The Managed Service for Microsoft Active Directory API is used for managing a highly available, hardened service running Microsoft Active Directory (AD).

Request message for AttachTrust

Represents a Managed Microsoft Identities backup.

Associates members, or principals, with a role.

The request message for Operations.CancelOperation.

Certificate used to configure LDAPS.

CheckMigrationPermissionRequest is the request message for CheckMigrationPermission method.

CheckMigrationPermissionResponse is the response message for CheckMigrationPermission method.

Defines the root interface for all clients that generate credentials for calling Google APIs. All clients should implement this interface.

Time window specified for daily operations.

Represents a whole or partial calendar date, such as a birthday. The time of day and time zone are either specified elsewhere or are insignificant. The date is relative to the Gregorian Calendar. This can represent one of the following: * A full date, with non-zero year, month, and day values. * A month and day, with a zero year (for example, an anniversary). * A year on its own, with a zero month and a zero day. * A year and month, with a zero day (for example, a credit card expiration date). Related types: * google.type.TimeOfDay * google.type.DateTime * google.protobuf.Timestamp

DenyMaintenancePeriod definition. Maintenance is forbidden within the deny period. The start_date must be less than the end_date.

Request message for DetachTrust

DisableMigrationRequest is the request message for DisableMigration method.

Represents a managed Microsoft Active Directory domain. If the domain is being changed, it will be placed into the UPDATING state, which indicates that the resource is being reconciled. At this point, Get will reflect an intermediate state.

DomainJoinMachineRequest is the request message for DomainJoinMachine method

DomainJoinMachineResponse is the response message for DomainJoinMachine method

A generic empty message that you can re-use to avoid defining duplicated empty messages in your APIs. A typical example is to use it as the request or the response type of an API method. For instance: service Foo { rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty); }

EnableMigrationRequest is the request message for EnableMigration method.

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

ExtendSchemaRequest is the request message for ExtendSchema method.

Represents the metadata of the long-running operation.

Represents the metadata of the long-running operation.

Represents the metadata of the long-running operation.

Instance represents the interface for SLM services to actuate the state of control plane resources. Example Instance in JSON, where consumer-project-number=123456, producer-project-id=cloud-sql: json Instance: { "name": "projects/123456/locations/us-east1/instances/prod-instance", "create_time": { "seconds": 1526406431, }, "labels": { "env": "prod", "foo": "bar" }, "state": READY, "software_versions": { "software_update": "cloud-sql-09-28-2018", }, "maintenance_policy_names": { "UpdatePolicy": "projects/123456/locations/us-east1/maintenancePolicies/prod-update-policy", } "tenant_project_id": "cloud-sql-test-tenant", "producer_metadata": { "cloud-sql-tier": "basic", "cloud-sql-instance-size": "1G", }, "provisioned_resources": [ { "resource-type": "compute-instance", "resource-url": "https://www.googleapis.com/compute/v1/projects/cloud-sql/zones/us-east1-b/instances/vm-1", } ], "maintenance_schedules": { "csa_rollout": { "start_time": { "seconds": 1526406431, }, "end_time": { "seconds": 1535406431, }, }, "ncsa_rollout": { "start_time": { "seconds": 1526406431, }, "end_time": { "seconds": 1535406431, }, } }, "consumer_defined_name": "my-sql-instance1", } LINT.IfChange

Maintenance schedule which is exposed to customer and potentially end user, indicating published upcoming future maintenance schedule

Maintenance settings associated with instance. Allows service producers and end users to assign settings that controls maintenance on this instance.

Node information for custom per-node SLO implementations. SSA does not support per-node SLO, but producers can populate per-node information in SloMetadata for custom precomputations. SSA Eligibility Exporter will emit per-node metric based on this information.

Contains notification related data.

PerSliSloEligibility is a mapping from an SLI name to eligibility.

Describes provisioned dataplane resources.

SloEligibility is a tuple containing eligibility value: true if an instance is eligible for SLO calculation or false if it should be excluded from all SLO-related calculations along with a user-defined reason.

SloMetadata contains resources required for proper SLO classification of the instance.

LDAPSSettings represents the ldaps settings for domain resource. LDAP is the Lightweight Directory Access Protocol, defined in https://tools.ietf.org/html/rfc4511. The settings object configures LDAP over SSL/TLS, whether it is over port 636 or the StartTLS operation. If LDAPSSettings is being changed, it will be placed into the UPDATING state, which indicates that the resource is being reconciled. At this point, Get will reflect an intermediate state.

