IAM Policy Troubleshooter service.

This service helps you troubleshoot access issues for GoogleCloud resources.

IAM Policy Troubleshooter service.

This service helps you troubleshoot access issues for GoogleCloud resources.

Whether a principal has a permission for a resource.

Information about the principal, resource, and permission tocheck.

Details about how a binding in a policy affects a principal'sability to use a permission.

Details about whether the binding includes the principal.

Whether the binding includes the principal.

    - A principal is included directly if that principal is      listed in the binding.    - A principal is included indirectly if that principal is in      a Google group or Google Workspace domain that is listed      in the binding.MEMBERSHIP_NOT_INCLUDED (2):    The binding does not include the principal.MEMBERSHIP_UNKNOWN_INFO_DENIED (3):    The sender of the request is not allowed to    access the binding.MEMBERSHIP_UNKNOWN_UNSUPPORTED (4):    The principal is an unsupported type. Only    Google Accounts and service accounts are    supported.

The abstract base class for a message.

Whether a role includes a specific permission.

Details about how a specific IAMPolicy][google.iam.v1.Policy]contributed to the access check.

The extent to which a single data point, such as theexistence of a binding or whether a binding includes a specificprincipal, contributes to an overall determination.

Request forTroubleshootIamPolicy.

Response forTroubleshootIamPolicy.