Whether the principal in the request matches the principal in
the policy.
Values:
MEMBERSHIP_MATCHING_STATE_UNSPECIFIED (0):
Not specified.
MEMBERSHIP_MATCHED (1):
The principal in the request matches the principal in the
policy. The principal can be included directly or
indirectly:
- A principal is included directly if that principal is
listed in the role binding.
- A principal is included indirectly if that principal is
in a Google group, Google Workspace account, or Cloud
Identity domain that is listed in the policy.
MEMBERSHIP_NOT_MATCHED (2):
The principal in the request doesn't match
the principal in the policy.
MEMBERSHIP_UNKNOWN_INFO (3):
The principal in the policy is a group or
domain, and the sender of the request doesn't
have permission to view whether the principal in
the request is a member of the group or domain.
MEMBERSHIP_UNKNOWN_UNSUPPORTED (4):
The principal is an unsupported type.
