Identifier. The name of the policy binding, in the format {binding_parent/locations/{location}/policyBindings/{policyBindingId}. The binding parent is the closest Resource Manager resource (project, folder, or organization) to the binding target.
Optional. The condition to apply to the policy binding. When set, the expression field in the Expr must include from 1 to 10 subexpressions, joined by the "||"(Logical OR), "&&"(Logical AND) or "!"(Logical NOT) operators and cannot contain more than 250 characters.
The condition is currently only supported when bound to policies of kind principal access boundary.
When the bound policy is a principal access boundary policy, the only supported attributes in any subexpression are principal.type and principal.subject. An example expression is: "principal.type == 'iam.googleapis.com/ServiceAccount'" or "principal.subject == 'bob@example.com'".
Allowed operations for principal.subject:
principal.subject == <principal subject string>
principal.subject != <principal subject string>
principal.subject in [<list of principal subjects>]
principal.subject.startsWith(<string>)
principal.subject.endsWith(<string>)
Allowed operations for principal.type:
principal.type == <principal type string>
principal.type != <principal type string>
principal.type in [<list of principal types>]
Supported principal types are Workspace, Workforce Pool, Workload Pool and Service Account. Allowed string must be one of:
Output only. The time when the policy binding was created.
Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
Output only. The time when the policy binding was most recently updated.
Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-05-21 UTC."],[[["\u003cp\u003eThis resource details the PolicyBinding, an IAM resource for managing policy attachments to resources, identified by a unique name and globally unique ID.\u003c/p\u003e\n"],["\u003cp\u003ePolicyBindings are defined with fields like \u003ccode\u003ename\u003c/code\u003e, \u003ccode\u003euid\u003c/code\u003e, \u003ccode\u003eetag\u003c/code\u003e, \u003ccode\u003edisplayName\u003c/code\u003e, \u003ccode\u003eannotations\u003c/code\u003e, \u003ccode\u003etarget\u003c/code\u003e, \u003ccode\u003epolicyKind\u003c/code\u003e, \u003ccode\u003epolicy\u003c/code\u003e, \u003ccode\u003epolicyUid\u003c/code\u003e, \u003ccode\u003econdition\u003c/code\u003e, \u003ccode\u003ecreateTime\u003c/code\u003e, and \u003ccode\u003eupdateTime\u003c/code\u003e, all described with their formats and constraints.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003etarget\u003c/code\u003e field within a PolicyBinding specifies the full resource name where the policy is applied, while \u003ccode\u003epolicyKind\u003c/code\u003e determines the type of policy being attached.\u003c/p\u003e\n"],["\u003cp\u003ePolicyBindings support various operations including creation, deletion, retrieval, listing, and updating, each accessible through specific API methods.\u003c/p\u003e\n"],["\u003cp\u003ePolicyBindings can be searched by their target resource with \u003ccode\u003esearchTargetPolicyBindings\u003c/code\u003e method.\u003c/p\u003e\n"]]],[],null,[]]