google-cloud-resource_manager-v3 0.1.0

data/lib/google/cloud/resource_manager/v3/tag_values/paths.rb

@@ -0,0 +1,47 @@
+# frozen_string_literal: true
+
+# Copyright 2021 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Google
+  module Cloud
+    module ResourceManager
+      module V3
+        module TagValues
+          # Path helper methods for the TagValues API.
+          module Paths
+            ##
+            # Create a fully-qualified TagValue resource string.
+            #
+            # The resource will be in the following format:
+            #
+            # `tagValues/{tag_value}`
+            #
+            # @param tag_value [String]
+            #
+            # @return [::String]
+            def tag_value_path tag_value:
+              "tagValues/#{tag_value}"
+            end
+
+            extend self
+          end
+        end
+      end
+    end
+  end
+end

data/lib/google/cloud/resource_manager/v3/version.rb

@@ -0,0 +1,28 @@
+# frozen_string_literal: true
+
+# Copyright 2021 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Google
+  module Cloud
+    module ResourceManager
+      module V3
+        VERSION = "0.1.0"
+      end
+    end
+  end
+end

data/lib/google/cloud/resourcemanager/v3/folders_pb.rb

@@ -0,0 +1,113 @@
+# Generated by the protocol buffer compiler.  DO NOT EDIT!
+# source: google/cloud/resourcemanager/v3/folders.proto
+
+require 'google/protobuf'
+
+require 'google/api/annotations_pb'
+require 'google/api/client_pb'
+require 'google/api/field_behavior_pb'
+require 'google/api/resource_pb'
+require 'google/iam/v1/iam_policy_pb'
+require 'google/iam/v1/policy_pb'
+require 'google/longrunning/operations_pb'
+require 'google/protobuf/field_mask_pb'
+require 'google/protobuf/timestamp_pb'
+Google::Protobuf::DescriptorPool.generated_pool.build do
+  add_file("google/cloud/resourcemanager/v3/folders.proto", :syntax => :proto3) do
+    add_message "google.cloud.resourcemanager.v3.Folder" do
+      optional :name, :string, 1
+      optional :parent, :string, 2
+      optional :display_name, :string, 3
+      optional :state, :enum, 4, "google.cloud.resourcemanager.v3.Folder.State"
+      optional :create_time, :message, 5, "google.protobuf.Timestamp"
+      optional :update_time, :message, 6, "google.protobuf.Timestamp"
+      optional :delete_time, :message, 7, "google.protobuf.Timestamp"
+      optional :etag, :string, 8
+    end
+    add_enum "google.cloud.resourcemanager.v3.Folder.State" do
+      value :STATE_UNSPECIFIED, 0
+      value :ACTIVE, 1
+      value :DELETE_REQUESTED, 2
+    end
+    add_message "google.cloud.resourcemanager.v3.GetFolderRequest" do
+      optional :name, :string, 1
+    end
+    add_message "google.cloud.resourcemanager.v3.ListFoldersRequest" do
+      optional :parent, :string, 1
+      optional :page_size, :int32, 2
+      optional :page_token, :string, 3
+      optional :show_deleted, :bool, 4
+    end
+    add_message "google.cloud.resourcemanager.v3.ListFoldersResponse" do
+      repeated :folders, :message, 1, "google.cloud.resourcemanager.v3.Folder"
+      optional :next_page_token, :string, 2
+    end
+    add_message "google.cloud.resourcemanager.v3.SearchFoldersRequest" do
+      optional :page_size, :int32, 1
+      optional :page_token, :string, 2
+      optional :query, :string, 3
+    end
+    add_message "google.cloud.resourcemanager.v3.SearchFoldersResponse" do
+      repeated :folders, :message, 1, "google.cloud.resourcemanager.v3.Folder"
+      optional :next_page_token, :string, 2
+    end
+    add_message "google.cloud.resourcemanager.v3.CreateFolderRequest" do
+      optional :folder, :message, 2, "google.cloud.resourcemanager.v3.Folder"
+    end
+    add_message "google.cloud.resourcemanager.v3.CreateFolderMetadata" do
+      optional :display_name, :string, 1
+      optional :parent, :string, 2
+    end
+    add_message "google.cloud.resourcemanager.v3.UpdateFolderRequest" do
+      optional :folder, :message, 1, "google.cloud.resourcemanager.v3.Folder"
+      optional :update_mask, :message, 2, "google.protobuf.FieldMask"
+    end
+    add_message "google.cloud.resourcemanager.v3.UpdateFolderMetadata" do
+    end
+    add_message "google.cloud.resourcemanager.v3.MoveFolderRequest" do
+      optional :name, :string, 1
+      optional :destination_parent, :string, 2
+    end
+    add_message "google.cloud.resourcemanager.v3.MoveFolderMetadata" do
+      optional :display_name, :string, 1
+      optional :source_parent, :string, 2
+      optional :destination_parent, :string, 3
+    end
+    add_message "google.cloud.resourcemanager.v3.DeleteFolderRequest" do
+      optional :name, :string, 1
+    end
+    add_message "google.cloud.resourcemanager.v3.DeleteFolderMetadata" do
+    end
+    add_message "google.cloud.resourcemanager.v3.UndeleteFolderRequest" do
+      optional :name, :string, 1
+    end
+    add_message "google.cloud.resourcemanager.v3.UndeleteFolderMetadata" do
+    end
+  end
+end
+
+module Google
+  module Cloud
+    module ResourceManager
+      module V3
+        Folder = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.Folder").msgclass
+        Folder::State = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.Folder.State").enummodule
+        GetFolderRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.GetFolderRequest").msgclass
+        ListFoldersRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.ListFoldersRequest").msgclass
+        ListFoldersResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.ListFoldersResponse").msgclass
+        SearchFoldersRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.SearchFoldersRequest").msgclass
+        SearchFoldersResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.SearchFoldersResponse").msgclass
+        CreateFolderRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.CreateFolderRequest").msgclass
+        CreateFolderMetadata = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.CreateFolderMetadata").msgclass
+        UpdateFolderRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.UpdateFolderRequest").msgclass
+        UpdateFolderMetadata = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.UpdateFolderMetadata").msgclass
+        MoveFolderRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.MoveFolderRequest").msgclass
+        MoveFolderMetadata = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.MoveFolderMetadata").msgclass
+        DeleteFolderRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.DeleteFolderRequest").msgclass
+        DeleteFolderMetadata = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.DeleteFolderMetadata").msgclass
+        UndeleteFolderRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.UndeleteFolderRequest").msgclass
+        UndeleteFolderMetadata = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.UndeleteFolderMetadata").msgclass
+      end
+    end
+  end
+end

