Blame - docs/dyn/bigtableadmin_v2.projects.instances.tables.html - platform/external/python/google-api-python-client

2020-05-01 07:42:23 -0700

[diff] [blame]

78

<code><a href="#checkConsistency">checkConsistency(name, body=None, x__xgafv=None)</a></code></p>

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

79

<p class="firstline">Checks replication consistency based on a consistency token, that is, if</p>

80

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

81

<code><a href="#create">create(parent, body=None, x__xgafv=None)</a></code></p>

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

82

<p class="firstline">Creates a new table in the specified instance.</p>

83

84

<code><a href="#delete">delete(name, x__xgafv=None)</a></code></p>

85

<p class="firstline">Permanently deletes a specified table and all of its data.</p>

86

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

87

<code><a href="#dropRowRange">dropRowRange(name, body=None, x__xgafv=None)</a></code></p>

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

88

<p class="firstline">Permanently drop/delete a row range from a specified table. The request can</p>

89

90

<code><a href="#generateConsistencyToken">generateConsistencyToken(name, body=None, x__xgafv=None)</a></code></p>

91

<p class="firstline">Generates a consistency token for a Table, which can be used in</p>

92

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

93

<code><a href="#get">get(name, view=None, x__xgafv=None)</a></code></p>

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

94

<p class="firstline">Gets metadata information about the specified table.</p>

95

96

<code><a href="#getIamPolicy">getIamPolicy(resource, body=None, x__xgafv=None)</a></code></p>

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

97

<p class="firstline">Gets the access control policy for a Table resource.</p>

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

98

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

99

<code><a href="#list">list(parent, pageToken=None, pageSize=None, view=None, x__xgafv=None)</a></code></p>

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

100

<p class="firstline">Lists all tables served from a specified instance.</p>

101

102

<code><a href="#list_next">list_next(previous_request, previous_response)</a></code></p>

103

<p class="firstline">Retrieves the next page of results.</p>

104

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

105

<code><a href="#modifyColumnFamilies">modifyColumnFamilies(name, body=None, x__xgafv=None)</a></code></p>

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

106

<p class="firstline">Performs a series of column family modifications on the specified table.</p>

107

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

108

<code><a href="#setIamPolicy">setIamPolicy(resource, body=None, x__xgafv=None)</a></code></p>

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

109

<p class="firstline">Sets the access control policy on a Table resource.</p>

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

110

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

111

<code><a href="#testIamPermissions">testIamPermissions(resource, body=None, x__xgafv=None)</a></code></p>

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

112

<p class="firstline">Returns permissions that the caller has on the specified table resource.</p>

113

<h3>Method Details</h3>

114

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

115

<code class="details" id="checkConsistency">checkConsistency(name, body=None, x__xgafv=None)</code>

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

116

<pre>Checks replication consistency based on a consistency token, that is, if

117

replication has caught up based on the conditions specified in the token

118

and the check request.

119

120

Args:

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

121

name: string, Required. The unique name of the Table for which to check replication consistency.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

122

Values are of the form

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

123

`projects/{project}/instances/{instance}/tables/{table}`. (required)

124

body: object, The request body.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

125

The object takes the form of:

126

127

{ # Request message for

128

# google.bigtable.admin.v2.BigtableTableAdmin.CheckConsistency

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

129

"consistencyToken": "A String", # Required. The token created using GenerateConsistencyToken for the Table.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

130

}

131

132

x__xgafv: string, V1 error format.

Allowed values

1 - v1 error format

2 - v2 error format

Returns:

An object of the form:

139

140

{ # Response message for

141

# google.bigtable.admin.v2.BigtableTableAdmin.CheckConsistency

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

142

"consistent": True or False, # True only if the token is consistent. A token is consistent if replication

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

143

# has caught up with the restrictions specified in the request.

}</pre>

</div>

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

148

<code class="details" id="create">create(parent, body=None, x__xgafv=None)</code>

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

149

<pre>Creates a new table in the specified instance.

150

The table can be created with a full set of initial column families,

151

specified in the request.

152

153

Args:

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

154

parent: string, Required. The unique name of the instance in which to create the table.

155

Values are of the form `projects/{project}/instances/{instance}`. (required)

156

body: object, The request body.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

157

The object takes the form of:

158

159

{ # Request message for

160

# google.bigtable.admin.v2.BigtableTableAdmin.CreateTable

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

161

"tableId": "A String", # Required. The name by which the new table should be referred to within the parent

162

# instance, e.g., `foobar` rather than `{parent}/tables/foobar`.

163

# Maximum 50 characters.

164

"initialSplits": [ # The optional list of row keys that will be used to initially split the

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

165

# table into several tablets (tablets are similar to HBase regions).

166

# Given two split keys, `s1` and `s2`, three tablets will be created,

167

# spanning the key ranges: `[, s1), [s1, s2), [s2, )`.

168

#

169

# Example:

170

#

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

171

# * Row keys := `["a", "apple", "custom", "customer_1", "customer_2",`

172

# `"other", "zz"]`

173

# * initial_split_keys := `["apple", "customer_1", "customer_2", "other"]`

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

174

# * Key assignment:

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

175

# - Tablet 1 `[, apple) => {"a"}.`

176

# - Tablet 2 `[apple, customer_1) => {"apple", "custom"}.`

177

# - Tablet 3 `[customer_1, customer_2) => {"customer_1"}.`

178

# - Tablet 4 `[customer_2, other) => {"customer_2"}.`

179

# - Tablet 5 `[other, ) => {"other", "zz"}.`

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

180

{ # An initial split point for a newly created table.

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

181

"key": "A String", # Row key to use as an initial tablet boundary.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

182

},

183

],

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

184

"table": { # A collection of user data indexed by row, column, and timestamp. # Required. The Table to create.

185

# Each table is served using the resources of its parent cluster.

186

"name": "A String", # Output only. The unique name of the table. Values are of the form

187

# `projects/<project>/instances/<instance>/tables/_a-zA-Z0-9*`.

188

# Views: `NAME_ONLY`, `SCHEMA_VIEW`, `REPLICATION_VIEW`, `FULL`

189

"clusterStates": { # Output only. Map from cluster ID to per-cluster table state.

