Google Cloud Resource Manager (version v1.*.*)

$body#

A Folder in an Organization's resource hierarchy, used to organize that Organization's resources.

Type: object

{
  "parent" : "Required. The Folder's parent's resource name. Updates to the folder's parent must be performed via MoveFolder.",
  "deleteTime" : "Output only. Timestamp when the Folder was requested to be deleted.",
  "createTime" : "Output only. Timestamp when the Folder was created.",
  "displayName" : "The folder's display name. A folder's display name must be unique amongst its siblings, e.g. no two folders with the same parent can share the same display name. The display name must start and end with a letter or digit, may contain letters, digits, spaces, hyphens and underscores and can be no longer than 30 characters. This is captured by the regular expression: `[\\p{L}\\p{N}]([\\p{L}\\p{N}_- ]{0,28}[\\p{L}\\p{N}])?`.",
  "name" : "Output only. The resource name of the Folder. Its format is `folders/{folder_id}`, for example: \"folders/1234\".",
  "updateTime" : "Output only. Timestamp when the Folder was last modified.",
  "etag" : "Output only. A checksum computed by the server based on the current value of the Folder resource. This may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.",
  "state" : "Output only. The lifecycle state of the folder. Updates to the state must be performed via DeleteFolder and UndeleteFolder."
}

fields#

Selector specifying which fields to include in a partial response.

Type: string

$body#

A Lien represents an encumbrance on the actions that can be performed on a resource.

Type: object

{
  "parent" : "A reference to the resource this Lien is attached to. The server will validate the parent against those for which Liens are supported. Example: `projects/1234`",
  "reason" : "Concise user-visible strings indicating why an action cannot be performed on a resource. Maximum length of 200 characters. Example: 'Holds production API key'",
  "createTime" : "The creation time of this Lien.",
  "origin" : "A stable, user-visible/meaningful string identifying the origin of the Lien, intended to be inspected programmatically. Maximum length of 200 characters. Example: 'compute.googleapis.com'",
  "name" : "A system-generated unique identifier for this Lien. Example: `liens/1234abcd`",
  "restrictions" : [ "string" ]
}

fields#

Selector specifying which fields to include in a partial response.

Type: string

$body#

A Project is a high-level Google Cloud Platform entity. It is a container for ACLs, APIs, App Engine Apps, VMs, and other Google Cloud Platform resources.

Type: object

{
  "parent" : "Optional. A reference to a parent Resource. eg., `organizations/123` or `folders/876`.",
  "createTime" : "Output only. Creation time.",
  "deleteTime" : "Output only. The time at which this resource was requested for deletion.",
  "displayName" : "Optional. A user-assigned display name of the Project. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, single-quote, double-quote, space, and exclamation point. Example: `My Project`",
  "name" : "Output only. The unique resource name of the Project. It is an int64 generated number prefixed by \"projects/\". Example: `projects/415104041262`",
  "updateTime" : "Output only. The most recent time this resource was modified.",
  "etag" : "Output only. A checksum computed by the server based on the current value of the Project resource. This may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.",
  "state" : "Output only. The Project lifecycle state.",
  "projectId" : "Immutable. The unique, user-assigned id of the Project. It must be 6 to 30 lowercase ASCII letters, digits, or hyphens. It must start with a letter. Trailing hyphens are prohibited. Example: `tokyo-rain-123`",
  "labels" : "Optional. The labels associated with this Project. Label keys must be between 1 and 63 characters long and must conform to the following regular expression: \\[a-z\\](\\[-a-z0-9\\]*\\[a-z0-9\\])?. Label values must be between 0 and 63 characters long and must conform to the regular expression (\\[a-z\\](\\[-a-z0-9\\]*\\[a-z0-9\\])?)?. No more than 256 labels can be associated with a given resource. Clients should store labels in a representation such as JSON that does not depend on specific characters being disallowed. Example: `\"myBusinessDimension\" : \"businessValue\"`"
}

fields#

Selector specifying which fields to include in a partial response.

Type: string

$body#

A TagBinding represents a connection between a TagValue and a cloud resource (currently project, folder, or organization). Once a TagBinding is created, the TagValue is applied to all the descendants of the cloud resource.

