google-api-client 0.47.0 → 0.52.0

data/generated/google/apis/cloudasset_v1/service.rb

@@ -248,6 +248,177 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
+        # Analyzes IAM policies to answer which identities have what accesses on which
+        # resources.
+        # @param [String] scope
+        #   Required. The relative name of the root asset. Only resources and IAM policies
+        #   within the scope will be analyzed. This can only be an organization number (
+        #   such as "organizations/123"), a folder number (such as "folders/123"), a
+        #   project ID (such as "projects/my-project-id"), or a project number (such as "
+        #   projects/12345"). To know how to get organization id, visit [here ](https://
+        #   cloud.google.com/resource-manager/docs/creating-managing-organization#
+        #   retrieving_your_organization_id). To know how to get folder or project id,
+        #   visit [here ](https://cloud.google.com/resource-manager/docs/creating-managing-
+        #   folders#viewing_or_listing_folders_and_projects).
+        # @param [Array<String>, String] analysis_query_access_selector_permissions
+        #   Optional. The permissions to appear in result.
+        # @param [Array<String>, String] analysis_query_access_selector_roles
+        #   Optional. The roles to appear in result.
+        # @param [String] analysis_query_identity_selector_identity
+        #   Required. The identity appear in the form of members in [IAM policy binding](
+        #   https://cloud.google.com/iam/reference/rest/v1/Binding). The examples of
+        #   supported forms are: "user:mike@example.com", "group:admins@example.com", "
+        #   domain:google.com", "serviceAccount:my-project-id@appspot.gserviceaccount.com".
+        #   Notice that wildcard characters (such as * and ?) are not supported. You must
+        #   give a specific identity.
+        # @param [Boolean] analysis_query_options_analyze_service_account_impersonation
+        #   Optional. If true, the response will include access analysis from identities
+        #   to resources via service account impersonation. This is a very expensive
+        #   operation, because many derived queries will be executed. We highly recommend
+        #   you use AssetService.AnalyzeIamPolicyLongrunning rpc instead. For example, if
+        #   the request analyzes for which resources user A has permission P, and there's
+        #   an IAM policy states user A has iam.serviceAccounts.getAccessToken permission
+        #   to a service account SA, and there's another IAM policy states service account
+        #   SA has permission P to a GCP folder F, then user A potentially has access to
+        #   the GCP folder F. And those advanced analysis results will be included in
+        #   AnalyzeIamPolicyResponse.service_account_impersonation_analysis. Another
+        #   example, if the request analyzes for who has permission P to a GCP folder F,
+        #   and there's an IAM policy states user A has iam.serviceAccounts.actAs
+        #   permission to a service account SA, and there's another IAM policy states
+        #   service account SA has permission P to the GCP folder F, then user A
+        #   potentially has access to the GCP folder F. And those advanced analysis
+        #   results will be included in AnalyzeIamPolicyResponse.
+        #   service_account_impersonation_analysis. Default is false.
+        # @param [Boolean] analysis_query_options_expand_groups
+        #   Optional. If true, the identities section of the result will expand any Google
+        #   groups appearing in an IAM policy binding. If IamPolicyAnalysisQuery.
+        #   identity_selector is specified, the identity in the result will be determined
+        #   by the selector, and this flag is not allowed to set. Default is false.
+        # @param [Boolean] analysis_query_options_expand_resources
+        #   Optional. If true and IamPolicyAnalysisQuery.resource_selector is not
+        #   specified, the resource section of the result will expand any resource
+        #   attached to an IAM policy to include resources lower in the resource hierarchy.
+        #   For example, if the request analyzes for which resources user A has
+        #   permission P, and the results include an IAM policy with P on a GCP folder,
+        #   the results will also include resources in that folder with permission P. If
+        #   true and IamPolicyAnalysisQuery.resource_selector is specified, the resource
+        #   section of the result will expand the specified resource to include resources
+        #   lower in the resource hierarchy. Only project or lower resources are supported.
+        #   Folder and organization resource cannot be used together with this option.
+        #   For example, if the request analyzes for which users have permission P on a
+        #   GCP project with this option enabled, the results will include all users who
+        #   have permission P on that project or any lower resource. Default is false.
+        # @param [Boolean] analysis_query_options_expand_roles
+        #   Optional. If true, the access section of result will expand any roles
+        #   appearing in IAM policy bindings to include their permissions. If
+        #   IamPolicyAnalysisQuery.access_selector is specified, the access section of the
+        #   result will be determined by the selector, and this flag is not allowed to set.
+        #   Default is false.
+        # @param [Boolean] analysis_query_options_output_group_edges
+        #   Optional. If true, the result will output group identity edges, starting from
+        #   the binding's group members, to any expanded identities. Default is false.
+        # @param [Boolean] analysis_query_options_output_resource_edges
+        #   Optional. If true, the result will output resource edges, starting from the
+        #   policy attached resource, to any expanded resources. Default is false.
+        # @param [String] analysis_query_resource_selector_full_resource_name
+        #   Required. The [full resource name] (https://cloud.google.com/asset-inventory/
+        #   docs/resource-name-format) of a resource of [supported resource types](https://
+        #   cloud.google.com/asset-inventory/docs/supported-asset-types#
