Class PrivilegedAccessManagerAsyncClient (0.1.1)

This API allows customers to manage temporary, request based privileged access to their resources.

It defines the following resource model:

• A collection of Entitlement resources. An entitlement allows configuring (among other things):

  • Some kind of privileged access that users can request.
  • A set of users called requesters who can request this access.
  • A maximum duration for which the access can be requested.
  • An optional approval workflow which must be satisfied before access is granted.

• A collection of Grant resources. A grant is a request by a requester to get the privileged access specified in an entitlement for some duration.

  After the approval workflow as specified in the entitlement is satisfied, the specified access is given to the requester. The access is automatically taken back after the requested duration is over.

Return the API endpoint used by the client instance.

Returns the transport used by the client instance.

Return the universe domain used by the client instance.

Instantiates the privileged access manager async client.

ApproveGrant is used to approve a grant. This method can only be called on a grant when it's in the APPROVAL_AWAITED state. This operation can't be undone.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import privilegedaccessmanager_v1

async def sample_approve_grant():
    # Create a client
    client = privilegedaccessmanager_v1.PrivilegedAccessManagerAsyncClient()

    # Initialize request argument(s)
    request = privilegedaccessmanager_v1.ApproveGrantRequest(
        name="name_value",
    )

    # Make the request
    response = await client.approve_grant(request=request)

    # Handle the response
    print(response)

CheckOnboardingStatus reports the onboarding status for a project/folder/organization. Any findings reported by this API need to be fixed before PAM can be used on the resource.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import privilegedaccessmanager_v1

async def sample_check_onboarding_status():
    # Create a client
    client = privilegedaccessmanager_v1.PrivilegedAccessManagerAsyncClient()

    # Initialize request argument(s)
    request = privilegedaccessmanager_v1.CheckOnboardingStatusRequest(
        parent="parent_value",
    )

    # Make the request
    response = await client.check_onboarding_status(request=request)

    # Handle the response
    print(response)

Returns a fully-qualified billing_account string.

Returns a fully-qualified folder string.

Returns a fully-qualified location string.

Returns a fully-qualified organization string.

Returns a fully-qualified project string.

Creates a new entitlement in a given project/folder/organization and location.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import privilegedaccessmanager_v1

async def sample_create_entitlement():
    # Create a client
    client = privilegedaccessmanager_v1.PrivilegedAccessManagerAsyncClient()

    # Initialize request argument(s)
    request = privilegedaccessmanager_v1.CreateEntitlementRequest(
        parent="parent_value",
        entitlement_id="entitlement_id_value",
    )

    # Make the request
    operation = client.create_entitlement(request=request)

    print("Waiting for operation to complete...")

    response = (await operation).result()

    # Handle the response
    print(response)

Creates a new grant in a given project and location.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import privilegedaccessmanager_v1

async def sample_create_grant():
    # Create a client
    client = privilegedaccessmanager_v1.PrivilegedAccessManagerAsyncClient()

    # Initialize request argument(s)
    request = privilegedaccessmanager_v1.CreateGrantRequest(
        parent="parent_value",
    )

    # Make the request
    response = await client.create_grant(request=request)

    # Handle the response
    print(response)

Deletes a single entitlement. This method can only be called when there are no in-progress (ACTIVE/ACTIVATING/REVOKING) grants under the entitlement.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import privilegedaccessmanager_v1

async def sample_delete_entitlement():
    # Create a client
    client = privilegedaccessmanager_v1.PrivilegedAccessManagerAsyncClient()

    # Initialize request argument(s)
    request = privilegedaccessmanager_v1.DeleteEntitlementRequest(
        name="name_value",
    )

    # Make the request
    operation = client.delete_entitlement(request=request)

    print("Waiting for operation to complete...")

    response = (await operation).result()

    # Handle the response
    print(response)

Deletes a long-running operation.

This method indicates that the client is no longer interested in the operation result. It does not cancel the operation. If the server doesn't support this method, it returns google.rpc.Code.UNIMPLEMENTED.

DenyGrant is used to deny a grant. This method can only be called on a grant when it's in the APPROVAL_AWAITED state. This operation can't be undone.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import privilegedaccessmanager_v1

async def sample_deny_grant():
    # Create a client
    client = privilegedaccessmanager_v1.PrivilegedAccessManagerAsyncClient()

    # Initialize request argument(s)
    request = privilegedaccessmanager_v1.DenyGrantRequest(
        name="name_value",
    )

    # Make the request
    response = await client.deny_grant(request=request)

    # Handle the response
    print(response)

Returns a fully-qualified entitlement string.

Creates an instance of this client using the provided credentials file.

Creates an instance of this client using the provided credentials info.

Creates an instance of this client using the provided credentials file.

Gets details of a single entitlement.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import privilegedaccessmanager_v1

async def sample_get_entitlement():
    # Create a client
    client = privilegedaccessmanager_v1.PrivilegedAccessManagerAsyncClient()

    # Initialize request argument(s)
    request = privilegedaccessmanager_v1.GetEntitlementRequest(
        name="name_value",
    )

    # Make the request
    response = await client.get_entitlement(request=request)

    # Handle the response
    print(response)

Get details of a single grant.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import privilegedaccessmanager_v1

async def sample_get_grant():
    # Create a client
    client = privilegedaccessmanager_v1.PrivilegedAccessManagerAsyncClient()

    # Initialize request argument(s)
    request = privilegedaccessmanager_v1.GetGrantRequest(
        name="name_value",
    )

    # Make the request
    response = await client.get_grant(request=request)

    # Handle the response
    print(response)

Gets information about a location.