Type: object

{
  "parent" : "The full resource name of the resource the TagValue is bound to. E.g. `//cloudresourcemanager.googleapis.com/projects/123`",
  "tagValue" : "The TagValue of the TagBinding. Must be of the form `tagValues/456`.",
  "name" : "Output only. The name of the TagBinding. This is a String of the form: `tagBindings/{full-resource-name}/{tag-value-name}` (e.g. `tagBindings/%2F%2Fcloudresourcemanager.googleapis.com%2Fprojects%2F123/tagValues/456`)."
}

fields#

Selector specifying which fields to include in a partial response.

Type: string

validateOnly#

Optional. Set to true to perform the validations necessary for creating the resource, but not actually perform the action.

Type: boolean

$body#

A TagKey, used to group a set of TagValues.

Type: object

{
  "parent" : "Immutable. The resource name of the new TagKey's parent. Must be of the form `organizations/{org_id}`.",
  "createTime" : "Output only. Creation time.",
  "name" : "Immutable. The resource name for a TagKey. Must be in the format `tagKeys/{tag_key_id}`, where `tag_key_id` is the generated numeric id for the TagKey.",
  "description" : "Optional. User-assigned description of the TagKey. Must not exceed 256 characters. Read-write.",
  "updateTime" : "Output only. Update time.",
  "etag" : "Optional. Entity tag which users can pass to prevent race conditions. This field is always set in server responses. See UpdateTagKeyRequest for details.",
  "namespacedName" : "Output only. Immutable. Namespaced name of the TagKey.",
  "shortName" : "Required. Immutable. The user friendly name for a TagKey. The short name should be unique for TagKeys within the same tag namespace. The short name must be 1-63 characters, beginning and ending with an alphanumeric character ([a-z0-9A-Z]) with dashes (-), underscores (_), dots (.), and alphanumerics between."
}

fields#

Selector specifying which fields to include in a partial response.

Type: string

validateOnly#

Optional. Set to true to perform validations necessary for creating the resource, but not actually perform the action.

Type: boolean

$body#

A TagValue is a child of a particular TagKey. This is used to group cloud resources for the purpose of controlling them using policies.

Type: object

{
  "parent" : "Immutable. The resource name of the new TagValue's parent TagKey. Must be of the form `tagKeys/{tag_key_id}`.",
  "createTime" : "Output only. Creation time.",
  "name" : "Immutable. Resource name for TagValue in the format `tagValues/456`.",
  "description" : "Optional. User-assigned description of the TagValue. Must not exceed 256 characters. Read-write.",
  "etag" : "Optional. Entity tag which users can pass to prevent race conditions. This field is always set in server responses. See UpdateTagValueRequest for details.",
  "updateTime" : "Output only. Update time.",
  "shortName" : "Required. Immutable. User-assigned short name for TagValue. The short name should be unique for TagValues within the same parent TagKey. The short name must be 63 characters or less, beginning and ending with an alphanumeric character ([a-z0-9A-Z]) with dashes (-), underscores (_), dots (.), and alphanumerics between.",
  "namespacedName" : "Output only. Namespaced name of the TagValue. Must be in the format `{organization_id}/{tag_key_short_name}/{short_name}`."
}

fields#

Selector specifying which fields to include in a partial response.

Type: string

validateOnly#

Optional. Set as true to perform the validations necessary for creating the resource, but not actually perform the action.

Type: boolean

foldersId (required)#

Type: string

fields#

Selector specifying which fields to include in a partial response.

Type: string

liensId (required)#

Type: string

fields#

Selector specifying which fields to include in a partial response.

Type: string

projectsId (required)#

Type: string

fields#

Selector specifying which fields to include in a partial response.

Type: string

tagBindingsId (required)#

Type: string

fields#

Selector specifying which fields to include in a partial response.

Type: string

tagKeysId (required)#

Type: string

etag#

Optional. The etag known to the client for the expected state of the TagKey. This is to be used for optimistic concurrency.

Type: string

fields#

Selector specifying which fields to include in a partial response.

Type: string

validateOnly#

Optional. Set as true to perform validations necessary for deletion, but not actually perform the action.

Type: boolean

tagValuesId (required)#

Type: string

etag#

Optional. The etag known to the client for the expected state of the TagValue. This is to be used for optimistic concurrency.

Type: string

fields#

Selector specifying which fields to include in a partial response.

Type: string

validateOnly#

Optional. Set as true to perform the validations necessary for deletion, but not actually perform the action.

Type: boolean

foldersId (required)#

Type: string

fields#

Selector specifying which fields to include in a partial response.

