Optional. The query statement. An empty query can be specified
to search all the IAM policies within the given scope.
Examples: - policy : "amy@gmail.com" to find Cloud IAM
policy bindings that specify user “amy@gmail.com”. -
policy : "roles/compute.admin" to find Cloud IAM policy
bindings that specify the Compute Admin role. -
policy.role.permissions : "storage.buckets.update" to find
Cloud IAM policy bindings that specify a role containing
“storage.buckets.update” permission. - resource :
"organizations/123" to find Cloud IAM policy bindings
that are set on “organizations/123”. - (resource :
("organizations/123" OR "folders/1234") AND policy : "amy")
to find Cloud IAM policy bindings that are set on
“organizations/123” or “folders/1234”, and also specify
user “amy”. See how to construct a query
<https://cloud.google.com/asset-inventory/docs/searching-iam-
policies#how_to_construct_a_query>__ for more details.
Optional. If present, retrieve the next batch of results from
the preceding call to this method. page_token must be the
value of next_page_token from the previous response. The
values of all other method parameters must be identical to
those in the previous call.