+        #   analyzable_asset_types).
+        # @param [String] execution_timeout
+        #   Optional. Amount of time executable has to complete. See JSON representation
+        #   of [Duration](https://developers.google.com/protocol-buffers/docs/proto3#json).
+        #   If this field is set with a value less than the RPC deadline, and the
+        #   execution of your query hasn't finished in the specified execution timeout,
+        #   you will get a response with partial result. Otherwise, your query's execution
+        #   will continue until the RPC deadline. If it's not finished until then, you
+        #   will get a DEADLINE_EXCEEDED error. Default is empty.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudassetV1::AnalyzeIamPolicyResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudassetV1::AnalyzeIamPolicyResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def analyze_iam_policy(scope, analysis_query_access_selector_permissions: nil, analysis_query_access_selector_roles: nil, analysis_query_identity_selector_identity: nil, analysis_query_options_analyze_service_account_impersonation: nil, analysis_query_options_expand_groups: nil, analysis_query_options_expand_resources: nil, analysis_query_options_expand_roles: nil, analysis_query_options_output_group_edges: nil, analysis_query_options_output_resource_edges: nil, analysis_query_resource_selector_full_resource_name: nil, execution_timeout: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+scope}:analyzeIamPolicy', options)
+          command.response_representation = Google::Apis::CloudassetV1::AnalyzeIamPolicyResponse::Representation
+          command.response_class = Google::Apis::CloudassetV1::AnalyzeIamPolicyResponse
+          command.params['scope'] = scope unless scope.nil?
+          command.query['analysisQuery.accessSelector.permissions'] = analysis_query_access_selector_permissions unless analysis_query_access_selector_permissions.nil?
+          command.query['analysisQuery.accessSelector.roles'] = analysis_query_access_selector_roles unless analysis_query_access_selector_roles.nil?
+          command.query['analysisQuery.identitySelector.identity'] = analysis_query_identity_selector_identity unless analysis_query_identity_selector_identity.nil?
+          command.query['analysisQuery.options.analyzeServiceAccountImpersonation'] = analysis_query_options_analyze_service_account_impersonation unless analysis_query_options_analyze_service_account_impersonation.nil?
+          command.query['analysisQuery.options.expandGroups'] = analysis_query_options_expand_groups unless analysis_query_options_expand_groups.nil?
+          command.query['analysisQuery.options.expandResources'] = analysis_query_options_expand_resources unless analysis_query_options_expand_resources.nil?
+          command.query['analysisQuery.options.expandRoles'] = analysis_query_options_expand_roles unless analysis_query_options_expand_roles.nil?
+          command.query['analysisQuery.options.outputGroupEdges'] = analysis_query_options_output_group_edges unless analysis_query_options_output_group_edges.nil?
+          command.query['analysisQuery.options.outputResourceEdges'] = analysis_query_options_output_resource_edges unless analysis_query_options_output_resource_edges.nil?
+          command.query['analysisQuery.resourceSelector.fullResourceName'] = analysis_query_resource_selector_full_resource_name unless analysis_query_resource_selector_full_resource_name.nil?
+          command.query['executionTimeout'] = execution_timeout unless execution_timeout.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Analyzes IAM policies asynchronously to answer which identities have what
+        # accesses on which resources, and writes the analysis results to a Google Cloud
+        # Storage or a BigQuery destination. For Cloud Storage destination, the output
+        # format is the JSON format that represents a AnalyzeIamPolicyResponse. This
+        # method implements the google.longrunning.Operation, which allows you to track
+        # the operation status. We recommend intervals of at least 2 seconds with
+        # exponential backoff retry to poll the operation result. The metadata contains
+        # the request to help callers to map responses to requests.
+        # @param [String] scope
+        #   Required. The relative name of the root asset. Only resources and IAM policies
+        #   within the scope will be analyzed. This can only be an organization number (
+        #   such as "organizations/123"), a folder number (such as "folders/123"), a
+        #   project ID (such as "projects/my-project-id"), or a project number (such as "
+        #   projects/12345"). To know how to get organization id, visit [here ](https://
+        #   cloud.google.com/resource-manager/docs/creating-managing-organization#
+        #   retrieving_your_organization_id). To know how to get folder or project id,
+        #   visit [here ](https://cloud.google.com/resource-manager/docs/creating-managing-
+        #   folders#viewing_or_listing_folders_and_projects).
+        # @param [Google::Apis::CloudassetV1::AnalyzeIamPolicyLongrunningRequest] analyze_iam_policy_longrunning_request_object
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::CloudassetV1::Operation] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::CloudassetV1::Operation]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def analyze_iam_policy_longrunning(scope, analyze_iam_policy_longrunning_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:post, 'v1/{+scope}:analyzeIamPolicyLongrunning', options)
+          command.request_representation = Google::Apis::CloudassetV1::AnalyzeIamPolicyLongrunningRequest::Representation
+          command.request_object = analyze_iam_policy_longrunning_request_object
+          command.response_representation = Google::Apis::CloudassetV1::Operation::Representation
+          command.response_class = Google::Apis::CloudassetV1::Operation
+          command.params['scope'] = scope unless scope.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Batch gets the update history of assets that overlap a time window. For
         # IAM_POLICY content, this API outputs history when the asset and its attached
         # IAM POLICY both exist. This can create gaps in the output history. Otherwise,