Type: string

foldersId (required)#

Type: string

$body#

Request message for GetIamPolicy method.

Type: object

{
  "options" : {
    "requestedPolicyVersion" : "Optional. The policy format version to be returned. Valid values are 0, 1, and 3. Requests specifying an invalid value will be rejected. Requests for policies with any conditional bindings must specify version 3. Policies without any conditional bindings may specify any valid value or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies)."
  }
}

fields#

Selector specifying which fields to include in a partial response.

Type: string

liensId (required)#

Type: string

fields#

Selector specifying which fields to include in a partial response.

Type: string

operationsId (required)#

Type: string

fields#

Selector specifying which fields to include in a partial response.

Type: string

organizationsId (required)#

Type: string

fields#

Selector specifying which fields to include in a partial response.

Type: string

organizationsId (required)#

Type: string

$body#

Request message for GetIamPolicy method.

Type: object

{
  "options" : {
    "requestedPolicyVersion" : "Optional. The policy format version to be returned. Valid values are 0, 1, and 3. Requests specifying an invalid value will be rejected. Requests for policies with any conditional bindings must specify version 3. Policies without any conditional bindings may specify any valid value or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies)."
  }
}

fields#

Selector specifying which fields to include in a partial response.

Type: string

projectsId (required)#

Type: string

fields#

Selector specifying which fields to include in a partial response.

Type: string

projectsId (required)#

Type: string

$body#

Request message for GetIamPolicy method.

Type: object

{
  "options" : {
    "requestedPolicyVersion" : "Optional. The policy format version to be returned. Valid values are 0, 1, and 3. Requests specifying an invalid value will be rejected. Requests for policies with any conditional bindings must specify version 3. Policies without any conditional bindings may specify any valid value or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies)."
  }
}

fields#

Selector specifying which fields to include in a partial response.

Type: string

tagKeysId (required)#

Type: string

fields#

Selector specifying which fields to include in a partial response.

Type: string

tagKeysId (required)#

Type: string

$body#

Request message for GetIamPolicy method.

Type: object

{
  "options" : {
    "requestedPolicyVersion" : "Optional. The policy format version to be returned. Valid values are 0, 1, and 3. Requests specifying an invalid value will be rejected. Requests for policies with any conditional bindings must specify version 3. Policies without any conditional bindings may specify any valid value or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies)."
  }
}

fields#

Selector specifying which fields to include in a partial response.

Type: string

tagValuesId (required)#

Type: string

fields#

Selector specifying which fields to include in a partial response.

Type: string

tagValuesId (required)#

Type: string

$body#

Request message for GetIamPolicy method.

Type: object

{
  "options" : {
    "requestedPolicyVersion" : "Optional. The policy format version to be returned. Valid values are 0, 1, and 3. Requests specifying an invalid value will be rejected. Requests for policies with any conditional bindings must specify version 3. Policies without any conditional bindings may specify any valid value or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies)."
  }
}

fields#

Selector specifying which fields to include in a partial response.

Type: string

fields#

Selector specifying which fields to include in a partial response.

Type: string

parent#

Required. The resource name of the Organization or Folder whose Folders are being listed. Must be of the form folders/{folder_id} or organizations/{org_id}. Access to this method is controlled by checking the resourcemanager.folders.list permission on the parent.

Type: string

showDeleted#

Optional. Controls whether Folders in the DELETE_REQUESTED state should be returned. Defaults to false.

Type: boolean

fields#

Selector specifying which fields to include in a partial response.

Type: string

parent#

Required. The name of the resource to list all attached Liens. For example, projects/1234. (google.api.field_policy).resource_type annotation is not set since the parent depends on the meta api implementation. This field could be a project or other sub project resources.

Type: string

fields#

Selector specifying which fields to include in a partial response.

Type: string

parent#

Required. The name of the parent resource to list projects under. For example, setting this field to 'folders/1234' would list all projects directly under that folder.

Type: string

showDeleted#

Optional. Indicate that Projects in the DELETE_REQUESTED state should also be returned. Normally only ACTIVE projects are returned.

Type: boolean

fields#

Selector specifying which fields to include in a partial response.

Type: string

parent#

Required. The full resource name of a resource for which you want to list existing TagBindings. E.g. "//cloudresourcemanager.googleapis.com/projects/123"

Type: string

fields#

Selector specifying which fields to include in a partial response.

