REST Resource: policies

{
  "name": string,
  "customer": string,
  "policyQuery": {
    object (PolicyQuery)
  },
  "setting": {
    object (Setting)
  },
  "type": enum (PolicyType)
}

string

Output only. Identifier. The resource name of the Policy. Format: policies/{policy}.

string

Immutable. Customer that the Policy belongs to. The value is in the format 'customers/{customerId}'. The customerId must begin with "C" To find your customer ID in Admin Console see https://support.google.com/a/answer/10070793.

object (PolicyQuery)

Required. The PolicyQuery the Setting applies to.

object (Setting)

Required. The Setting configured by this Policy.

enum (PolicyType)

Output only. The type of the policy.

{
  "query": string,
  "orgUnit": string,
  "group": string,
  "sortOrder": number
}

string

Immutable. The CEL query that defines which entities the Policy applies to (ex. a User entity).

For details about CEL see https://opensource.google.com/projects/cel.

The OrgUnits the Policy applies to are represented by a clause like so: entity.org_units.exists(orgUnit, orgUnit.org_unit_id == orgUnitId('{orgUnitId}'))

The Group the Policy applies to are represented by a clause like so: entity.groups.exists(group, group.group_id == groupId('{groupId}'))

The Licenses the Policy applies to are represented by a clause like so: entity.licenses.exists(license, license in ['/product/{productId}/sku/{skuId}'])

The above clauses can be present in any combination, and used in conjunction with the &&, || and ! operators.

The orgUnit and group fields below are helper fields that contain the corresponding value(s) as the query to make the query easier to use.

string

Required. Immutable. Non-empty default. The OrgUnit the query applies to. This field is only set if there is a single value for orgUnit that satisfies all clauses of the query.

string

Immutable. The group that the query applies to. This field is only set if there is a single value for group that satisfies all clauses of the query. If no group applies, this will be the empty string.

number

Output only. The decimal sort order of this PolicyQuery. The value is relative to all other policies with the same setting type for the customer. (There are no duplicates within this set).

{
  "type": string,
  "value": {
    object
  }
}

string

Required. Immutable. The type of the Setting. .

object (Struct format)

Required. The value of the Setting.