Identifier. The name of the policy binding, in the format {binding_parent/locations/{location}/policyBindings/{policyBindingId}. The binding parent is the closest Resource Manager resource (project, folder, or organization) to the binding target.
Optional. The condition to apply to the policy binding. When set, the expression field in the Expr must include from 1 to 10 subexpressions, joined by the "||"(Logical OR), "&&"(Logical AND) or "!"(Logical NOT) operators and cannot contain more than 250 characters.
The condition is currently only supported when bound to policies of kind principal access boundary.
When the bound policy is a principal access boundary policy, the only supported attributes in any subexpression are principal.type and principal.subject. An example expression is: "principal.type == 'iam.googleapis.com/ServiceAccount'" or "principal.subject == 'bob@example.com'".
Allowed operations for principal.subject:
principal.subject == <principal subject string>
principal.subject != <principal subject string>
principal.subject in [<list of principal subjects>]
principal.subject.startsWith(<string>)
principal.subject.endsWith(<string>)
Allowed operations for principal.type:
principal.type == <principal type string>
principal.type != <principal type string>
principal.type in [<list of principal types>]
Supported principal types are Workspace, Workforce Pool, Workload Pool and Service Account. Allowed string must be one of:
Output only. The time when the policy binding was created.
Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
Output only. The time when the policy binding was most recently updated.
Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-05-21 UTC."],[[["\u003cp\u003eThe PolicyBinding resource defines an IAM policy binding, identified by a name and a globally unique ID, and associated with a target resource.\u003c/p\u003e\n"],["\u003cp\u003ePolicyBinding includes fields like \u003ccode\u003ename\u003c/code\u003e, \u003ccode\u003euid\u003c/code\u003e, \u003ccode\u003eetag\u003c/code\u003e, \u003ccode\u003edisplayName\u003c/code\u003e, \u003ccode\u003eannotations\u003c/code\u003e, \u003ccode\u003etarget\u003c/code\u003e, \u003ccode\u003epolicyKind\u003c/code\u003e, \u003ccode\u003epolicy\u003c/code\u003e, \u003ccode\u003epolicyUid\u003c/code\u003e, \u003ccode\u003econdition\u003c/code\u003e, \u003ccode\u003ecreateTime\u003c/code\u003e, and \u003ccode\u003eupdateTime\u003c/code\u003e which are used to configure and manage the binding.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003etarget\u003c/code\u003e field specifies the resource to which the policy is bound, and the \u003ccode\u003epolicy\u003c/code\u003e field names the specific policy being attached.\u003c/p\u003e\n"],["\u003cp\u003eThere are several methods available to manage policy bindings, including \u003ccode\u003ecreate\u003c/code\u003e, \u003ccode\u003edelete\u003c/code\u003e, \u003ccode\u003eget\u003c/code\u003e, \u003ccode\u003elist\u003c/code\u003e, \u003ccode\u003epatch\u003c/code\u003e, and \u003ccode\u003esearchTargetPolicyBindings\u003c/code\u003e, each serving a distinct purpose for binding manipulation.\u003c/p\u003e\n"],["\u003cp\u003eThe policy binding can have a condition applied, that must adhere to a set of rules, supporting the logical OR, AND and NOT operations as well as specific principal attributes.\u003c/p\u003e\n"]]],[],null,[]]