Type: string

parent#

Required. The resource name of the new TagKey's parent. Must be of the form folders/{folder_id} or organizations/{org_id}.

Type: string

fields#

Selector specifying which fields to include in a partial response.

Type: string

parent#

Required. Resource name for TagKey, parent of the TagValues to be listed, in the format tagKeys/123.

Type: string

foldersId (required)#

Type: string

$body#

The MoveFolder request message.

Type: object

{
  "destinationParent" : "Required. The resource name of the Folder or Organization to reparent the folder under. Must be of the form `folders/{folder_id}` or `organizations/{org_id}`."
}

fields#

Selector specifying which fields to include in a partial response.

Type: string

projectsId (required)#

Type: string

$body#

The request sent to MoveProject method.

Type: object

{
  "destinationParent" : "Required. The new parent to move the Project under."
}

fields#

Selector specifying which fields to include in a partial response.

Type: string

foldersId (required)#

Type: string

$body#

A Folder in an Organization's resource hierarchy, used to organize that Organization's resources.

Type: object

{
  "parent" : "Required. The Folder's parent's resource name. Updates to the folder's parent must be performed via MoveFolder.",
  "deleteTime" : "Output only. Timestamp when the Folder was requested to be deleted.",
  "createTime" : "Output only. Timestamp when the Folder was created.",
  "displayName" : "The folder's display name. A folder's display name must be unique amongst its siblings, e.g. no two folders with the same parent can share the same display name. The display name must start and end with a letter or digit, may contain letters, digits, spaces, hyphens and underscores and can be no longer than 30 characters. This is captured by the regular expression: `[\\p{L}\\p{N}]([\\p{L}\\p{N}_- ]{0,28}[\\p{L}\\p{N}])?`.",
  "name" : "Output only. The resource name of the Folder. Its format is `folders/{folder_id}`, for example: \"folders/1234\".",
  "updateTime" : "Output only. Timestamp when the Folder was last modified.",
  "etag" : "Output only. A checksum computed by the server based on the current value of the Folder resource. This may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.",
  "state" : "Output only. The lifecycle state of the folder. Updates to the state must be performed via DeleteFolder and UndeleteFolder."
}

fields#

Selector specifying which fields to include in a partial response.

Type: string

updateMask#

Required. Fields to be updated. Only the display_name can be updated.

Type: string

projectsId (required)#

Type: string

$body#

A Project is a high-level Google Cloud Platform entity. It is a container for ACLs, APIs, App Engine Apps, VMs, and other Google Cloud Platform resources.

Type: object

{
  "parent" : "Optional. A reference to a parent Resource. eg., `organizations/123` or `folders/876`.",
  "createTime" : "Output only. Creation time.",
  "deleteTime" : "Output only. The time at which this resource was requested for deletion.",
  "displayName" : "Optional. A user-assigned display name of the Project. When present it must be between 4 to 30 characters. Allowed characters are: lowercase and uppercase letters, numbers, hyphen, single-quote, double-quote, space, and exclamation point. Example: `My Project`",
  "name" : "Output only. The unique resource name of the Project. It is an int64 generated number prefixed by \"projects/\". Example: `projects/415104041262`",
  "updateTime" : "Output only. The most recent time this resource was modified.",
  "etag" : "Output only. A checksum computed by the server based on the current value of the Project resource. This may be sent on update and delete requests to ensure the client has an up-to-date value before proceeding.",
  "state" : "Output only. The Project lifecycle state.",
  "projectId" : "Immutable. The unique, user-assigned id of the Project. It must be 6 to 30 lowercase ASCII letters, digits, or hyphens. It must start with a letter. Trailing hyphens are prohibited. Example: `tokyo-rain-123`",
  "labels" : "Optional. The labels associated with this Project. Label keys must be between 1 and 63 characters long and must conform to the following regular expression: \\[a-z\\](\\[-a-z0-9\\]*\\[a-z0-9\\])?. Label values must be between 0 and 63 characters long and must conform to the regular expression (\\[a-z\\](\\[-a-z0-9\\]*\\[a-z0-9\\])?)?. No more than 256 labels can be associated with a given resource. Clients should store labels in a representation such as JSON that does not depend on specific characters being disallowed. Example: `\"myBusinessDimension\" : \"businessValue\"`"
}

fields#

Selector specifying which fields to include in a partial response.

