Whether the principal in the request matches the principal in
the policy.
- A principal is included directly if that principal is
listed in the role binding.
- A principal is included indirectly if that principal is
in a Google group, Google Workspace account, or Cloud
Identity domain that is listed in the policy.
MEMBERSHIP_NOT_MATCHED (2):
The principal in the request doesn't match
the principal in the policy.
MEMBERSHIP_UNKNOWN_INFO (3):
The principal in the policy is a group or
domain, and the sender of the request doesn't
have permission to view whether the principal in
the request is a member of the group or domain.
MEMBERSHIP_UNKNOWN_UNSUPPORTED (4):
The principal is an unsupported type.
Enums
Name
Description
MEMBERSHIP_MATCHING_STATE_UNSPECIFIED
Not specified.
MEMBERSHIP_MATCHED
The principal in the request matches the principal in the policy. The principal can be included directly or indirectly:
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[],[],null,["# Class MembershipMatchingState (0.1.13)\n\nVersion latestkeyboard_arrow_down\n\n- [0.1.13 (latest)](/python/docs/reference/policytroubleshooter-iam/latest/google.cloud.policytroubleshooter_iam_v3.types.MembershipMatchingState)\n- [0.1.11](/python/docs/reference/policytroubleshooter-iam/0.1.11/google.cloud.policytroubleshooter_iam_v3.types.MembershipMatchingState) \n\n MembershipMatchingState(value)\n\nWhether the principal in the request matches the principal in\nthe policy. \n\n - A principal is included directly if that principal is\n listed in the role binding.\n - A principal is included indirectly if that principal is\n in a Google group, Google Workspace account, or Cloud\n Identity domain that is listed in the policy.\n MEMBERSHIP_NOT_MATCHED (2):\n The principal in the request doesn't match\n the principal in the policy.\n MEMBERSHIP_UNKNOWN_INFO (3):\n The principal in the policy is a group or\n domain, and the sender of the request doesn't\n have permission to view whether the principal in\n the request is a member of the group or domain.\n MEMBERSHIP_UNKNOWN_UNSUPPORTED (4):\n The principal is an unsupported type."]]