data/generated/google/apis/cloudasset_v1beta1.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://cloud.google.com/asset-inventory/docs/quickstart
     module CloudassetV1beta1
       VERSION = 'V1beta1'
-      REVISION = '20200828'
+      REVISION = '20201106'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/cloudasset_v1p1beta1.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://cloud.google.com/asset-inventory/docs/quickstart
     module CloudassetV1p1beta1
       VERSION = 'V1p1beta1'
-      REVISION = '20200810'
+      REVISION = '20201106'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/cloudasset_v1p4beta1.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://cloud.google.com/asset-inventory/docs/quickstart
     module CloudassetV1p4beta1
       VERSION = 'V1p4beta1'
-      REVISION = '20201003'
+      REVISION = '20201106'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/cloudasset_v1p5beta1.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://cloud.google.com/asset-inventory/docs/quickstart
     module CloudassetV1p5beta1
       VERSION = 'V1p5beta1'
-      REVISION = '20200828'
+      REVISION = '20201106'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/cloudbuild_v1.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://cloud.google.com/cloud-build/docs/
     module CloudbuildV1
       VERSION = 'V1'
-      REVISION = '20201015'
+      REVISION = '20201203'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/cloudbuild_v1/classes.rb

@@ -731,7 +731,7 @@ module Google
         # @return [String]
         attr_accessor :id
       
