API for provisioning and managing identity resources.

LRO response metadata for InboundSamlSsoProfilesService.AddIdpCredential.

The request for creating an IdpCredential with its associated payload. An InboundSamlSsoProfile can own up to 2 credentials.

Request to cancel sent invitation for target email in UserInvitation.

The response message for MembershipsService.CheckTransitiveMembership.

Metadata for CreateGroup LRO.

LRO response metadata for InboundSamlSsoProfilesService.CreateInboundSamlSsoProfile.

LRO response metadata for InboundSsoAssignmentsService.CreateInboundSsoAssignment.

Metadata for CreateMembership LRO.

Defines the root interface for all clients that generate credentials for calling Google APIs. All clients should implement this interface.

Additional options for CloudIdentity#customersUserinvitationsList.

Metadata for DeleteGroup LRO.

LRO response metadata for InboundSamlSsoProfilesService.DeleteIdpCredential.

LRO response metadata for InboundSamlSsoProfilesService.DeleteInboundSamlSsoProfile.

LRO response metadata for InboundSsoAssignmentsService.DeleteInboundSsoAssignment.

Metadata for DeleteMembership LRO.

Additional options for CloudIdentity#devicesCreate.

Additional options for CloudIdentity#devicesDelete.

Additional options for CloudIdentity#devicesDeviceUsersClientStatesGet.

Additional options for CloudIdentity#devicesDeviceUsersClientStatesList.

Additional options for CloudIdentity#devicesDeviceUsersClientStatesPatch.

Additional options for CloudIdentity#devicesDeviceUsersDelete.

Additional options for CloudIdentity#devicesDeviceUsersGet.

Additional options for CloudIdentity#devicesDeviceUsersList.

Additional options for CloudIdentity#devicesDeviceUsersLookup.

Additional options for CloudIdentity#devicesGet.

Additional options for CloudIdentity#devicesList.

Information of a DSA public key.

Dynamic group metadata like queries and status.

Defines a query on a resource.

The current status of a dynamic group along with timestamp.

A unique identifier for an entity in the Cloud Identity Groups API. An entity can represent either a group with an optional namespace or a user without a namespace. The combination of id and namespace must be unique; however, the same id can be used with different namespaces.

The MembershipRole expiry details.

Metadata of GetMembershipGraphResponse LRO. This is currently empty to permit future extensibility.

The response message for MembershipsService.GetMembershipGraph.

Resource representing the Android specific attributes of a Device.

Metadata for ApproveDeviceUser LRO.

Request message for approving the device to access user data.

Response message for approving the device to access user data.

Metadata for BlockDeviceUser LRO.

Request message for blocking account on device.

Response message for blocking the device from accessing user data.

Contains information about browser profiles reported by the Endpoint Verification extension.

Browser-specific fields reported by the Endpoint Verification extension. LINT.IfChange

Metadata for CancelWipeDevice LRO.

Request message for cancelling an unfinished device wipe.

Response message for cancelling an unfinished device wipe.

Metadata for CancelWipeDeviceUser LRO.

Request message for cancelling an unfinished user account wipe.

Response message for cancelling an unfinished user account wipe.

Stores information about a certificate.

CertificateTemplate (v3 Extension in X.509).

Represents the state associated with an API client calling the Devices API. Resource representing ClientState and supports updates from API users

Metadata for CreateDevice LRO.

Additional custom attribute values may be one of these types

Metadata for DeleteDevice LRO.

Metadata for DeleteDeviceUser LRO.

A Device within the Cloud Identity Devices API. Represents a Device known to Google Cloud, independent of the device ownership, type, and whether it is assigned or in use by a user.

Represents a user's use of a Device in the Cloud Identity Devices API. A DeviceUser is a resource representing a user's use of a Device

Resource representing the Endpoint Verification-specific attributes of a device.

Response message that is returned in ListClientStates.

Response message that is returned from the ListDevices method.

Response message that is returned from the ListDeviceUsers method.

Metadata for ListEndpointApps LRO.

Response containing resource names of the DeviceUsers associated with the caller's credentials.

Metadata for SignoutDeviceUser LRO.

Metadata for UpdateClientState LRO.

Metadata for UpdateDevice LRO.

Metadata for WipeDevice LRO.