190

# If it could not be determined whether or not the table has data in a

191

# particular cluster (for example, if its zone is unavailable), then

192

# there will be an entry for the cluster with UNKNOWN `replication_status`.

193

# Views: `REPLICATION_VIEW`, `FULL`

194

"a_key": { # The state of a table's data in a particular cluster.

195

"replicationState": "A String", # Output only. The state of replication for the table in this cluster.

196

},

197

},

198

"granularity": "A String", # (`CreationOnly`)

199

# The granularity (i.e. `MILLIS`) at which timestamps are stored in

200

# this table. Timestamps not matching the granularity will be rejected.

201

# If unspecified at creation time, the value will be set to `MILLIS`.

202

# Views: `SCHEMA_VIEW`, `FULL`.

203

"columnFamilies": { # (`CreationOnly`)

204

# The column families configured for this table, mapped by column family ID.

205

# Views: `SCHEMA_VIEW`, `FULL`

206

"a_key": { # A set of columns within a table which share a common configuration.

207

"gcRule": { # Rule for determining which cells to delete during garbage collection. # Garbage collection rule specified as a protobuf.

208

# Must serialize to at most 500 bytes.

209

#

210

# NOTE: Garbage collection executes opportunistically in the background, and

211

# so it's possible for reads to return a cell even if it matches the active

212

# GC expression for its family.

213

"intersection": { # A GcRule which deletes cells matching all of the given rules. # Delete cells that would be deleted by every nested rule.

214

"rules": [ # Only delete cells which would be deleted by every element of `rules`.

215

# Object with schema name: GcRule

216

],

217

},

218

"union": { # A GcRule which deletes cells matching any of the given rules. # Delete cells that would be deleted by any nested rule.

219

"rules": [ # Delete cells which would be deleted by any element of `rules`.

220

# Object with schema name: GcRule

221

],

222

},

223

"maxNumVersions": 42, # Delete all cells in a column except the most recent N.

224

"maxAge": "A String", # Delete cells in a column older than the given age.

225

# Values must be at least one millisecond, and will be truncated to

226

# microsecond granularity.

},

},

},

},

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

231

}

232

233

x__xgafv: string, V1 error format.

Allowed values

1 - v1 error format

2 - v2 error format

Returns:

An object of the form:

240

241

{ # A collection of user data indexed by row, column, and timestamp.

242

# Each table is served using the resources of its parent cluster.

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

243

"name": "A String", # Output only. The unique name of the table. Values are of the form

244

# `projects/<project>/instances/<instance>/tables/_a-zA-Z0-9*`.

245

# Views: `NAME_ONLY`, `SCHEMA_VIEW`, `REPLICATION_VIEW`, `FULL`

246

"clusterStates": { # Output only. Map from cluster ID to per-cluster table state.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

247

# If it could not be determined whether or not the table has data in a

248

# particular cluster (for example, if its zone is unavailable), then

249

# there will be an entry for the cluster with UNKNOWN `replication_status`.

250

# Views: `REPLICATION_VIEW`, `FULL`

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

251

"a_key": { # The state of a table's data in a particular cluster.

252

"replicationState": "A String", # Output only. The state of replication for the table in this cluster.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

253

},

254

},

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

255

"granularity": "A String", # (`CreationOnly`)

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

256

# The granularity (i.e. `MILLIS`) at which timestamps are stored in

257

# this table. Timestamps not matching the granularity will be rejected.

258

# If unspecified at creation time, the value will be set to `MILLIS`.

259

# Views: `SCHEMA_VIEW`, `FULL`.

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

260

"columnFamilies": { # (`CreationOnly`)

261

# The column families configured for this table, mapped by column family ID.

262

# Views: `SCHEMA_VIEW`, `FULL`

263

"a_key": { # A set of columns within a table which share a common configuration.

264

"gcRule": { # Rule for determining which cells to delete during garbage collection. # Garbage collection rule specified as a protobuf.

265

# Must serialize to at most 500 bytes.

266

#

267

# NOTE: Garbage collection executes opportunistically in the background, and

268

# so it's possible for reads to return a cell even if it matches the active

269

# GC expression for its family.

270

"intersection": { # A GcRule which deletes cells matching all of the given rules. # Delete cells that would be deleted by every nested rule.

271

"rules": [ # Only delete cells which would be deleted by every element of `rules`.

272

# Object with schema name: GcRule

273

],

274

},

275

"union": { # A GcRule which deletes cells matching any of the given rules. # Delete cells that would be deleted by any nested rule.

276

"rules": [ # Delete cells which would be deleted by any element of `rules`.

277

# Object with schema name: GcRule

278

],

279

},

280

"maxNumVersions": 42, # Delete all cells in a column except the most recent N.

281

"maxAge": "A String", # Delete cells in a column older than the given age.

282

# Values must be at least one millisecond, and will be truncated to

283

# microsecond granularity.

284

},

285

},

286

},

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

}</pre>

</div>

<code class="details" id="delete">delete(name, x__xgafv=None)</code>

292

<pre>Permanently deletes a specified table and all of its data.

293

294

Args:

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

295

name: string, Required. The unique name of the table to be deleted.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

296

Values are of the form

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

297

`projects/{project}/instances/{instance}/tables/{table}`. (required)

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

298

x__xgafv: string, V1 error format.

Allowed values

1 - v1 error format

2 - v2 error format

Returns:

An object of the form:

305

306

{ # A generic empty message that you can re-use to avoid defining duplicated

307

# empty messages in your APIs. A typical example is to use it as the request

308

# or the response type of an API method. For instance:

309

#

310

# service Foo {

311

# rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty);

312

# }

313

#

314

# The JSON representation for `Empty` is empty JSON object `{}`.

}</pre>

</div>

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

319

<code class="details" id="dropRowRange">dropRowRange(name, body=None, x__xgafv=None)</code>

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

320

<pre>Permanently drop/delete a row range from a specified table. The request can

321

specify whether to delete all rows in a table, or only those that match a

322

particular prefix.

323

324

Args:

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

325

name: string, Required. The unique name of the table on which to drop a range of rows.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

326

Values are of the form

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

327

`projects/{project}/instances/{instance}/tables/{table}`. (required)

328

body: object, The request body.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

329

The object takes the form of:

330

331

{ # Request message for

332

# google.bigtable.admin.v2.BigtableTableAdmin.DropRowRange

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

333

"rowKeyPrefix": "A String", # Delete all rows that start with this row key prefix. Prefix cannot be

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

334

# zero length.

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

335

"deleteAllDataFromTable": True or False, # Delete all rows in the table. Setting this to false is a no-op.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

336

}

337

338

x__xgafv: string, V1 error format.