-        # The name of the `Build` to retrieve. Format: `projects/`project`/locations/`
+        # The name of the `Build` to cancel. Format: `projects/`project`/locations/`
         # location`/builds/`build``
         # Corresponds to the JSON property `name`
         # @return [String]

data/generated/google/apis/cloudbuild_v1/service.rb

@@ -333,7 +333,7 @@ module Google
         
         # Cancels a build in progress.
         # @param [String] name
-        #   The name of the `Build` to retrieve. Format: `projects/`project`/locations/`
+        #   The name of the `Build` to cancel. Format: `projects/`project`/locations/`
         #   location`/builds/`build``
         # @param [Google::Apis::CloudbuildV1::CancelBuildRequest] cancel_build_request_object
         # @param [String] fields

data/generated/google/apis/cloudbuild_v1alpha1.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://cloud.google.com/cloud-build/docs/
     module CloudbuildV1alpha1
       VERSION = 'V1alpha1'
-      REVISION = '20200831'
+      REVISION = '20201203'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/cloudbuild_v1alpha2.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://cloud.google.com/cloud-build/docs/
     module CloudbuildV1alpha2
       VERSION = 'V1alpha2'
-      REVISION = '20200831'
+      REVISION = '20201203'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/cloudfunctions_v1.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://cloud.google.com/functions
     module CloudfunctionsV1
       VERSION = 'V1'
-      REVISION = '20200917'
+      REVISION = '20201201'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'

data/generated/google/apis/cloudfunctions_v1/classes.rb

@@ -846,6 +846,11 @@ module Google
         # @return [Hash<String,Object>]
         attr_accessor :request
       
+        # A field for Firebase function deployments
+        # Corresponds to the JSON property `sourceToken`
+        # @return [String]
+        attr_accessor :source_token
+      
         # Target of the operation - for example projects/project-1/locations/region-1/
         # functions/function-1
         # Corresponds to the JSON property `target`
@@ -876,6 +881,7 @@ module Google
         def update!(**args)
           @build_id = args[:build_id] if args.key?(:build_id)
           @request = args[:request] if args.key?(:request)
+          @source_token = args[:source_token] if args.key?(:source_token)
           @target = args[:target] if args.key?(:target)
           @type = args[:type] if args.key?(:type)
           @update_time = args[:update_time] if args.key?(:update_time)

data/generated/google/apis/cloudfunctions_v1/representations.rb

@@ -379,6 +379,7 @@ module Google
         class Representation < Google::Apis::Core::JsonRepresentation
           property :build_id, as: 'buildId'
           hash :request, as: 'request'
+          property :source_token, as: 'sourceToken'
           property :target, as: 'target'
           property :type, as: 'type'
           property :update_time, as: 'updateTime'

data/generated/google/apis/cloudidentity_v1.rb

@@ -25,7 +25,7 @@ module Google
     # @see https://cloud.google.com/identity/
     module CloudidentityV1
       VERSION = 'V1'
-      REVISION = '20200927'
+      REVISION = '20201208'
 
       # See your device details
       AUTH_CLOUD_IDENTITY_DEVICES_LOOKUP = 'https://www.googleapis.com/auth/cloud-identity.devices.lookup'

data/generated/google/apis/cloudidentity_v1/classes.rb

@@ -22,6 +22,29 @@ module Google
   module Apis
     module CloudidentityV1
       
+      # The response message for MembershipsService.CheckTransitiveMembership.
+      class CheckTransitiveMembershipResponse
+        include Google::Apis::Core::Hashable
+      
+        # Response does not include the possible roles of a member since the behavior of
+        # this rpc is not all-or-nothing unlike the other rpcs. So, it may not be
+        # possible to list all the roles definitively, due to possible lack of
+        # authorization in some of the paths.
+        # Corresponds to the JSON property `hasMembership`
+        # @return [Boolean]
+        attr_accessor :has_membership
+        alias_method :has_membership?, :has_membership
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @has_membership = args[:has_membership] if args.key?(:has_membership)
+        end
+      end
+      
       # A unique identifier for an entity in the Cloud Identity Groups API. An entity
       # can represent either a group with an optional `namespace` or a user without a `
       # namespace`. The combination of `id` and `namespace` must be unique; however,
@@ -57,6 +80,33 @@ module Google
         end
       end
       