data/lib/google/cloud/resourcemanager/v3/folders_services_pb.rb

@@ -0,0 +1,166 @@
+# Generated by the protocol buffer compiler.  DO NOT EDIT!
+# Source: google/cloud/resourcemanager/v3/folders.proto for package 'Google.Cloud.ResourceManager.V3'
+# Original file comments:
+# Copyright 2021 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+require 'grpc'
+require 'google/cloud/resourcemanager/v3/folders_pb'
+
+module Google
+  module Cloud
+    module ResourceManager
+      module V3
+        module Folders
+          # Manages Cloud Platform folder resources.
+          # Folders can be used to organize the resources under an
+          # organization and to control the policies applied to groups of resources.
+          class Service
+
+            include GRPC::GenericService
+
+            self.marshal_class_method = :encode
+            self.unmarshal_class_method = :decode
+            self.service_name = 'google.cloud.resourcemanager.v3.Folders'
+
+            # Retrieves a folder identified by the supplied resource name.
+            # Valid folder resource names have the format `folders/{folder_id}`
+            # (for example, `folders/1234`).
+            # The caller must have `resourcemanager.folders.get` permission on the
+            # identified folder.
+            rpc :GetFolder, ::Google::Cloud::ResourceManager::V3::GetFolderRequest, ::Google::Cloud::ResourceManager::V3::Folder
+            # Lists the folders that are direct descendants of supplied parent resource.
+            # `list()` provides a strongly consistent view of the folders underneath
+            # the specified parent resource.
+            # `list()` returns folders sorted based upon the (ascending) lexical ordering
+            # of their display_name.
+            # The caller must have `resourcemanager.folders.list` permission on the
+            # identified parent.
+            rpc :ListFolders, ::Google::Cloud::ResourceManager::V3::ListFoldersRequest, ::Google::Cloud::ResourceManager::V3::ListFoldersResponse
+            # Search for folders that match specific filter criteria.
+            # `search()` provides an eventually consistent view of the folders a user has
+            # access to which meet the specified filter criteria.
+            #
+            # This will only return folders on which the caller has the
+            # permission `resourcemanager.folders.get`.
+            rpc :SearchFolders, ::Google::Cloud::ResourceManager::V3::SearchFoldersRequest, ::Google::Cloud::ResourceManager::V3::SearchFoldersResponse
+            # Creates a folder in the resource hierarchy.
+            # Returns an `Operation` which can be used to track the progress of the
+            # folder creation workflow.
+            # Upon success, the `Operation.response` field will be populated with the
+            # created Folder.
+            #
+            # In order to succeed, the addition of this new folder must not violate
+            # the folder naming, height, or fanout constraints.
+            #
+            # + The folder's `display_name` must be distinct from all other folders that
+            # share its parent.
+            # + The addition of the folder must not cause the active folder hierarchy
+            # to exceed a height of 10. Note, the full active + deleted folder hierarchy
+            # is allowed to reach a height of 20; this provides additional headroom when
+            # moving folders that contain deleted folders.
+            # + The addition of the folder must not cause the total number of folders
+            # under its parent to exceed 300.
+            #
+            # If the operation fails due to a folder constraint violation, some errors
+            # may be returned by the `CreateFolder` request, with status code
+            # `FAILED_PRECONDITION` and an error description. Other folder constraint
+            # violations will be communicated in the `Operation`, with the specific
+            # `PreconditionFailure` returned in the details list in the `Operation.error`
+            # field.
+            #
+            # The caller must have `resourcemanager.folders.create` permission on the
+            # identified parent.
+            rpc :CreateFolder, ::Google::Cloud::ResourceManager::V3::CreateFolderRequest, ::Google::Longrunning::Operation
+            # Updates a folder, changing its `display_name`.
+            # Changes to the folder `display_name` will be rejected if they violate
+            # either the `display_name` formatting rules or the naming constraints
+            # described in the [CreateFolder][google.cloud.resourcemanager.v3.Folders.CreateFolder] documentation.
+            #
+            # The folder's `display_name` must start and end with a letter or digit,
+            # may contain letters, digits, spaces, hyphens and underscores and can be
+            # between 3 and 30 characters. This is captured by the regular expression:
+            # `[\p{L}\p{N}][\p{L}\p{N}_- ]{1,28}[\p{L}\p{N}]`.