ListBackupsResponse is the response message for ListBackups method.

Response message for ListDomains

The response message for Locations.ListLocations.

The response message for Operations.ListOperations.

ListPeeringsResponse is the response message for ListPeerings method.

ListSqlIntegrationsResponse is the response message for ListSqlIntegrations method.

A resource that represents a Google Cloud location.

LINT.IfChange Defines policies to service maintenance events.

MaintenanceWindow definition.

OnPremDomainDetails is the message which contains details of on-prem domain which is trusted and needs to be migrated.

OnPremDomainDetails is the message which contains details of on-prem domain which is trusted and needs to be migrated.

This resource represents a long-running operation that is the result of a network API call.

Represents the metadata of the long-running operation.

Represents a Managed Service for Microsoft Active Directory Peering.

An Identity and Access Management (IAM) policy, which specifies access controls for Google Cloud resources. A Policy is a collection of bindings. A binding binds one or more members, or principals, to a single role. Principals can be user accounts, service accounts, Google groups, and domains (such as G Suite). A role is a named list of permissions; each role can be an IAM predefined role or a user-created custom role. For some types of Google Cloud resources, a binding can also specify a condition, which is a logical expression that allows access to a resource only if the expression evaluates to true. A condition can add constraints based on attributes of the request, the resource, or both. To learn which resources support conditions in their IAM policies, see the IAM documentation. JSON example: { "bindings": [ { "role": "roles/resourcemanager.organizationAdmin", "members": [ "user:mike@example.com", "group:admins@example.com", "domain:google.com", "serviceAccount:my-project-id@appspot.gserviceaccount.com" ] }, { "role": "roles/resourcemanager.organizationViewer", "members": [ "user:eve@example.com" ], "condition": { "title": "expirable access", "description": "Does not grant access after Sep 2020", "expression": "request.time < timestamp('2020-10-01T00:00:00.000Z')", } } ], "etag": "BwWWja0YfJA=", "version": 3 } YAML example: ``` bindings: - members:

• user:mike@example.com - group:admins@example.com - domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.com role: roles/resourcemanager.organizationViewer condition: title: expirable access description: Does not grant access after Sep 2020 expression: request.time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3 ``` For a description of IAM and its features, see the IAM documentation.

Additional options for Managedidentities#projectsLocationsGlobalDomainsBackupsCreate.

Additional options for Managedidentities#projectsLocationsGlobalDomainsBackupsGetIamPolicy.

Additional options for Managedidentities#projectsLocationsGlobalDomainsBackupsList.

Additional options for Managedidentities#projectsLocationsGlobalDomainsBackupsPatch.

Additional options for Managedidentities#projectsLocationsGlobalDomainsCreate.

Additional options for Managedidentities#projectsLocationsGlobalDomainsGetIamPolicy.

Additional options for Managedidentities#projectsLocationsGlobalDomainsList.

Additional options for Managedidentities#projectsLocationsGlobalDomainsPatch.

Additional options for Managedidentities#projectsLocationsGlobalDomainsSqlIntegrationsList.

Additional options for Managedidentities#projectsLocationsGlobalDomainsUpdateLdapssettings.

Additional options for Managedidentities#projectsLocationsGlobalOperationsList.

Additional options for Managedidentities#projectsLocationsGlobalPeeringsCreate.

Additional options for Managedidentities#projectsLocationsGlobalPeeringsGetIamPolicy.

Additional options for Managedidentities#projectsLocationsGlobalPeeringsList.

Additional options for Managedidentities#projectsLocationsGlobalPeeringsPatch.

Additional options for Managedidentities#projectsLocationsList.

Request message for ReconfigureTrust

Request message for ResetAdminPassword

Response message for ResetAdminPassword

RestoreDomainRequest is the request received by RestoreDomain rpc

Configure the schedule.

Request message for SetIamPolicy method.

Represents the SQL instance integrated with Managed AD.

The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide.

Request message for TestIamPermissions method.

Response message for TestIamPermissions method.

Represents a time of day. The date and time zone are either not significant or are specified elsewhere. An API may choose to allow leap seconds. Related types are google.type.Date and google.protobuf.Timestamp.

Represents a relationship between two domains. This allows a controller in one domain to authenticate a user in another domain. If the trust is being changed, it will be placed into the UPDATING state, which indicates that the resource is being reconciled. At this point, Get will reflect an intermediate state.

Maintenance policy applicable to instance updates.

Request message for ValidateTrust

Time window specified for weekly operations.