+      # The response message for MembershipsService.GetMembershipGraph.
+      class GetMembershipGraphResponse
+        include Google::Apis::Core::Hashable
+      
+        # The membership graph's path information represented as an adjacency list.
+        # Corresponds to the JSON property `adjacencyList`
+        # @return [Array<Google::Apis::CloudidentityV1::MembershipAdjacencyList>]
+        attr_accessor :adjacency_list
+      
+        # The resources representing each group in the adjacency list. Each group in
+        # this list can be correlated to a 'group' of the MembershipAdjacencyList using
+        # the 'name' of the Group resource.
+        # Corresponds to the JSON property `groups`
+        # @return [Array<Google::Apis::CloudidentityV1::Group>]
+        attr_accessor :groups
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @adjacency_list = args[:adjacency_list] if args.key?(:adjacency_list)
+          @groups = args[:groups] if args.key?(:groups)
+        end
+      end
+      
       # Resource representing the Android specific attributes of a Device.
       class GoogleAppsCloudidentityDevicesV1AndroidAttributes
         include Google::Apis::Core::Hashable
@@ -960,6 +1010,58 @@ module Google
         end
       end
       
+      # Message representing a transitive group of a user or a group.
+      class GroupRelation
+        include Google::Apis::Core::Hashable
+      
+        # Display name for this group.
+        # Corresponds to the JSON property `displayName`
+        # @return [String]
+        attr_accessor :display_name
+      
+        # Resource name for this group.
+        # Corresponds to the JSON property `group`
+        # @return [String]
+        attr_accessor :group
+      
+        # A unique identifier for an entity in the Cloud Identity Groups API. An entity
+        # can represent either a group with an optional `namespace` or a user without a `
+        # namespace`. The combination of `id` and `namespace` must be unique; however,
+        # the same `id` can be used with different `namespace`s.
+        # Corresponds to the JSON property `groupKey`
+        # @return [Google::Apis::CloudidentityV1::EntityKey]
+        attr_accessor :group_key
+      
+        # Labels for Group resource.
+        # Corresponds to the JSON property `labels`
+        # @return [Hash<String,String>]
+        attr_accessor :labels
+      
+        # The relation between the member and the transitive group.
+        # Corresponds to the JSON property `relationType`
+        # @return [String]
+        attr_accessor :relation_type
+      
+        # Membership roles of the member for the group.
+        # Corresponds to the JSON property `roles`
+        # @return [Array<Google::Apis::CloudidentityV1::TransitiveMembershipRole>]
+        attr_accessor :roles
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @display_name = args[:display_name] if args.key?(:display_name)
+          @group = args[:group] if args.key?(:group)
+          @group_key = args[:group_key] if args.key?(:group_key)
+          @labels = args[:labels] if args.key?(:labels)
+          @relation_type = args[:relation_type] if args.key?(:relation_type)
+          @roles = args[:roles] if args.key?(:roles)
+        end
+      end
+      
       # Response message for ListGroups operation.
       class ListGroupsResponse
         include Google::Apis::Core::Hashable
@@ -1053,6 +1155,44 @@ module Google
         end
       end
       
