Console

To disable Cloud Logging for the Cloud Healthcare API:

1. Sign in to the Google Cloud console as a Google Workspace or Cloud Identitysuper administrator and go to theOrganization policies page:

   Go to Organization policies

2. ClickSelect, and then select the project, folder, or organizationfor which you want to view organization policies. TheOrganization policies page displays a filterable list of organizationpolicy constraints that are available.

3. In the list of policies that appears, selectDisable Cloud Logging for Cloud Healthcare API. TheDisable Cloud Logging for Cloud Healthcare API policy uses theconstraints/gcp.disableCloudLogging ID. ThePolicy details pagethat appears describes the constraint and provides information about howthe constraint is applied.

4. To update the organization policy, clickManage policy.

5. On theEdit policy page, selectOverride parent's policy.

6. ClickAdd a rule.

7. UnderEnforcement, select an enforcement option:

   • To enable the constraint and disable Cloud Logging for theCloud Healthcare API, selectOn.
   • To disable the constraint and enable Cloud Logging for theCloud Healthcare API, selectOff.

8. To enforce the policy, clickSet policy.

gcloud

1. Get the current policy on the organization resource using thedescribecommand:

   gcloudorg-policiesdescribegcp.disableCloudLogging\--organization=ORGANIZATION_ID

   Replace theORGANIZATION_ID:with the unique identifier for the organization resource. You can alsoapply the organization policy to a folder or a project with the--folderor the--project flags, and thefolder IDandproject ID,respectively.

   Because a policy isn't set, this returns aNOT_FOUND error:

   ERROR:(gcloud.org-policies.describe)NOT_FOUND:Requestedentitywasnotfound.

2. Set the policy on the organization using theset-policy command.

   1. Create a temporary file/tmp/policy.yaml to store the policy:

      name:organizations/ORGANIZATION_ID/policies/gcp.disableCloudLoggingspec:rules:-enforce:true

   2. Run theset-policy command:

      gcloudorg-policiesset-policy/tmp/policy.yaml

3. View the current effective policy using thedescribe --effective command:

   gcloudorg-policiesdescribe\gcp.disableCloudLogging--effective\--organization=ORGANIZATION_ID

   After running the command, the following output displays:

   name:organizations/ORGANIZATION_ID/policies/gcp.disableCloudLoggingspec:rules:-enforce:true