+            # The caller must have `resourcemanager.folders.update` permission on the
+            # identified folder.
+            #
+            # If the update fails due to the unique name constraint then a
+            # `PreconditionFailure` explaining this violation will be returned
+            # in the Status.details field.
+            rpc :UpdateFolder, ::Google::Cloud::ResourceManager::V3::UpdateFolderRequest, ::Google::Longrunning::Operation
+            # Moves a folder under a new resource parent.
+            # Returns an `Operation` which can be used to track the progress of the
+            # folder move workflow.
+            # Upon success, the `Operation.response` field will be populated with the
+            # moved folder.
+            # Upon failure, a `FolderOperationError` categorizing the failure cause will
+            # be returned - if the failure occurs synchronously then the
+            # `FolderOperationError` will be returned in the `Status.details` field.
+            # If it occurs asynchronously, then the FolderOperation will be returned
+            # in the `Operation.error` field.
+            # In addition, the `Operation.metadata` field will be populated with a
+            # `FolderOperation` message as an aid to stateless clients.
+            # Folder moves will be rejected if they violate either the naming, height,
+            # or fanout constraints described in the
+            # [CreateFolder][google.cloud.resourcemanager.v3.Folders.CreateFolder] documentation.
+            # The caller must have `resourcemanager.folders.move` permission on the
+            # folder's current and proposed new parent.
+            rpc :MoveFolder, ::Google::Cloud::ResourceManager::V3::MoveFolderRequest, ::Google::Longrunning::Operation
+            # Requests deletion of a folder. The folder is moved into the
+            # [DELETE_REQUESTED][google.cloud.resourcemanager.v3.Folder.State.DELETE_REQUESTED] state
+            # immediately, and is deleted approximately 30 days later. This method may
+            # only be called on an empty folder, where a folder is empty if it doesn't
+            # contain any folders or projects in the [ACTIVE][google.cloud.resourcemanager.v3.Folder.State.ACTIVE] state.
+            # If called on a folder in [DELETE_REQUESTED][google.cloud.resourcemanager.v3.Folder.State.DELETE_REQUESTED]
+            # state the operation will result in a no-op success.
+            # The caller must have `resourcemanager.folders.delete` permission on the
+            # identified folder.
+            rpc :DeleteFolder, ::Google::Cloud::ResourceManager::V3::DeleteFolderRequest, ::Google::Longrunning::Operation
+            # Cancels the deletion request for a folder. This method may be called on a
+            # folder in any state. If the folder is in the [ACTIVE][google.cloud.resourcemanager.v3.Folder.State.ACTIVE]
+            # state the result will be a no-op success. In order to succeed, the folder's
+            # parent must be in the [ACTIVE][google.cloud.resourcemanager.v3.Folder.State.ACTIVE] state. In addition,
+            # reintroducing the folder into the tree must not violate folder naming,
+            # height, and fanout constraints described in the
+            # [CreateFolder][google.cloud.resourcemanager.v3.Folders.CreateFolder] documentation.
+            # The caller must have `resourcemanager.folders.undelete` permission on the
+            # identified folder.
+            rpc :UndeleteFolder, ::Google::Cloud::ResourceManager::V3::UndeleteFolderRequest, ::Google::Longrunning::Operation
+            # Gets the access control policy for a folder. The returned policy may be
+            # empty if no such policy or resource exists. The `resource` field should
+            # be the folder's resource name, for example: "folders/1234".
+            # The caller must have `resourcemanager.folders.getIamPolicy` permission
+            # on the identified folder.
+            rpc :GetIamPolicy, ::Google::Iam::V1::GetIamPolicyRequest, ::Google::Iam::V1::Policy
+            # Sets the access control policy on a folder, replacing any existing policy.
+            # The `resource` field should be the folder's resource name, for example:
+            # "folders/1234".
+            # The caller must have `resourcemanager.folders.setIamPolicy` permission
+            # on the identified folder.
+            rpc :SetIamPolicy, ::Google::Iam::V1::SetIamPolicyRequest, ::Google::Iam::V1::Policy
+            # Returns permissions that a caller has on the specified folder.
+            # The `resource` field should be the folder's resource name,
+            # for example: "folders/1234".
+            #
+            # There are no permissions required for making this API call.
+            rpc :TestIamPermissions, ::Google::Iam::V1::TestIamPermissionsRequest, ::Google::Iam::V1::TestIamPermissionsResponse
+          end
+
+          Stub = Service.rpc_stub_class
+        end
+      end
+    end
+  end
+end