Allowed values

1 - v1 error format

2 - v2 error format

Returns:

An object of the form:

345

346

{ # A generic empty message that you can re-use to avoid defining duplicated

347

# empty messages in your APIs. A typical example is to use it as the request

348

# or the response type of an API method. For instance:

349

#

350

# service Foo {

351

# rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty);

352

# }

353

#

354

# The JSON representation for `Empty` is empty JSON object `{}`.

}</pre>

</div>

<code class="details" id="generateConsistencyToken">generateConsistencyToken(name, body=None, x__xgafv=None)</code>

360

<pre>Generates a consistency token for a Table, which can be used in

361

CheckConsistency to check whether mutations to the table that finished

362

before this call started have been replicated. The tokens will be available

363

for 90 days.

364

365

Args:

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

366

name: string, Required. The unique name of the Table for which to create a consistency token.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

367

Values are of the form

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

368

`projects/{project}/instances/{instance}/tables/{table}`. (required)

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

369

body: object, The request body.

370

The object takes the form of:

371

372

{ # Request message for

373

# google.bigtable.admin.v2.BigtableTableAdmin.GenerateConsistencyToken

374

}

375

376

x__xgafv: string, V1 error format.

Allowed values

1 - v1 error format

2 - v2 error format

Returns:

An object of the form:

383

384

{ # Response message for

385

# google.bigtable.admin.v2.BigtableTableAdmin.GenerateConsistencyToken

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

386

"consistencyToken": "A String", # The generated consistency token.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

}</pre>

</div>

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

391

<code class="details" id="get">get(name, view=None, x__xgafv=None)</code>

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

392

<pre>Gets metadata information about the specified table.

393

394

Args:

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

395

name: string, Required. The unique name of the requested table.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

396

Values are of the form

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

397

`projects/{project}/instances/{instance}/tables/{table}`. (required)

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

398

view: string, The view to be applied to the returned table's fields.

399

Defaults to `SCHEMA_VIEW` if unspecified.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

400

x__xgafv: string, V1 error format.

401

Allowed values

402

1 - v1 error format

403

2 - v2 error format

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

404

405

Returns:

406

An object of the form:

407

408

{ # A collection of user data indexed by row, column, and timestamp.

409

# Each table is served using the resources of its parent cluster.

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

410

"name": "A String", # Output only. The unique name of the table. Values are of the form

411

# `projects/<project>/instances/<instance>/tables/_a-zA-Z0-9*`.

412

# Views: `NAME_ONLY`, `SCHEMA_VIEW`, `REPLICATION_VIEW`, `FULL`

413

"clusterStates": { # Output only. Map from cluster ID to per-cluster table state.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

414

# If it could not be determined whether or not the table has data in a

415

# particular cluster (for example, if its zone is unavailable), then

416

# there will be an entry for the cluster with UNKNOWN `replication_status`.

417

# Views: `REPLICATION_VIEW`, `FULL`

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

418

"a_key": { # The state of a table's data in a particular cluster.

419

"replicationState": "A String", # Output only. The state of replication for the table in this cluster.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

420

},

421

},

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

422

"granularity": "A String", # (`CreationOnly`)

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

423

# The granularity (i.e. `MILLIS`) at which timestamps are stored in

424

# this table. Timestamps not matching the granularity will be rejected.

425

# If unspecified at creation time, the value will be set to `MILLIS`.

426

# Views: `SCHEMA_VIEW`, `FULL`.

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

427

"columnFamilies": { # (`CreationOnly`)

428

# The column families configured for this table, mapped by column family ID.

429

# Views: `SCHEMA_VIEW`, `FULL`

430

"a_key": { # A set of columns within a table which share a common configuration.

431

"gcRule": { # Rule for determining which cells to delete during garbage collection. # Garbage collection rule specified as a protobuf.

432

# Must serialize to at most 500 bytes.

433

#

434

# NOTE: Garbage collection executes opportunistically in the background, and

435

# so it's possible for reads to return a cell even if it matches the active

436

# GC expression for its family.

437

"intersection": { # A GcRule which deletes cells matching all of the given rules. # Delete cells that would be deleted by every nested rule.

438

"rules": [ # Only delete cells which would be deleted by every element of `rules`.

439

# Object with schema name: GcRule

440

],

441

},

442

"union": { # A GcRule which deletes cells matching any of the given rules. # Delete cells that would be deleted by any nested rule.

443

"rules": [ # Delete cells which would be deleted by any element of `rules`.

444

# Object with schema name: GcRule

445

],

446

},

447

"maxNumVersions": 42, # Delete all cells in a column except the most recent N.

448

"maxAge": "A String", # Delete cells in a column older than the given age.

449

# Values must be at least one millisecond, and will be truncated to

450

# microsecond granularity.

451

},

452

},

453

},

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

}</pre>

</div>

<code class="details" id="getIamPolicy">getIamPolicy(resource, body=None, x__xgafv=None)</code>

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

459

<pre>Gets the access control policy for a Table resource.

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

460

Returns an empty policy if the resource exists but does not have a policy

461

set.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

462

463

Args:

464

resource: string, REQUIRED: The resource for which the policy is being requested.

465

See the operation documentation for the appropriate value for this field. (required)

466

body: object, The request body.

467

The object takes the form of:

468

469

{ # Request message for `GetIamPolicy` method.

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

470

"options": { # Encapsulates settings provided to GetIamPolicy. # OPTIONAL: A `GetPolicyOptions` object for specifying options to

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

471

# `GetIamPolicy`. This field is only used by Cloud IAM.

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

472

"requestedPolicyVersion": 42, # Optional. The policy format version to be returned.

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

473

#

474

# Valid values are 0, 1, and 3. Requests specifying an invalid value will be

475

# rejected.

476

#

477

# Requests for policies with any conditional bindings must specify version 3.

478

# Policies without any conditional bindings may specify any valid value or

479

# leave the field unset.

480

},

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

481

}

482

483

x__xgafv: string, V1 error format.

