PrivilegedAccess

Privileged access that this service can be used to gate.

JSON representation
{// Union fieldaccess_type can be only one of the following:"gcpIamAccess":{object (GcpIamAccess)}// End of list of possible types for union fieldaccess_type.}
Fields

Union fieldaccess_type.

access_type can be only one of the following:

gcpIamAccess

object (GcpIamAccess)

Access to a Google Cloud resource through IAM.

GcpIamAccess

GcpIamAccess represents IAM based access control on a Google Cloud resource. Refer tohttps://cloud.google.com/iam/docs to understand more about IAM.

JSON representation
{"resourceType":string,"resource":string,"roleBindings":[{object (RoleBinding)}]}
Fields
resourceType

string

Required. The type of this resource.

resource

string

Required. Name of the resource.

roleBindings[]

object (RoleBinding)

Required. Role bindings that are created on successful grant.

RoleBinding

IAM role bindings that are created after a successful grant.

JSON representation
{"role":string,"conditionExpression":string,"id":string}
Fields
role

string

Required. IAM role to be granted.https://cloud.google.com/iam/docs/roles-overview.

conditionExpression

string

Optional. The expression field of the IAM condition to be associated with the role. If specified, a user with an active grant for this entitlement is able to access the resource only if this condition evaluates to true for their request.

This field uses the same CEL format as IAM and supports all attributes that IAM supports, except tags.https://cloud.google.com/iam/docs/conditions-overview#attributes.

id

string

Output only. The ID corresponding to this role binding in the policy binding. This will be unique within an entitlement across time. Gets re-generated each time the entitlement is updated.

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-09-26 UTC.