PolicyDelegationSettings
import type { PolicyDelegationSettings } from "https://googleapis.deno.dev/v1/iap:v1.ts";
PolicyDelegationConfig allows google-internal teams to use IAP for apps hosted in a tenant project. Using these settings, the app can delegate permission check to happen against the linked customer project. This is only ever supposed to be used by google internal teams, hence the restriction on the proto.
interface PolicyDelegationSettings {
iamPermission?: string;
iamServiceName?: string;
policyName?: PolicyName;
resource?: Resource;
}§Properties
§
iamServiceName?: string
[src]The DNS name of the service (e.g. "resourcemanager.googleapis.com"). This should be the domain name part of the full resource names (see https://aip.dev/122#full-resource-names), which is usually the same as IamServiceSpec.service of the service where the resource type is defined.
§
policyName?: PolicyName
[src]Policy name to be checked