Allowed values

1 - v1 error format

2 - v2 error format

Returns:

An object of the form:

490

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

491

{ # An Identity and Access Management (IAM) policy, which specifies access

492

# controls for Google Cloud resources.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

493

#

494

#

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

495

# A `Policy` is a collection of `bindings`. A `binding` binds one or more

496

# `members` to a single `role`. Members can be user accounts, service accounts,

497

# Google groups, and domains (such as G Suite). A `role` is a named list of

498

# permissions; each `role` can be an IAM predefined role or a user-created

499

# custom role.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

500

#

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

501

# Optionally, a `binding` can specify a `condition`, which is a logical

502

# expression that allows access to a resource only if the expression evaluates

503

# to `true`. A condition can add constraints based on attributes of the

504

# request, the resource, or both.

505

#

506

# **JSON example:**

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

507

#

508

# {

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

509

# "bindings": [

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

510

# {

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

511

# "role": "roles/resourcemanager.organizationAdmin",

512

# "members": [

513

# "user:mike@example.com",

514

# "group:admins@example.com",

515

# "domain:google.com",

516

# "serviceAccount:my-project-id@appspot.gserviceaccount.com"

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

517

# ]

518

# },

519

# {

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

520

# "role": "roles/resourcemanager.organizationViewer",

521

# "members": ["user:eve@example.com"],

522

# "condition": {

523

# "title": "expirable access",

524

# "description": "Does not grant access after Sep 2020",

525

# "expression": "request.time < timestamp('2020-10-01T00:00:00.000Z')",

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

526

# }

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

527

# }

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

528

# ],

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

529

# "etag": "BwWWja0YfJA=",

530

# "version": 3

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

531

# }

532

#

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

533

# **YAML example:**

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

#

# bindings:

# - members:

# - user:mike@example.com

538

# - group:admins@example.com

539

# - domain:google.com

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

540

# - serviceAccount:my-project-id@appspot.gserviceaccount.com

541

# role: roles/resourcemanager.organizationAdmin

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

542

# - members:

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

543

# - user:eve@example.com

544

# role: roles/resourcemanager.organizationViewer

545

# condition:

546

# title: expirable access

547

# description: Does not grant access after Sep 2020

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

548

# expression: request.time < timestamp('2020-10-01T00:00:00.000Z')

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

549

# - etag: BwWWja0YfJA=

550

# - version: 3

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

551

#

552

# For a description of IAM and its features, see the

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

553

# [IAM documentation](https://cloud.google.com/iam/docs/).

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

554

"etag": "A String", # `etag` is used for optimistic concurrency control as a way to help

555

# prevent simultaneous updates of a policy from overwriting each other.

556

# It is strongly suggested that systems make use of the `etag` in the

557

# read-modify-write cycle to perform policy updates in order to avoid race

558

# conditions: An `etag` is returned in the response to `getIamPolicy`, and

559

# systems are expected to put that etag in the request to `setIamPolicy` to

560

# ensure that their change will be applied to the same version of the policy.

561

#

562

# **Important:** If you use IAM Conditions, you must include the `etag` field

563

# whenever you call `setIamPolicy`. If you omit this field, then IAM allows

564

# you to overwrite a version `3` policy with a version `1` policy, and all of

565

# the conditions in the version `3` policy are lost.

566

"version": 42, # Specifies the format of the policy.

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

567

#

568

# Valid values are `0`, `1`, and `3`. Requests that specify an invalid value

569

# are rejected.

570

#

571

# Any operation that affects conditional role bindings must specify version

572

# `3`. This requirement applies to the following operations:

573

#

574

# * Getting a policy that includes a conditional role binding

575

# * Adding a conditional role binding to a policy

576

# * Changing a conditional role binding in a policy

577

# * Removing any role binding, with or without a condition, from a policy

578

# that includes conditions

579

#

580

# **Important:** If you use IAM Conditions, you must include the `etag` field

581

# whenever you call `setIamPolicy`. If you omit this field, then IAM allows

582

# you to overwrite a version `3` policy with a version `1` policy, and all of

583

# the conditions in the version `3` policy are lost.

584

#

585

# If a policy does not include any conditions, operations on that policy may

586

# specify any valid version or leave the field unset.

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

587

"auditConfigs": [ # Specifies cloud audit logging configuration for this policy.

588

{ # Specifies the audit configuration for a service.

589

# The configuration determines which permission types are logged, and what

590

# identities, if any, are exempted from logging.

591

# An AuditConfig must have one or more AuditLogConfigs.

592

#

593

# If there are AuditConfigs for both `allServices` and a specific service,

594

# the union of the two AuditConfigs is used for that service: the log_types

595

# specified in each AuditConfig are enabled, and the exempted_members in each

596

# AuditLogConfig are exempted.

597

#

598

# Example Policy with multiple AuditConfigs:

#

# {

# "audit_configs": [

# {

# "service": "allServices"

604

# "audit_log_configs": [

605

# {

606

# "log_type": "DATA_READ",

607

# "exempted_members": [

608

# "user:jose@example.com"

# ]

# },

# {

# "log_type": "DATA_WRITE",

613

# },

614

# {

615

# "log_type": "ADMIN_READ",

# }

# ]

# },

# {

# "service": "sampleservice.googleapis.com"

621

# "audit_log_configs": [

622

# {

623

# "log_type": "DATA_READ",

624

# },

625

# {

626

# "log_type": "DATA_WRITE",

627

# "exempted_members": [

628

# "user:aliya@example.com"

# ]

# }

# ]

# }

# ]

# }

#

# For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ

637

# logging. It also exempts jose@example.com from DATA_READ logging, and

638

# aliya@example.com from DATA_WRITE logging.

639

"service": "A String", # Specifies a service that will be enabled for audit logging.

640

# For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.

641

# `allServices` is a special value that covers all services.

642

"auditLogConfigs": [ # The configuration for logging of each type of permission.

643

{ # Provides the configuration for logging a type of permissions.

# Example:

#

# {

# "audit_log_configs": [

648

# {

649

# "log_type": "DATA_READ",

650

# "exempted_members": [

651

# "user:jose@example.com"

# ]

# },

# {

# "log_type": "DATA_WRITE",

# }

# ]

# }

#

# This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting

661

# jose@example.com from DATA_READ logging.

662

"exemptedMembers": [ # Specifies the identities that do not cause logging for this type of

663

# permission.

664

# Follows the same format of Binding.members.

665

"A String",

666

],

667

"logType": "A String", # The log type that this config enables.

