'`
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudidentityV1beta1::CheckTransitiveMembershipResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudidentityV1beta1::CheckTransitiveMembershipResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def check_group_membership_transitive_membership(parent, query: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1beta1/{+parent}/memberships:checkTransitiveMembership', options)
+          command.response_representation = Google::Apis::CloudidentityV1beta1::CheckTransitiveMembershipResponse::Representation
+          command.response_class = Google::Apis::CloudidentityV1beta1::CheckTransitiveMembershipResponse
+          command.params['parent'] = parent unless parent.nil?
+          command.query['query'] = query unless query.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Creates a `Membership`.
         # @param [String] parent
         #   Required. The parent `Group` resource under which to create the `Membership`.
@@ -1090,6 +1133,53 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
+        # Get a membership graph of just a member or both a member and a group. Given a
+        # member, the response will contain all membership paths from the member. Given
+        # both a group and a member, the response will contain all membership paths
+        # between the group and the member.
+        # @param [String] parent
+        #   Required. [Resource name](https://cloud.google.com/apis/design/resource_names)
+        #   of the group to search transitive memberships in. Format: `groups/`group_id``,
+        #   where `group_id` is the unique ID assigned to the Group to which the
+        #   Membership belongs to. group_id can be a wildcard collection id "-". When a
+        #   group_id is specified, the membership graph will be constrained to paths
+        #   between the member (defined in the query) and the parent. If a wildcard
+        #   collection is provided, all membership paths connected to the member will be
+        #   returned.
+        # @param [String] query
+        #   Required. A CEL expression that MUST include member specification AND label(s).
+        #   Certain groups are uniquely identified by both a 'member_key_id' and a '
+        #   member_key_namespace', which requires an additional query input: '
+        #   member_key_namespace'. Example query: `member_key_id == 'member_key_id_value' &
+        #   & in labels`
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudidentityV1beta1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudidentityV1beta1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def get_group_membership_membership_graph(parent, query: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1beta1/{+parent}/memberships:getMembershipGraph', options)
+          command.response_representation = Google::Apis::CloudidentityV1beta1::Operation::Representation
+          command.response_class = Google::Apis::CloudidentityV1beta1::Operation
+          command.params['parent'] = parent unless parent.nil?
+          command.query['query'] = query unless query.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Lists the `Membership`s within a `Group`.
         # @param [String] parent
         #   Required. The parent `Group` resource under which to lookup the `Membership`
@@ -1215,6 +1305,95 @@ module Google
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
+        
+        # Search transitive groups of a member. A transitive group is any group that has
+        # a direct or indirect membership to the member. Actor must have view
+        # permissions all transitive groups.
+        # @param [String] parent
+        #   [Resource name](https://cloud.google.com/apis/design/resource_names) of the
+        #   group to search transitive memberships in. Format: `groups/`group_id``, where `
+        #   group_id` is always '-' as this API will search across all groups for a given
+        #   member.
+        # @param [Fixnum] page_size
+        #   The default page size is 200 (max 1000).
+        # @param [String] page_token
+        #   The next_page_token value returned from a previous list request, if any.
+        # @param [String] query
+        #   Required. A CEL expression that MUST include member specification AND label(s).
+        #   This is a `required` field. Users can search on label attributes of groups.
+        #   CONTAINS match ('in') is supported on labels. Certain groups are uniquely
+        #   identified by both a 'member_key_id' and a 'member_key_namespace', which
+        #   requires an additional query input: 'member_key_namespace'. Example query: `
+        #   member_key_id == 'member_key_id_value' && in labels`
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudidentityV1beta1::SearchTransitiveGroupsResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudidentityV1beta1::SearchTransitiveGroupsResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def search_group_membership_transitive_groups(parent, page_size: nil, page_token: nil, query: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1beta1/{+parent}/memberships:searchTransitiveGroups', options)
+          command.response_representation = Google::Apis::CloudidentityV1beta1::SearchTransitiveGroupsResponse::Representation
+          command.response_class = Google::Apis::CloudidentityV1beta1::SearchTransitiveGroupsResponse
+          command.params['parent'] = parent unless parent.nil?
+          command.query['pageSize'] = page_size unless page_size.nil?
+          command.query['pageToken'] = page_token unless page_token.nil?
+          command.query['query'] = query unless query.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Search transitive memberships of a group. A transitive membership is any
+        # direct or indirect membership of a group. Actor must have view permissions to
+        # all transitive memberships.
+        # @param [String] parent
+        #   [Resource name](https://cloud.google.com/apis/design/resource_names) of the
+        #   group to search transitive memberships in. Format: `groups/`group_id``, where `
+        #   group_id` is the unique ID assigned to the Group.
+        # @param [Fixnum] page_size
+        #   The default page size is 200 (max 1000).
+        # @param [String] page_token
+        #   The next_page_token value returned from a previous list request, if any.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudidentityV1beta1::SearchTransitiveMembershipsResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudidentityV1beta1::SearchTransitiveMembershipsResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def search_group_membership_transitive_memberships(parent, page_size: nil, page_token: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1beta1/{+parent}/memberships:searchTransitiveMemberships', options)
+          command.response_representation = Google::Apis::CloudidentityV1beta1::SearchTransitiveMembershipsResponse::Representation
+          command.response_class = Google::Apis::CloudidentityV1beta1::SearchTransitiveMembershipsResponse
+          command.params['parent'] = parent unless parent.nil?
+          command.query['pageSize'] = page_size unless page_size.nil?
+          command.query['pageToken'] = page_token unless page_token.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
 
         protected