Google Cloud Asset V1 Client - Class IamPolicyAnalysisQuery (1.11.3)

Reference documentation and code samples for the Google Cloud Asset V1 Client class IamPolicyAnalysisQuery.

IAM policy analysis query message.

Generated from protobuf message google.cloud.asset.v1.IamPolicyAnalysisQuery

Methods

__construct

Constructor.

Parameters
Name Description
data array

Optional. Data for populating the Message object.

↳ scope string

Required. The relative name of the root asset. Only resources and IAM policies within the scope will be analyzed. This can only be an organization number (such as "organizations/123"), a folder number (such as "folders/123"), a project ID (such as "projects/my-project-id"), or a project number (such as "projects/12345"). To know how to get organization id, visit here . To know how to get folder or project id, visit here .

↳ resource_selector Google\Cloud\Asset\V1\IamPolicyAnalysisQuery\ResourceSelector

Optional. Specifies a resource for analysis.

↳ identity_selector Google\Cloud\Asset\V1\IamPolicyAnalysisQuery\IdentitySelector

Optional. Specifies an identity for analysis.

↳ access_selector Google\Cloud\Asset\V1\IamPolicyAnalysisQuery\AccessSelector

Optional. Specifies roles or permissions for analysis. This is optional.

↳ options Google\Cloud\Asset\V1\IamPolicyAnalysisQuery\Options

Optional. The query options.

↳ condition_context Google\Cloud\Asset\V1\IamPolicyAnalysisQuery\ConditionContext

Optional. The hypothetical context for IAM conditions evaluation.

getScope

Required. The relative name of the root asset. Only resources and IAM policies within the scope will be analyzed.

This can only be an organization number (such as "organizations/123"), a folder number (such as "folders/123"), a project ID (such as "projects/my-project-id"), or a project number (such as "projects/12345"). To know how to get organization id, visit here . To know how to get folder or project id, visit here .

Returns
Type Description
string

setScope

Required. The relative name of the root asset. Only resources and IAM policies within the scope will be analyzed.

This can only be an organization number (such as "organizations/123"), a folder number (such as "folders/123"), a project ID (such as "projects/my-project-id"), or a project number (such as "projects/12345"). To know how to get organization id, visit here . To know how to get folder or project id, visit here .

Parameter
Name Description
var string
Returns
Type Description
$this

getResourceSelector

Optional. Specifies a resource for analysis.

hasResourceSelector

clearResourceSelector

setResourceSelector

Optional. Specifies a resource for analysis.

Returns
Type Description
$this

getIdentitySelector

Optional. Specifies an identity for analysis.

hasIdentitySelector

clearIdentitySelector

setIdentitySelector

Optional. Specifies an identity for analysis.

Returns
Type Description
$this

getAccessSelector

Optional. Specifies roles or permissions for analysis. This is optional.

hasAccessSelector

clearAccessSelector

setAccessSelector

Optional. Specifies roles or permissions for analysis. This is optional.

Returns
Type Description
$this

getOptions

Optional. The query options.

hasOptions

clearOptions

setOptions

Optional. The query options.

Returns
Type Description
$this

getConditionContext

Optional. The hypothetical context for IAM conditions evaluation.

hasConditionContext

clearConditionContext

setConditionContext

Optional. The hypothetical context for IAM conditions evaluation.

Returns
Type Description
$this