User-created service accounts ending in the provided identities are
allowed to have Admin, Owner or Editor roles granted to them. Otherwise
a finding will be created.
A valid identity can be:
a partilly specified service account that starts with "@", e.g.
"@myproject.iam.gserviceaccount.com". This approves all the service
accounts suffixed with the specified identity.
a fully specified service account that does not start with "@", e.g.
"myadmin@myproject.iam.gserviceaccount.com".
Google-created service accounts are all approved.
User-created service accounts ending in the provided identities are
allowed to have Admin, Owner or Editor roles granted to them. Otherwise
a finding will be created.
A valid identity can be:
a partilly specified service account that starts with "@", e.g.
"@myproject.iam.gserviceaccount.com". This approves all the service
accounts suffixed with the specified identity.
a fully specified service account that does not start with "@", e.g.
"myadmin@myproject.iam.gserviceaccount.com".
Google-created service accounts are all approved.
The bytes of the approvedIdentities at the given index.
getApprovedIdentitiesCount()
publicintgetApprovedIdentitiesCount()
User-created service accounts ending in the provided identities are
allowed to have Admin, Owner or Editor roles granted to them. Otherwise
a finding will be created.
A valid identity can be:
a partilly specified service account that starts with "@", e.g.
"@myproject.iam.gserviceaccount.com". This approves all the service
accounts suffixed with the specified identity.
a fully specified service account that does not start with "@", e.g.
"myadmin@myproject.iam.gserviceaccount.com".
Google-created service accounts are all approved.
User-created service accounts ending in the provided identities are
allowed to have Admin, Owner or Editor roles granted to them. Otherwise
a finding will be created.
A valid identity can be:
a partilly specified service account that starts with "@", e.g.
"@myproject.iam.gserviceaccount.com". This approves all the service
accounts suffixed with the specified identity.
a fully specified service account that does not start with "@", e.g.
"myadmin@myproject.iam.gserviceaccount.com".
Google-created service accounts are all approved.