},

],

},

],

"bindings": [ # Associates a list of `members` to a `role`. Optionally, may specify a

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

673

# `condition` that determines how and when the `bindings` are applied. Each

674

# of the `bindings` must contain at least one member.

675

{ # Associates `members` with a `role`.

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

676

"condition": { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.

677

# NOTE: An unsatisfied condition will not allow user access via current

678

# binding. Different bindings, including their conditions, are examined

679

# independently.

680

# syntax. CEL is a C-like expression language. The syntax and semantics of CEL

681

# are documented at https://github.com/google/cel-spec.

682

#

683

# Example (Comparison):

684

#

685

# title: "Summary size limit"

686

# description: "Determines if a summary is less than 100 chars"

687

# expression: "document.summary.size() < 100"

688

#

689

# Example (Equality):

690

#

691

# title: "Requestor is owner"

692

# description: "Determines if requestor is the document owner"

693

# expression: "document.owner == request.auth.claims.email"

#

# Example (Logic):

#

# title: "Public documents"

698

# description: "Determine whether the document should be publicly visible"

699

# expression: "document.type != 'private' && document.type != 'internal'"

700

#

701

# Example (Data Manipulation):

702

#

703

# title: "Notification string"

704

# description: "Create a notification string with a timestamp."

705

# expression: "'New message received at ' + string(document.create_time)"

706

#

707

# The exact variables and functions that may be referenced within an expression

708

# are determined by the service that evaluates it. See the service

709

# documentation for additional information.

710

"description": "A String", # Optional. Description of the expression. This is a longer text which

711

# describes the expression, e.g. when hovered over it in a UI.

712

"expression": "A String", # Textual representation of an expression in Common Expression Language

713

# syntax.

714

"title": "A String", # Optional. Title for the expression, i.e. a short string describing

715

# its purpose. This can be used e.g. in UIs which allow to enter the

716

# expression.

717

"location": "A String", # Optional. String indicating the location of the expression for error

718

# reporting, e.g. a file name and a position in the file.

719

},

720

"members": [ # Specifies the identities requesting access for a Cloud Platform resource.

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

721

# `members` can have the following values:

722

#

723

# * `allUsers`: A special identifier that represents anyone who is

724

# on the internet; with or without a Google account.

725

#

726

# * `allAuthenticatedUsers`: A special identifier that represents anyone

727

# who is authenticated with a Google account or a service account.

728

#

729

# * `user:{emailid}`: An email address that represents a specific Google

730

# account. For example, `alice@example.com` .

731

#

732

#

733

# * `serviceAccount:{emailid}`: An email address that represents a service

734

# account. For example, `my-other-app@appspot.gserviceaccount.com`.

735

#

736

# * `group:{emailid}`: An email address that represents a Google group.

737

# For example, `admins@example.com`.

738

#

739

# * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique

740

# identifier) representing a user that has been recently deleted. For

741

# example, `alice@example.com?uid=123456789012345678901`. If the user is

742

# recovered, this value reverts to `user:{emailid}` and the recovered user

743

# retains the role in the binding.

744

#

745

# * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus

746

# unique identifier) representing a service account that has been recently

747

# deleted. For example,

748

# `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.

749

# If the service account is undeleted, this value reverts to

750

# `serviceAccount:{emailid}` and the undeleted service account retains the

751

# role in the binding.

752

#

753

# * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique

754

# identifier) representing a Google group that has been recently

755

# deleted. For example, `admins@example.com?uid=123456789012345678901`. If

756

# the group is recovered, this value reverts to `group:{emailid}` and the

757

# recovered group retains the role in the binding.

758

#

759

#

760

# * `domain:{domain}`: The G Suite domain (primary) that represents all the

761

# users of that domain. For example, `google.com` or `example.com`.

762

#

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

763

"A String",

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

764

],

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

765

"role": "A String", # Role that is assigned to `members`.

766

# For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

767

},

768

],

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

}</pre>

</div>

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

773

<code class="details" id="list">list(parent, pageToken=None, pageSize=None, view=None, x__xgafv=None)</code>

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

774

<pre>Lists all tables served from a specified instance.

775

776

Args:

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

777

parent: string, Required. The unique name of the instance for which tables should be listed.

778

Values are of the form `projects/{project}/instances/{instance}`. (required)

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

779

pageToken: string, The value of `next_page_token` returned by a previous call.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

780

pageSize: integer, Maximum number of results per page.

781

782

A page_size of zero lets the server choose the number of items to return.

783

A page_size which is strictly positive will return at most that many items.

784

A negative page_size will cause an error.

785

786

Following the first request, subsequent paginated calls are not required

787

to pass a page_size. If a page_size is set in subsequent calls, it must

788

match the page_size given in the first request.

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

789

view: string, The view to be applied to the returned tables' fields.

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

790

Only NAME_ONLY view (default) and REPLICATION_VIEW are supported.

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

791

x__xgafv: string, V1 error format.

792

Allowed values

793

1 - v1 error format

794

2 - v2 error format

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

795

796

Returns:

797

An object of the form:

798

799

{ # Response message for

800

# google.bigtable.admin.v2.BigtableTableAdmin.ListTables

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

801

"nextPageToken": "A String", # Set if not all tables could be returned in a single response.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

802

# Pass this value to `page_token` in another request to get the next

803

# page of results.

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

804

"tables": [ # The tables present in the requested instance.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

805

{ # A collection of user data indexed by row, column, and timestamp.

806

# Each table is served using the resources of its parent cluster.

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

807

"name": "A String", # Output only. The unique name of the table. Values are of the form

808

# `projects/<project>/instances/<instance>/tables/_a-zA-Z0-9*`.

809

# Views: `NAME_ONLY`, `SCHEMA_VIEW`, `REPLICATION_VIEW`, `FULL`

810

"clusterStates": { # Output only. Map from cluster ID to per-cluster table state.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

811

# If it could not be determined whether or not the table has data in a

812

# particular cluster (for example, if its zone is unavailable), then

813

# there will be an entry for the cluster with UNKNOWN `replication_status`.

814

# Views: `REPLICATION_VIEW`, `FULL`

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

815

"a_key": { # The state of a table's data in a particular cluster.

