SearchAllIamPoliciesRequest(mapping=None, *, ignore_unknown_fields=False, **kwargs)
Search all IAM policies request.
Attributes
Name | Description |
scope |
str
Required. A scope can be a project, a folder or an organization. The search is limited to the IAM policies within the scope .
The allowed values are:
- projects/{PROJECT_ID}
- projects/{PROJECT_NUMBER}
- folders/{FOLDER_NUMBER}
- organizations/{ORGANIZATION_NUMBER}
|
query |
str
Optional. The query statement. An empty query can be specified to search all the IAM policies within the given scope .
Examples:
- policy : "amy@gmail.com" to find Cloud IAM policy
bindings that specify user "amy@gmail.com".
- policy : "roles/compute.admin" to find Cloud IAM
policy bindings that specify the Compute Admin role.
- policy.role.permissions : "storage.buckets.update" to
find Cloud IAM policy bindings that specify a role
containing "storage.buckets.update" permission.
- resource : "organizations/123" to find Cloud IAM
policy bindings that are set on "organizations/123".
- (resource : ("organizations/123" OR "folders/1234") AND policy : "amy")
to find Cloud IAM policy bindings that are set on
"organizations/123" or "folders/1234", and also specify
user "amy".
See `how to construct a
query |
page_size |
int
Optional. The page size for search result pagination. Page size is capped at 500 even if a larger value is given. If set to zero, server will pick an appropriate default. Returned results may be fewer than requested. When this happens, there could be more results as long as next_page_token is returned.
|
page_token |
str
Optional. If present, retrieve the next batch of results from the preceding call to this method. page_token must
be the value of next_page_token from the previous
response. The values of all other method parameters must be
identical to those in the previous call.
|