data/lib/google/cloud/resourcemanager/v3/organizations_pb.rb

@@ -0,0 +1,66 @@
+# Generated by the protocol buffer compiler.  DO NOT EDIT!
+# source: google/cloud/resourcemanager/v3/organizations.proto
+
+require 'google/protobuf'
+
+require 'google/api/annotations_pb'
+require 'google/api/client_pb'
+require 'google/api/field_behavior_pb'
+require 'google/api/resource_pb'
+require 'google/iam/v1/iam_policy_pb'
+require 'google/iam/v1/policy_pb'
+require 'google/longrunning/operations_pb'
+require 'google/protobuf/timestamp_pb'
+Google::Protobuf::DescriptorPool.generated_pool.build do
+  add_file("google/cloud/resourcemanager/v3/organizations.proto", :syntax => :proto3) do
+    add_message "google.cloud.resourcemanager.v3.Organization" do
+      optional :name, :string, 1
+      optional :display_name, :string, 2
+      optional :state, :enum, 4, "google.cloud.resourcemanager.v3.Organization.State"
+      optional :create_time, :message, 5, "google.protobuf.Timestamp"
+      optional :update_time, :message, 6, "google.protobuf.Timestamp"
+      optional :delete_time, :message, 7, "google.protobuf.Timestamp"
+      optional :etag, :string, 8
+      oneof :owner do
+        optional :directory_customer_id, :string, 3
+      end
+    end
+    add_enum "google.cloud.resourcemanager.v3.Organization.State" do
+      value :STATE_UNSPECIFIED, 0
+      value :ACTIVE, 1
+      value :DELETE_REQUESTED, 2
+    end
+    add_message "google.cloud.resourcemanager.v3.GetOrganizationRequest" do
+      optional :name, :string, 1
+    end
+    add_message "google.cloud.resourcemanager.v3.SearchOrganizationsRequest" do
+      optional :page_size, :int32, 1
+      optional :page_token, :string, 2
+      optional :query, :string, 3
+    end
+    add_message "google.cloud.resourcemanager.v3.SearchOrganizationsResponse" do
+      repeated :organizations, :message, 1, "google.cloud.resourcemanager.v3.Organization"
+      optional :next_page_token, :string, 2
+    end
+    add_message "google.cloud.resourcemanager.v3.DeleteOrganizationMetadata" do
+    end
+    add_message "google.cloud.resourcemanager.v3.UndeleteOrganizationMetadata" do
+    end
+  end
+end
+
+module Google
+  module Cloud
+    module ResourceManager
+      module V3
+        Organization = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.Organization").msgclass
+        Organization::State = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.Organization.State").enummodule
+        GetOrganizationRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.GetOrganizationRequest").msgclass
+        SearchOrganizationsRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.SearchOrganizationsRequest").msgclass
+        SearchOrganizationsResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.SearchOrganizationsResponse").msgclass
+        DeleteOrganizationMetadata = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.DeleteOrganizationMetadata").msgclass
+        UndeleteOrganizationMetadata = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.UndeleteOrganizationMetadata").msgclass
+      end
+    end
+  end
+end

