Optional. If true, the identities section of the result will
expand any Google groups appearing in an IAM policy binding.
If [identity_selector][] is specified, the identity in the
result will be determined by the selector, and this flag will
have no effect. Default is false.
Optional. If true, the resource section of the result will
expand any resource attached to an IAM policy to include
resources lower in the resource hierarchy. For example, if
the request analyzes for which resources user A has permission
P, and the results include an IAM policy with P on a GCP
folder, the results will also include resources in that folder
with permission P. If [resource_selector][] is specified, the
resource section of the result will be determined by the
selector, and this flag will have no effect. Default is false.
Optional. If true, the result will output group identity
edges, starting from the binding’s group members, to any
expanded identities. Default is false.