The principal in the request matches the principal in the policy. The
principal can be included directly or indirectly:
A principal is included directly if that principal is listed in the
role binding.
A principal is included indirectly if that principal is in a Google
group, Google Workspace account, or Cloud Identity domain that is listed
in the policy.
MembershipNotMatched
The principal in the request doesn't match the principal in the policy.
MembershipUnknownInfo
The principal in the policy is a group or domain, and the sender of the
request doesn't have permission to view whether the principal in the
request is a member of the group or domain.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-04-17 UTC."],[[["This documentation covers the `MembershipMatchingState` enum within the Policy Troubleshooter v3 API, providing reference for its different states."],["The `MembershipMatchingState` enum indicates whether a principal in a request matches a principal in a policy, either directly or indirectly through group or domain membership."],["The enum includes fields like `MembershipMatched`, `MembershipNotMatched`, `MembershipUnknownInfo`, `MembershipUnknownUnsupported`, and `Unspecified`, each representing a distinct state of principal matching."],["The `Google.Cloud.PolicyTroubleshooter.Iam.V3` namespace contains this enum, and it is found within the `Google.Cloud.PolicyTroubleshooter.Iam.V3.dll` assembly."]]],[]]