data/lib/google/cloud/resourcemanager/v3/organizations_services_pb.rb

@@ -0,0 +1,73 @@
+# Generated by the protocol buffer compiler.  DO NOT EDIT!
+# Source: google/cloud/resourcemanager/v3/organizations.proto for package 'Google.Cloud.ResourceManager.V3'
+# Original file comments:
+# Copyright 2021 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+require 'grpc'
+require 'google/cloud/resourcemanager/v3/organizations_pb'
+
+module Google
+  module Cloud
+    module ResourceManager
+      module V3
+        module Organizations
+          # Allows users to manage their organization resources.
+          class Service
+
+            include GRPC::GenericService
+
+            self.marshal_class_method = :encode
+            self.unmarshal_class_method = :decode
+            self.service_name = 'google.cloud.resourcemanager.v3.Organizations'
+
+            # Fetches an organization resource identified by the specified resource name.
+            rpc :GetOrganization, ::Google::Cloud::ResourceManager::V3::GetOrganizationRequest, ::Google::Cloud::ResourceManager::V3::Organization
+            # Searches organization resources that are visible to the user and satisfy
+            # the specified filter. This method returns organizations in an unspecified
+            # order. New organizations do not necessarily appear at the end of the
+            # results, and may take a small amount of time to appear.
+            #
+            # Search will only return organizations on which the user has the permission
+            # `resourcemanager.organizations.get`
+            rpc :SearchOrganizations, ::Google::Cloud::ResourceManager::V3::SearchOrganizationsRequest, ::Google::Cloud::ResourceManager::V3::SearchOrganizationsResponse
+            # Gets the access control policy for an organization resource. The policy may
+            # be empty if no such policy or resource exists. The `resource` field should
+            # be the organization's resource name, for example: "organizations/123".
+            #
+            # Authorization requires the IAM permission
+            # `resourcemanager.organizations.getIamPolicy` on the specified organization.
+            rpc :GetIamPolicy, ::Google::Iam::V1::GetIamPolicyRequest, ::Google::Iam::V1::Policy
+            # Sets the access control policy on an organization resource. Replaces any
+            # existing policy. The `resource` field should be the organization's resource
+            # name, for example: "organizations/123".
+            #
+            # Authorization requires the IAM permission
+            # `resourcemanager.organizations.setIamPolicy` on the specified organization.
+            rpc :SetIamPolicy, ::Google::Iam::V1::SetIamPolicyRequest, ::Google::Iam::V1::Policy
+            # Returns the permissions that a caller has on the specified organization.
+            # The `resource` field should be the organization's resource name,
+            # for example: "organizations/123".
+            #
+            # There are no permissions required for making this API call.
+            rpc :TestIamPermissions, ::Google::Iam::V1::TestIamPermissionsRequest, ::Google::Iam::V1::TestIamPermissionsResponse
+          end
+
+          Stub = Service.rpc_stub_class
+        end
+      end
+    end
+  end
+end