Type: string

updateMask#

Optional. An update mask to selectively update fields.

Type: string

tagKeysId (required)#

Type: string

$body#

A TagKey, used to group a set of TagValues.

Type: object

{
  "parent" : "Immutable. The resource name of the new TagKey's parent. Must be of the form `organizations/{org_id}`.",
  "createTime" : "Output only. Creation time.",
  "name" : "Immutable. The resource name for a TagKey. Must be in the format `tagKeys/{tag_key_id}`, where `tag_key_id` is the generated numeric id for the TagKey.",
  "description" : "Optional. User-assigned description of the TagKey. Must not exceed 256 characters. Read-write.",
  "updateTime" : "Output only. Update time.",
  "etag" : "Optional. Entity tag which users can pass to prevent race conditions. This field is always set in server responses. See UpdateTagKeyRequest for details.",
  "namespacedName" : "Output only. Immutable. Namespaced name of the TagKey.",
  "shortName" : "Required. Immutable. The user friendly name for a TagKey. The short name should be unique for TagKeys within the same tag namespace. The short name must be 1-63 characters, beginning and ending with an alphanumeric character ([a-z0-9A-Z]) with dashes (-), underscores (_), dots (.), and alphanumerics between."
}

fields#

Selector specifying which fields to include in a partial response.

Type: string

updateMask#

Fields to be updated. The mask may only contain description or etag. If omitted entirely, both description and etag are assumed to be significant.

Type: string

validateOnly#

Set as true to perform validations necessary for updating the resource, but not actually perform the action.

Type: boolean

tagValuesId (required)#

Type: string

$body#

A TagValue is a child of a particular TagKey. This is used to group cloud resources for the purpose of controlling them using policies.

Type: object

{
  "parent" : "Immutable. The resource name of the new TagValue's parent TagKey. Must be of the form `tagKeys/{tag_key_id}`.",
  "createTime" : "Output only. Creation time.",
  "name" : "Immutable. Resource name for TagValue in the format `tagValues/456`.",
  "description" : "Optional. User-assigned description of the TagValue. Must not exceed 256 characters. Read-write.",
  "etag" : "Optional. Entity tag which users can pass to prevent race conditions. This field is always set in server responses. See UpdateTagValueRequest for details.",
  "updateTime" : "Output only. Update time.",
  "shortName" : "Required. Immutable. User-assigned short name for TagValue. The short name should be unique for TagValues within the same parent TagKey. The short name must be 63 characters or less, beginning and ending with an alphanumeric character ([a-z0-9A-Z]) with dashes (-), underscores (_), dots (.), and alphanumerics between.",
  "namespacedName" : "Output only. Namespaced name of the TagValue. Must be in the format `{organization_id}/{tag_key_short_name}/{short_name}`."
}

fields#

Selector specifying which fields to include in a partial response.

Type: string

updateMask#

Optional. Fields to be updated.

Type: string

validateOnly#

Optional. True to perform validations necessary for updating the resource, but not actually perform the action.

Type: boolean

fields#

Selector specifying which fields to include in a partial response.

Type: string

query#

Optional. Search criteria used to select the Folders to return. If no search criteria is specified then all accessible folders will be returned. Query expressions can be used to restrict results based upon displayName, state and parent, where the operators = (:) NOT, AND and OR can be used along with the suffix wildcard symbol *. The displayName field in a query expression should use escaped quotes for values that include whitespace to prevent unexpected behavior. | Field | Description | |----------------------|----------------------------------------| | displayName | Filters by displayName. | | parent | Filters by parent (e.g. folders/123). | | state, lifecycleState | Filters by state. | Some example queries are: * Query displayName=Test* returns Folder resources whose display name starts with "Test". * Query state=ACTIVE returns Folder resources with state set to ACTIVE. * Query parent=folders/123 returns Folder resources that have folders/123 as a parent resource. * Query parent=folders/123 AND state=ACTIVE returns active Folder resources that have folders/123 as a parent resource. * Query displayName=\\"Test String\\" returns Folder resources with display names that include both "Test" and "String".

Type: string

fields#

Selector specifying which fields to include in a partial response.

Type: string

query#

Optional. An optional query string used to filter the Organizations to return in the response. Query rules are case-insensitive. | Field | Description | |------------------|--------------------------------------------| | directoryCustomerId, owner.directoryCustomerId | Filters by directory customer id. | | domain | Filters by domain. | Organizations may be queried by directoryCustomerId or by domain, where the domain is a G Suite domain, for example: * Query directorycustomerid:123456789 returns Organization resources with owner.directory_customer_id equal to 123456789. * Query domain:google.com returns Organization resources corresponding to the domain google.com.

