The principal in the request matches the principal in the policy. The
principal can be included directly or indirectly:
A principal is included directly if that principal is listed in the
role binding.
A principal is included indirectly if that principal is in a Google
group, Google Workspace account, or Cloud Identity domain that is listed
in the policy.
MembershipNotMatched
The principal in the request doesn't match the principal in the policy.
MembershipUnknownInfo
The principal in the policy is a group or domain, and the sender of the
request doesn't have permission to view whether the principal in the
request is a member of the group or domain.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-04-17 UTC."],[[["This document provides reference information for the `MembershipMatchingState` enum within the Policy Troubleshooter v3 API, specifically for the .NET library."],["The `MembershipMatchingState` enum indicates whether the principal in a request matches the principal in a policy, either directly or indirectly through group or domain membership."],["There are five possible states for `MembershipMatchingState`: `MembershipMatched`, `MembershipNotMatched`, `MembershipUnknownInfo`, `MembershipUnknownUnsupported`, and `Unspecified`, each detailing the matching status."],["The Policy Troubleshooter v3 API is available in three versions: 1.2.0, 1.1.0, and 1.0.0, with 1.2.0 being the latest."]]],[]]