+      # Message representing a transitive membership of a group.
+      class MemberRelation
+        include Google::Apis::Core::Hashable
+      
+        # Resource name for this member if member is a GROUP, otherwise it is empty.
+        # Corresponds to the JSON property `member`
+        # @return [String]
+        attr_accessor :member
+      
+        # Entity key has an id and a namespace. In case of discussion forums, the id
+        # will be an email address without a namespace.
+        # Corresponds to the JSON property `preferredMemberKey`
+        # @return [Array<Google::Apis::CloudidentityV1::EntityKey>]
+        attr_accessor :preferred_member_key
+      
+        # The relation between the group and the transitive member.
+        # Corresponds to the JSON property `relationType`
+        # @return [String]
+        attr_accessor :relation_type
+      
+        # The membership role details (i.e name of role and expiry time).
+        # Corresponds to the JSON property `roles`
+        # @return [Array<Google::Apis::CloudidentityV1::TransitiveMembershipRole>]
+        attr_accessor :roles
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @member = args[:member] if args.key?(:member)
+          @preferred_member_key = args[:preferred_member_key] if args.key?(:preferred_member_key)
+          @relation_type = args[:relation_type] if args.key?(:relation_type)
+          @roles = args[:roles] if args.key?(:roles)
+        end
+      end
+      
       # A membership within the Cloud Identity Groups API. A `Membership` defines a
       # relationship between a `Group` and an entity belonging to that `Group`,
       # referred to as a "member".
@@ -1111,6 +1251,34 @@ module Google
         end
       end
       
+      # Membership graph's path information as an adjacency list.
+      class MembershipAdjacencyList
+        include Google::Apis::Core::Hashable
+      
+        # Each edge contains information about the member that belongs to this group.
+        # Note: Fields returned here will help identify the specific Membership resource
+        # (e.g name, preferred_member_key and role), but may not be a comprehensive list
+        # of all fields.
+        # Corresponds to the JSON property `edges`
+        # @return [Array<Google::Apis::CloudidentityV1::Membership>]
+        attr_accessor :edges
+      
+        # Resource name of the group that the members belong to.
+        # Corresponds to the JSON property `group`
+        # @return [String]
+        attr_accessor :group
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @edges = args[:edges] if args.key?(:edges)
+          @group = args[:group] if args.key?(:group)
+        end
+      end
+      
       # A membership role within the Cloud Identity Groups API. A `MembershipRole`
       # defines the privileges granted to a `Membership`.
       class MembershipRole
@@ -1271,6 +1439,58 @@ module Google
         end
       end
       
+      # The response message for MembershipsService.SearchTransitiveGroups.
+      class SearchTransitiveGroupsResponse
+        include Google::Apis::Core::Hashable
+      
+        # List of transitive groups satisfying the query.
+        # Corresponds to the JSON property `memberships`
+        # @return [Array<Google::Apis::CloudidentityV1::GroupRelation>]
+        attr_accessor :memberships
+      
+        # Token to retrieve the next page of results, or empty if there are no more
+        # results available for listing.
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @memberships = args[:memberships] if args.key?(:memberships)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+        end
+      end
+      
+      # The response message for MembershipsService.SearchTransitiveMemberships.
+      class SearchTransitiveMembershipsResponse
+        include Google::Apis::Core::Hashable
+      
+        # List of transitive members satisfying the query.
+        # Corresponds to the JSON property `memberships`
+        # @return [Array<Google::Apis::CloudidentityV1::MemberRelation>]
+        attr_accessor :memberships
+      
+        # Token to retrieve the next page of results, or empty if there are no more
+        # results.
+        # Corresponds to the JSON property `nextPageToken`
+        # @return [String]
+        attr_accessor :next_page_token
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @memberships = args[:memberships] if args.key?(:memberships)
+          @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
+        end
+      end
+      
       # The `Status` type defines a logical error model that is suitable for different
       # programming environments, including REST APIs and RPC APIs. It is used by [
       # gRPC](https://github.com/grpc). Each `Status` message contains three pieces of
@@ -1309,6 +1529,26 @@ module Google
           @message = args[:message] if args.key?(:message)
         end
       end
+      
+      # Message representing the role of a TransitiveMembership.
+      class TransitiveMembershipRole
+        include Google::Apis::Core::Hashable
+      
+        # TransitiveMembershipRole in string format. Currently supported
+        # TransitiveMembershipRoles: `"MEMBER"`, `"OWNER"`, and `"MANAGER"`.
+        # Corresponds to the JSON property `role`
+        # @return [String]
+        attr_accessor :role
+      
+        def initialize(**args)
+           update!(**args)
+        end
+      
+        # Update properties of this object
+        def update!(**args)
+          @role = args[:role] if args.key?(:role)
+        end
+      end
     end
   end
 end