816

"replicationState": "A String", # Output only. The state of replication for the table in this cluster.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

817

},

818

},

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

819

"granularity": "A String", # (`CreationOnly`)

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

820

# The granularity (i.e. `MILLIS`) at which timestamps are stored in

821

# this table. Timestamps not matching the granularity will be rejected.

822

# If unspecified at creation time, the value will be set to `MILLIS`.

823

# Views: `SCHEMA_VIEW`, `FULL`.

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

824

"columnFamilies": { # (`CreationOnly`)

825

# The column families configured for this table, mapped by column family ID.

826

# Views: `SCHEMA_VIEW`, `FULL`

827

"a_key": { # A set of columns within a table which share a common configuration.

828

"gcRule": { # Rule for determining which cells to delete during garbage collection. # Garbage collection rule specified as a protobuf.

829

# Must serialize to at most 500 bytes.

830

#

831

# NOTE: Garbage collection executes opportunistically in the background, and

832

# so it's possible for reads to return a cell even if it matches the active

833

# GC expression for its family.

834

"intersection": { # A GcRule which deletes cells matching all of the given rules. # Delete cells that would be deleted by every nested rule.

835

"rules": [ # Only delete cells which would be deleted by every element of `rules`.

836

# Object with schema name: GcRule

837

],

838

},

839

"union": { # A GcRule which deletes cells matching any of the given rules. # Delete cells that would be deleted by any nested rule.

840

"rules": [ # Delete cells which would be deleted by any element of `rules`.

841

# Object with schema name: GcRule

842

],

843

},

844

"maxNumVersions": 42, # Delete all cells in a column except the most recent N.

845

"maxAge": "A String", # Delete cells in a column older than the given age.

846

# Values must be at least one millisecond, and will be truncated to

847

# microsecond granularity.

848

},

849

},

850

},

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

},

],

}</pre>

</div>

<code class="details" id="list_next">list_next(previous_request, previous_response)</code>

858

<pre>Retrieves the next page of results.

859

860

Args:

861

previous_request: The request for the previous page. (required)

862

previous_response: The response from the request for the previous page. (required)

863

864

Returns:

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

865

A request object that you can call 'execute()' on to request the next

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

866

page. Returns None if there are no more items in the collection.

</pre>

</div>

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

871

<code class="details" id="modifyColumnFamilies">modifyColumnFamilies(name, body=None, x__xgafv=None)</code>

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

872

<pre>Performs a series of column family modifications on the specified table.

873

Either all or none of the modifications will occur before this method

874

returns, but data requests received prior to that point may see a table

875

where only some modifications have taken effect.

876

877

Args:

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

878

name: string, Required. The unique name of the table whose families should be modified.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

879

Values are of the form

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

880

`projects/{project}/instances/{instance}/tables/{table}`. (required)

881

body: object, The request body.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

882

The object takes the form of:

883

884

{ # Request message for

885

# google.bigtable.admin.v2.BigtableTableAdmin.ModifyColumnFamilies

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

886

"modifications": [ # Required. Modifications to be atomically applied to the specified table's families.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

887

# Entries are applied in order, meaning that earlier modifications can be

888

# masked by later ones (in the case of repeated updates to the same family,

889

# for example).

890

{ # A create, update, or delete of a particular column family.

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

891

"update": { # A set of columns within a table which share a common configuration. # Update an existing column family to the specified schema, or fail

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

892

# if no column family exists with the given ID.

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

893

"gcRule": { # Rule for determining which cells to delete during garbage collection. # Garbage collection rule specified as a protobuf.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

894

# Must serialize to at most 500 bytes.

895

#

896

# NOTE: Garbage collection executes opportunistically in the background, and

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

897

# so it's possible for reads to return a cell even if it matches the active

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

898

# GC expression for its family.

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

899

"intersection": { # A GcRule which deletes cells matching all of the given rules. # Delete cells that would be deleted by every nested rule.

900

"rules": [ # Only delete cells which would be deleted by every element of `rules`.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

901

# Object with schema name: GcRule

902

],

903

},

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

904

"union": { # A GcRule which deletes cells matching any of the given rules. # Delete cells that would be deleted by any nested rule.

905

"rules": [ # Delete cells which would be deleted by any element of `rules`.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

906

# Object with schema name: GcRule

907

],

908

},

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

909

"maxNumVersions": 42, # Delete all cells in a column except the most recent N.

910

"maxAge": "A String", # Delete cells in a column older than the given age.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

911

# Values must be at least one millisecond, and will be truncated to

912

# microsecond granularity.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

913

},

914

},

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

915

"create": { # A set of columns within a table which share a common configuration. # Create a new column family with the specified schema, or fail if

916

# one already exists with the given ID.

917

"gcRule": { # Rule for determining which cells to delete during garbage collection. # Garbage collection rule specified as a protobuf.

918

# Must serialize to at most 500 bytes.

919

#

920

# NOTE: Garbage collection executes opportunistically in the background, and

921

# so it's possible for reads to return a cell even if it matches the active

922

# GC expression for its family.

923

"intersection": { # A GcRule which deletes cells matching all of the given rules. # Delete cells that would be deleted by every nested rule.

924

"rules": [ # Only delete cells which would be deleted by every element of `rules`.

925

# Object with schema name: GcRule

926

],

927

},

928

"union": { # A GcRule which deletes cells matching any of the given rules. # Delete cells that would be deleted by any nested rule.

929

"rules": [ # Delete cells which would be deleted by any element of `rules`.

930

# Object with schema name: GcRule

931

],

932

},

933

"maxNumVersions": 42, # Delete all cells in a column except the most recent N.

934

"maxAge": "A String", # Delete cells in a column older than the given age.

935

# Values must be at least one millisecond, and will be truncated to

936

# microsecond granularity.

937

},

938

},

939

"drop": True or False, # Drop (delete) the column family with the given ID, or fail if no such

940

# family exists.

941

"id": "A String", # The ID of the column family to be modified.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

},

],

}

x__xgafv: string, V1 error format.

Allowed values

1 - v1 error format

2 - v2 error format

Returns:

An object of the form:

953

954

{ # A collection of user data indexed by row, column, and timestamp.