Request message for wiping all data on the device.

Response message for wiping all data on the device.

Metadata for WipeDeviceUser LRO.

Request message for starting an account wipe on device.

Response message for wiping the user's account from the device.

A group within the Cloud Identity Groups API. A Group is a collection of entities, where each entity is either a user, another group, or a service account.

Message representing a transitive group of a user or a group.

Additional options for CloudIdentity#groupsCreate.

Additional options for CloudIdentity#groupsGetSecuritySettings.

Additional options for CloudIdentity#groupsList.

Additional options for CloudIdentity#groupsLookup.

Additional options for CloudIdentity#groupsMembershipsCheckTransitiveMembership.

Additional options for CloudIdentity#groupsMembershipsGetMembershipGraph.

Additional options for CloudIdentity#groupsMembershipsList.

Additional options for CloudIdentity#groupsMembershipsLookup.

Additional options for CloudIdentity#groupsMembershipsSearchDirectGroups.

Additional options for CloudIdentity#groupsMembershipsSearchTransitiveGroups.

Additional options for CloudIdentity#groupsMembershipsSearchTransitiveMemberships.

Additional options for CloudIdentity#groupsPatch.

Additional options for CloudIdentity#groupsSearch.

Additional options for CloudIdentity#groupsUpdateSecuritySettings.

Credential for verifying signatures produced by the Identity Provider.

A SAML 2.0 federation between a Google enterprise customer and a SAML identity provider.

Additional options for CloudIdentity#inboundSamlSsoProfilesIdpCredentialsList.

Additional options for CloudIdentity#inboundSamlSsoProfilesList.

Additional options for CloudIdentity#inboundSamlSsoProfilesPatch.

Targets with "set" SSO assignments and their respective assignments.

Additional options for CloudIdentity#inboundSsoAssignmentsList.

Additional options for CloudIdentity#inboundSsoAssignmentsPatch.

Response for IsInvitableUser RPC.

Response message for ListGroups operation.

Response of the InboundSamlSsoProfilesService.ListIdpCredentials method.

Response of the InboundSamlSsoProfilesService.ListInboundSamlSsoProfiles method.

Response of the InboundSsoAssignmentsService.ListInboundSsoAssignments method.

The response message for MembershipsService.ListMemberships.

Response message for UserInvitation listing request.

The response message for GroupsService.LookupGroupName.

The response message for MembershipsService.LookupMembershipName.

Message representing a transitive membership of a group.

The definition of MemberRestriction

A membership within the Cloud Identity Groups API. A Membership defines a relationship between a Group and an entity belonging to that Group, referred to as a "member".

Membership graph's path information as an adjacency list.

Message containing membership relation.

A membership role within the Cloud Identity Groups API. A MembershipRole defines the privileges granted to a Membership.

The evaluated state of this restriction.

The request message for MembershipsService.ModifyMembershipRoles.

The response message for MembershipsService.ModifyMembershipRoles.

This resource represents a long-running operation that is the result of a network API call.

The evaluated state of this restriction.

Evaluations of restrictions applied to parent group on this membership.

Information of a RSA public key.

SAML IDP (identity provider) configuration.

SAML SP (service provider) configuration.

Details that are applicable when sso_mode == SAML_SSO.

The response message for MembershipsService.SearchDirectGroups.

The response message for GroupsService.SearchGroups.

The response message for MembershipsService.SearchTransitiveGroups.

The response message for MembershipsService.SearchTransitiveMemberships.

The definition of security settings.

A request to send email for inviting target user corresponding to the UserInvitation.

Controls sign-in behavior.

The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide.

Message representing the role of a TransitiveMembership.

Metadata for UpdateGroup LRO.

LRO response metadata for InboundSamlSsoProfilesService.UpdateInboundSamlSsoProfile.

LRO response metadata for InboundSsoAssignmentsService.UpdateInboundSsoAssignment.

Metadata for UpdateMembership LRO.

The details of an update to a MembershipRole.

The UserInvitation resource represents an email that can be sent to an unmanaged user account inviting them to join the customer's Google Workspace or Cloud Identity account. An unmanaged account shares an email address domain with the Google Workspace or Cloud Identity account but is not managed by it yet. If the user accepts the UserInvitation, the user account will become managed.