A request message for [AssetService.ExportIamPolicyAnalysis][google.cl oud.asset.v1p4beta1.AssetService.ExportIamPolicyAnalysis]. .. attribute:: analysis_query
Required. The request query.
Required. Output configuration indicating where the results will be output to.
Classes
Options
Contains request options. .. attribute:: expand_groups
Optional. If true, the identities section of the result will expand any Google groups appearing in an IAM policy binding. If [identity_selector][] is specified, the identity in the result will be determined by the selector, and this flag will have no effect. Default is false.
Optional. If true, the resource section of the result will expand any resource attached to an IAM policy to include resources lower in the resource hierarchy. For example, if the request analyzes for which resources user A has permission P, and the results include an IAM policy with P on a GCP folder, the results will also include resources in that folder with permission P. If [resource_selector][] is specified, the resource section of the result will be determined by the selector, and this flag will have no effect. Default is false.
Optional. If true, the result will output group identity edges, starting from the binding’s group members, to any expanded identities. Default is false.