955

# Each table is served using the resources of its parent cluster.

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

956

"name": "A String", # Output only. The unique name of the table. Values are of the form

957

# `projects/<project>/instances/<instance>/tables/_a-zA-Z0-9*`.

958

# Views: `NAME_ONLY`, `SCHEMA_VIEW`, `REPLICATION_VIEW`, `FULL`

959

"clusterStates": { # Output only. Map from cluster ID to per-cluster table state.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

960

# If it could not be determined whether or not the table has data in a

961

# particular cluster (for example, if its zone is unavailable), then

962

# there will be an entry for the cluster with UNKNOWN `replication_status`.

963

# Views: `REPLICATION_VIEW`, `FULL`

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

964

"a_key": { # The state of a table's data in a particular cluster.

965

"replicationState": "A String", # Output only. The state of replication for the table in this cluster.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

966

},

967

},

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

968

"granularity": "A String", # (`CreationOnly`)

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

969

# The granularity (i.e. `MILLIS`) at which timestamps are stored in

970

# this table. Timestamps not matching the granularity will be rejected.

971

# If unspecified at creation time, the value will be set to `MILLIS`.

972

# Views: `SCHEMA_VIEW`, `FULL`.

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

973

"columnFamilies": { # (`CreationOnly`)

974

# The column families configured for this table, mapped by column family ID.

975

# Views: `SCHEMA_VIEW`, `FULL`

976

"a_key": { # A set of columns within a table which share a common configuration.

977

"gcRule": { # Rule for determining which cells to delete during garbage collection. # Garbage collection rule specified as a protobuf.

978

# Must serialize to at most 500 bytes.

979

#

980

# NOTE: Garbage collection executes opportunistically in the background, and

981

# so it's possible for reads to return a cell even if it matches the active

982

# GC expression for its family.

983

"intersection": { # A GcRule which deletes cells matching all of the given rules. # Delete cells that would be deleted by every nested rule.

984

"rules": [ # Only delete cells which would be deleted by every element of `rules`.

985

# Object with schema name: GcRule

986

],

987

},

988

"union": { # A GcRule which deletes cells matching any of the given rules. # Delete cells that would be deleted by any nested rule.

989

"rules": [ # Delete cells which would be deleted by any element of `rules`.

990

# Object with schema name: GcRule

991

],

992

},

993

"maxNumVersions": 42, # Delete all cells in a column except the most recent N.

994

"maxAge": "A String", # Delete cells in a column older than the given age.

995

# Values must be at least one millisecond, and will be truncated to

996

# microsecond granularity.

997

},

998

},

999

},

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

}</pre>

</div>

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1004

<code class="details" id="setIamPolicy">setIamPolicy(resource, body=None, x__xgafv=None)</code>

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

1005

<pre>Sets the access control policy on a Table resource.

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1006

Replaces any existing policy.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

1007

1008

Args:

1009

resource: string, REQUIRED: The resource for which the policy is being specified.

1010

See the operation documentation for the appropriate value for this field. (required)

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1011

body: object, The request body.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

1012

The object takes the form of:

1013

1014

{ # Request message for `SetIamPolicy` method.

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

1015

"policy": { # An Identity and Access Management (IAM) policy, which specifies access # REQUIRED: The complete policy to be applied to the `resource`. The size of

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

1016

# the policy is limited to a few 10s of KB. An empty policy is a

1017

# valid policy but certain Cloud Platform services (such as Projects)

1018

# might reject them.

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1019

# controls for Google Cloud resources.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

1020

#

1021

#

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1022

# A `Policy` is a collection of `bindings`. A `binding` binds one or more

1023

# `members` to a single `role`. Members can be user accounts, service accounts,

1024

# Google groups, and domains (such as G Suite). A `role` is a named list of

1025

# permissions; each `role` can be an IAM predefined role or a user-created

1026

# custom role.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

1027

#

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1028

# Optionally, a `binding` can specify a `condition`, which is a logical

1029

# expression that allows access to a resource only if the expression evaluates

1030

# to `true`. A condition can add constraints based on attributes of the

1031

# request, the resource, or both.

1032

#

1033

# **JSON example:**

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

1034

#

1035

# {

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

1036

# "bindings": [

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

1037

# {

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

1038

# "role": "roles/resourcemanager.organizationAdmin",

1039

# "members": [

1040

# "user:mike@example.com",

1041

# "group:admins@example.com",

1042

# "domain:google.com",

1043

# "serviceAccount:my-project-id@appspot.gserviceaccount.com"

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

1044

# ]

1045

# },

1046

# {

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

1047

# "role": "roles/resourcemanager.organizationViewer",

1048

# "members": ["user:eve@example.com"],

1049

# "condition": {

1050

# "title": "expirable access",

1051

# "description": "Does not grant access after Sep 2020",

1052

# "expression": "request.time < timestamp('2020-10-01T00:00:00.000Z')",

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1053

# }

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

1054

# }

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1055

# ],

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

1056

# "etag": "BwWWja0YfJA=",

1057

# "version": 3

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

1058

# }

1059

#

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1060

# **YAML example:**

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

#

# bindings:

# - members:

# - user:mike@example.com

1065

# - group:admins@example.com

1066

# - domain:google.com

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1067

# - serviceAccount:my-project-id@appspot.gserviceaccount.com

1068

# role: roles/resourcemanager.organizationAdmin

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

1069

# - members:

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1070

# - user:eve@example.com

1071

# role: roles/resourcemanager.organizationViewer

1072

# condition:

1073

# title: expirable access

1074

# description: Does not grant access after Sep 2020

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

1075

# expression: request.time < timestamp('2020-10-01T00:00:00.000Z')

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1076

# - etag: BwWWja0YfJA=

1077

# - version: 3

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

1078

#

1079

# For a description of IAM and its features, see the

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1080

# [IAM documentation](https://cloud.google.com/iam/docs/).

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

1081

"etag": "A String", # `etag` is used for optimistic concurrency control as a way to help

1082

# prevent simultaneous updates of a policy from overwriting each other.

1083

# It is strongly suggested that systems make use of the `etag` in the

1084

# read-modify-write cycle to perform policy updates in order to avoid race

1085

# conditions: An `etag` is returned in the response to `getIamPolicy`, and

1086

# systems are expected to put that etag in the request to `setIamPolicy` to

1087

# ensure that their change will be applied to the same version of the policy.

1088

#

1089

# **Important:** If you use IAM Conditions, you must include the `etag` field

1090

# whenever you call `setIamPolicy`. If you omit this field, then IAM allows

1091

# you to overwrite a version `3` policy with a version `1` policy, and all of

1092

# the conditions in the version `3` policy are lost.

1093

"version": 42, # Specifies the format of the policy.