Type: string

fields#

Selector specifying which fields to include in a partial response.

Type: string

query#

Optional. A query string for searching for projects that the caller has resourcemanager.projects.get permission to. If multiple fields are included in the query, the it will return results that match any of the fields. Some eligible fields are: | Field | Description | |-------------------------|----------------------------------------------| | displayName, name | Filters by displayName. | | parent.type | Parent's type: folder or organization. | | parent.id | Parent's id number (e.g. 123) | | parent | Project's parent. (e.g. folders/123, organizations/) Prefer parent field over parent.id and parent.type. | | id, projectId | Filters by projectId. | | state, lifecycleState | Filters by state. | | labels | Filters by label name or value. | | labels. (where key is the name of a label) | Filters by label name. | Search expressions are case insensitive. Some examples queries: | Query | Description | |------------------|-----------------------------------------------------| | name:how | The project's name starts with "how". | | name:Howl | The project's name is Howl or howl. | | name:HOWL | Equivalent to above. | | NAME:howl | Equivalent to above. | | labels.color:* | The project has the label color. | | labels.color:red | The project's label color has the value red. | | labels.color:red labels.size:big | The project's label color has the value red and its label size has the value big. | If no query is specified, the call will return projects for which the user has the resourcemanager.projects.get permission.

Type: string

foldersId (required)#

Type: string

$body#

Request message for SetIamPolicy method.

Type: object

{
  "updateMask" : "OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only the fields in the mask will be modified. If no mask is provided, the following default mask is used: `paths: \"bindings, etag\"`",
  "policy" : {
    "bindings" : [ {
      "condition" : {
        "expression" : "Textual representation of an expression in Common Expression Language syntax.",
        "description" : "Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.",
        "location" : "Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.",
        "title" : "Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression."
      },
      "role" : "Role that is assigned to `members`. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.",
      "members" : [ "string" ]
    } ],
    "etag" : "`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.",
    "version" : "Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).",
    "auditConfigs" : [ {
      "auditLogConfigs" : [ {
        "logType" : "The log type that this config enables.",
        "exemptedMembers" : [ "string" ]
      } ],
      "service" : "Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services."
    } ]
  }
}

fields#

Selector specifying which fields to include in a partial response.

Type: string

organizationsId (required)#

Type: string

$body#

Request message for SetIamPolicy method.

Type: object

{
  "updateMask" : "OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only the fields in the mask will be modified. If no mask is provided, the following default mask is used: `paths: \"bindings, etag\"`",
  "policy" : {
    "bindings" : [ {
      "condition" : {
        "expression" : "Textual representation of an expression in Common Expression Language syntax.",
        "description" : "Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.",
        "location" : "Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.",
        "title" : "Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression."
      },
      "role" : "Role that is assigned to `members`. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.",
      "members" : [ "string" ]
    } ],
    "etag" : "`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.",
    "version" : "Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).",
    "auditConfigs" : [ {
      "auditLogConfigs" : [ {
        "logType" : "The log type that this config enables.",
        "exemptedMembers" : [ "string" ]
      } ],
      "service" : "Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services."
    } ]
  }
}

fields#

Selector specifying which fields to include in a partial response.

Type: string

projectsId (required)#

Type: string

$body#

Request message for SetIamPolicy method.

Type: object

{
  "updateMask" : "OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only the fields in the mask will be modified. If no mask is provided, the following default mask is used: `paths: \"bindings, etag\"`",
  "policy" : {
    "bindings" : [ {
      "condition" : {
        "expression" : "Textual representation of an expression in Common Expression Language syntax.",
        "description" : "Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.",
        "location" : "Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.",
        "title" : "Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression."
      },
      "role" : "Role that is assigned to `members`. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.",
      "members" : [ "string" ]
    } ],
    "etag" : "`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.",
    "version" : "Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).",
    "auditConfigs" : [ {
      "auditLogConfigs" : [ {
        "logType" : "The log type that this config enables.",
        "exemptedMembers" : [ "string" ]
      } ],
      "service" : "Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services."
    } ]
  }
}

fields#

Selector specifying which fields to include in a partial response.

