Manages identity and access control for Google Cloud resources, including the creation of service accounts, which you can use to authenticate to Google and make API calls. Enabling this API also enables the IAM Service Account Credentials API (iamcredentials.googleapis.com). However, disabling this API doesn't disable the IAM Service Account Credentials API.

Operation metadata returned by the CLH during resource state reconciliation.

Defines the root interface for all clients that generate credentials for calling Google APIs. All clients should implement this interface.

Represents the metadata of the long-running operation.

Audit log information specific to Cloud IAM admin APIs. This message is serialized as an Any type in the ServiceData message of an AuditLog message.

A PermissionDelta message to record the added_permissions and removed_permissions inside a role.

Metadata for long-running WorkloadIdentityPool operations.

One delta entry for Binding. Each individual change (only one member in each entry) to a binding will be a separate entry.

Audit log information specific to Cloud IAM. This message is serialized as an Any type in the ServiceData message of an AuditLog message.

The difference delta between two policies.

A deny rule in an IAM deny policy.

Response message for ListPolicies.

Data for an IAM policy.

Metadata for long-running Policy operations.

A single rule in a Policy.

This resource represents a long-running operation that is the result of a network API call.

The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide.

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

Additional options for iam#policiesCreatePolicy.

Additional options for iam#policiesDelete.

Additional options for iam#policiesListPolicies.