Return the API endpoint and client cert source for mutual TLS.

The client cert source is determined in the following order: (1) if GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable is not "true", the client cert source is None. (2) if client_options.client_cert_source is provided, use the provided one; if the default client cert source exists, use the default one; otherwise the client cert source is None.

The API endpoint is determined in the following order: (1) if client_options.api_endpoint if provided, use the provided one. (2) if GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable is "always", use the default mTLS endpoint; if the environment variable is "never", use the default API endpoint; otherwise if client cert source exists, use the default mTLS endpoint, otherwise use the default API endpoint.

More details can be found at https://google.aip.dev/auth/4114.

Gets the latest state of a long-running operation.

Returns an appropriate transport class.

Returns a fully-qualified grant string.

Lists entitlements in a given project/folder/organization and location.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import privilegedaccessmanager_v1

async def sample_list_entitlements():
    # Create a client
    client = privilegedaccessmanager_v1.PrivilegedAccessManagerAsyncClient()

    # Initialize request argument(s)
    request = privilegedaccessmanager_v1.ListEntitlementsRequest(
        parent="parent_value",
    )

    # Make the request
    page_result = client.list_entitlements(request=request)

    # Handle the response
    async for response in page_result:
        print(response)

Lists grants for a given entitlement.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import privilegedaccessmanager_v1

async def sample_list_grants():
    # Create a client
    client = privilegedaccessmanager_v1.PrivilegedAccessManagerAsyncClient()

    # Initialize request argument(s)
    request = privilegedaccessmanager_v1.ListGrantsRequest(
        parent="parent_value",
    )

    # Make the request
    page_result = client.list_grants(request=request)

    # Handle the response
    async for response in page_result:
        print(response)

Lists information about the supported locations for this service.

Lists operations that match the specified filter in the request.

Parse a billing_account path into its component segments.

Parse a folder path into its component segments.

Parse a location path into its component segments.

Parse a organization path into its component segments.

Parse a project path into its component segments.

Parses a entitlement path into its component segments.

Parses a grant path into its component segments.

RevokeGrant is used to immediately revoke access for a grant. This method can be called when the grant is in a non-terminal state.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import privilegedaccessmanager_v1

async def sample_revoke_grant():
    # Create a client
    client = privilegedaccessmanager_v1.PrivilegedAccessManagerAsyncClient()

    # Initialize request argument(s)
    request = privilegedaccessmanager_v1.RevokeGrantRequest(
        name="name_value",
    )

    # Make the request
    operation = client.revoke_grant(request=request)

    print("Waiting for operation to complete...")

    response = (await operation).result()

    # Handle the response
    print(response)

SearchEntitlements returns entitlements on which the caller has the specified access.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import privilegedaccessmanager_v1

async def sample_search_entitlements():
    # Create a client
    client = privilegedaccessmanager_v1.PrivilegedAccessManagerAsyncClient()

    # Initialize request argument(s)
    request = privilegedaccessmanager_v1.SearchEntitlementsRequest(
        parent="parent_value",
        caller_access_type="GRANT_APPROVER",
    )

    # Make the request
    page_result = client.search_entitlements(request=request)

    # Handle the response
    async for response in page_result:
        print(response)

SearchGrants returns grants that are related to the calling user in the specified way.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import privilegedaccessmanager_v1

async def sample_search_grants():
    # Create a client
    client = privilegedaccessmanager_v1.PrivilegedAccessManagerAsyncClient()

    # Initialize request argument(s)
    request = privilegedaccessmanager_v1.SearchGrantsRequest(
        parent="parent_value",
        caller_relationship="HAD_APPROVED",
    )

    # Make the request
    page_result = client.search_grants(request=request)

    # Handle the response
    async for response in page_result:
        print(response)

Updates the entitlement specified in the request. Updated fields in the entitlement need to be specified in an update mask. The changes made to an entitlement are applicable only on future grants of the entitlement. However, if new approvers are added or existing approvers are removed from the approval workflow, the changes are effective on existing grants.

The following fields are not supported for updates:

• All immutable fields
• Entitlement name
• Resource name
• Resource type
• Adding an approval workflow in an entitlement which previously had no approval workflow.
• Deleting the approval workflow from an entitlement.
• Adding or deleting a step in the approval workflow (only one step is supported)

Note that updates are allowed on the list of approvers in an approval workflow step.

# This snippet has been automatically generated and should be regarded as a
# code template only.
# It will require modifications to work:
# - It may require correct/in-range values for request initialization.
# - It may require specifying regional endpoints when creating the service
#   client as shown in:
#   https://googleapis.dev/python/google-api-core/latest/client_options.html
from google.cloud import privilegedaccessmanager_v1

async def sample_update_entitlement():
    # Create a client
    client = privilegedaccessmanager_v1.PrivilegedAccessManagerAsyncClient()

    # Initialize request argument(s)
    request = privilegedaccessmanager_v1.UpdateEntitlementRequest(
    )

    # Make the request
    operation = client.update_entitlement(request=request)

    print("Waiting for operation to complete...")

    response = (await operation).result()

    # Handle the response
    print(response)