Type: string

tagKeysId (required)#

Type: string

$body#

Request message for SetIamPolicy method.

Type: object

{
  "updateMask" : "OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only the fields in the mask will be modified. If no mask is provided, the following default mask is used: `paths: \"bindings, etag\"`",
  "policy" : {
    "bindings" : [ {
      "condition" : {
        "expression" : "Textual representation of an expression in Common Expression Language syntax.",
        "description" : "Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.",
        "location" : "Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.",
        "title" : "Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression."
      },
      "role" : "Role that is assigned to `members`. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.",
      "members" : [ "string" ]
    } ],
    "etag" : "`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.",
    "version" : "Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).",
    "auditConfigs" : [ {
      "auditLogConfigs" : [ {
        "logType" : "The log type that this config enables.",
        "exemptedMembers" : [ "string" ]
      } ],
      "service" : "Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services."
    } ]
  }
}

fields#

Selector specifying which fields to include in a partial response.

Type: string

tagValuesId (required)#

Type: string

$body#

Request message for SetIamPolicy method.

Type: object

{
  "updateMask" : "OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only the fields in the mask will be modified. If no mask is provided, the following default mask is used: `paths: \"bindings, etag\"`",
  "policy" : {
    "bindings" : [ {
      "condition" : {
        "expression" : "Textual representation of an expression in Common Expression Language syntax.",
        "description" : "Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.",
        "location" : "Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.",
        "title" : "Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression."
      },
      "role" : "Role that is assigned to `members`. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.",
      "members" : [ "string" ]
    } ],
    "etag" : "`etag` is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the `etag` in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An `etag` is returned in the response to `getIamPolicy`, and systems are expected to put that etag in the request to `setIamPolicy` to ensure that their change will be applied to the same version of the policy. **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost.",
    "version" : "Specifies the format of the policy. Valid values are `0`, `1`, and `3`. Requests that specify an invalid value are rejected. Any operation that affects conditional role bindings must specify version `3`. This requirement applies to the following operations: * Getting a policy that includes a conditional role binding * Adding a conditional role binding to a policy * Changing a conditional role binding in a policy * Removing any role binding, with or without a condition, from a policy that includes conditions **Important:** If you use IAM Conditions, you must include the `etag` field whenever you call `setIamPolicy`. If you omit this field, then IAM allows you to overwrite a version `3` policy with a version `1` policy, and all of the conditions in the version `3` policy are lost. If a policy does not include any conditions, operations on that policy may specify any valid version or leave the field unset. To learn which resources support conditions in their IAM policies, see the [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).",
    "auditConfigs" : [ {
      "auditLogConfigs" : [ {
        "logType" : "The log type that this config enables.",
        "exemptedMembers" : [ "string" ]
      } ],
      "service" : "Specifies a service that will be enabled for audit logging. For example, `storage.googleapis.com`, `cloudsql.googleapis.com`. `allServices` is a special value that covers all services."
    } ]
  }
}

fields#

Selector specifying which fields to include in a partial response.

Type: string

foldersId (required)#

Type: string

$body#

Request message for TestIamPermissions method.

Type: object

{
  "permissions" : [ "string" ]
}

fields#

Selector specifying which fields to include in a partial response.

Type: string

organizationsId (required)#

Type: string

$body#

Request message for TestIamPermissions method.

Type: object

{
  "permissions" : [ "string" ]
}

fields#

Selector specifying which fields to include in a partial response.

Type: string

projectsId (required)#

Type: string

$body#

Request message for TestIamPermissions method.

Type: object

{
  "permissions" : [ "string" ]
}

fields#

Selector specifying which fields to include in a partial response.

Type: string

tagKeysId (required)#

Type: string

$body#

Request message for TestIamPermissions method.

Type: object

{
  "permissions" : [ "string" ]
}

fields#

Selector specifying which fields to include in a partial response.

Type: string

tagValuesId (required)#

Type: string

$body#

Request message for TestIamPermissions method.

Type: object

{
  "permissions" : [ "string" ]
}

fields#

Selector specifying which fields to include in a partial response.

Type: string

foldersId (required)#

Type: string

$body#

The UndeleteFolder request message.

Type: object

{ }

fields#

Selector specifying which fields to include in a partial response.

Type: string

projectsId (required)#

Type: string

$body#

The request sent to the UndeleteProject method.

Type: object

{ }

fields#

Selector specifying which fields to include in a partial response.

Type: string