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1094

#

1095

# Valid values are `0`, `1`, and `3`. Requests that specify an invalid value

1096

# are rejected.

1097

#

1098

# Any operation that affects conditional role bindings must specify version

1099

# `3`. This requirement applies to the following operations:

1100

#

1101

# * Getting a policy that includes a conditional role binding

1102

# * Adding a conditional role binding to a policy

1103

# * Changing a conditional role binding in a policy

1104

# * Removing any role binding, with or without a condition, from a policy

1105

# that includes conditions

1106

#

1107

# **Important:** If you use IAM Conditions, you must include the `etag` field

1108

# whenever you call `setIamPolicy`. If you omit this field, then IAM allows

1109

# you to overwrite a version `3` policy with a version `1` policy, and all of

1110

# the conditions in the version `3` policy are lost.

1111

#

1112

# If a policy does not include any conditions, operations on that policy may

1113

# specify any valid version or leave the field unset.

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

1114

"auditConfigs": [ # Specifies cloud audit logging configuration for this policy.

1115

{ # Specifies the audit configuration for a service.

1116

# The configuration determines which permission types are logged, and what

1117

# identities, if any, are exempted from logging.

1118

# An AuditConfig must have one or more AuditLogConfigs.

1119

#

1120

# If there are AuditConfigs for both `allServices` and a specific service,

1121

# the union of the two AuditConfigs is used for that service: the log_types

1122

# specified in each AuditConfig are enabled, and the exempted_members in each

1123

# AuditLogConfig are exempted.

1124

#

1125

# Example Policy with multiple AuditConfigs:

#

# {

# "audit_configs": [

# {

# "service": "allServices"

1131

# "audit_log_configs": [

1132

# {

1133

# "log_type": "DATA_READ",

1134

# "exempted_members": [

1135

# "user:jose@example.com"

# ]

# },

# {

# "log_type": "DATA_WRITE",

1140

# },

1141

# {

1142

# "log_type": "ADMIN_READ",

# }

# ]

# },

# {

# "service": "sampleservice.googleapis.com"

1148

# "audit_log_configs": [

1149

# {

1150

# "log_type": "DATA_READ",

1151

# },

1152

# {

1153

# "log_type": "DATA_WRITE",

1154

# "exempted_members": [

1155

# "user:aliya@example.com"

# ]

# }

# ]

# }

# ]

# }

#

# For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ

1164

# logging. It also exempts jose@example.com from DATA_READ logging, and

1165

# aliya@example.com from DATA_WRITE logging.

1166

"service": "A String", # Specifies a service that will be enabled for audit logging.

1167

# For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.

1168

# `allServices` is a special value that covers all services.

1169

"auditLogConfigs": [ # The configuration for logging of each type of permission.

1170

{ # Provides the configuration for logging a type of permissions.

# Example:

#

# {

# "audit_log_configs": [

1175

# {

1176

# "log_type": "DATA_READ",

1177

# "exempted_members": [

1178

# "user:jose@example.com"

# ]

# },

# {

# "log_type": "DATA_WRITE",

# }

# ]

# }

#

# This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting

1188

# jose@example.com from DATA_READ logging.

1189

"exemptedMembers": [ # Specifies the identities that do not cause logging for this type of

1190

# permission.

1191

# Follows the same format of Binding.members.

1192

"A String",

1193

],

1194

"logType": "A String", # The log type that this config enables.

},

],

},

],

"bindings": [ # Associates a list of `members` to a `role`. Optionally, may specify a

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1200

# `condition` that determines how and when the `bindings` are applied. Each

1201

# of the `bindings` must contain at least one member.

1202

{ # Associates `members` with a `role`.

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

1203

"condition": { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.

1204

# NOTE: An unsatisfied condition will not allow user access via current

1205

# binding. Different bindings, including their conditions, are examined

1206

# independently.

1207

# syntax. CEL is a C-like expression language. The syntax and semantics of CEL

1208

# are documented at https://github.com/google/cel-spec.

1209

#

1210

# Example (Comparison):

1211

#

1212

# title: "Summary size limit"

1213

# description: "Determines if a summary is less than 100 chars"

1214

# expression: "document.summary.size() < 100"

1215

#

1216

# Example (Equality):

1217

#

1218

# title: "Requestor is owner"

1219

# description: "Determines if requestor is the document owner"

1220

# expression: "document.owner == request.auth.claims.email"

#

# Example (Logic):

#

# title: "Public documents"

1225

# description: "Determine whether the document should be publicly visible"

1226

# expression: "document.type != 'private' && document.type != 'internal'"

1227

#

1228

# Example (Data Manipulation):

1229

#

1230

# title: "Notification string"

1231

# description: "Create a notification string with a timestamp."

1232

# expression: "'New message received at ' + string(document.create_time)"

1233

#

1234

# The exact variables and functions that may be referenced within an expression

1235

# are determined by the service that evaluates it. See the service

1236

# documentation for additional information.

1237

"description": "A String", # Optional. Description of the expression. This is a longer text which

1238

# describes the expression, e.g. when hovered over it in a UI.

1239

"expression": "A String", # Textual representation of an expression in Common Expression Language

1240

# syntax.

1241

"title": "A String", # Optional. Title for the expression, i.e. a short string describing

1242

# its purpose. This can be used e.g. in UIs which allow to enter the

1243

# expression.

1244

"location": "A String", # Optional. String indicating the location of the expression for error

1245

# reporting, e.g. a file name and a position in the file.

1246

},

1247

"members": [ # Specifies the identities requesting access for a Cloud Platform resource.

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1248

# `members` can have the following values:

1249

#

1250

# * `allUsers`: A special identifier that represents anyone who is

1251

# on the internet; with or without a Google account.

1252

#

1253

# * `allAuthenticatedUsers`: A special identifier that represents anyone

1254

# who is authenticated with a Google account or a service account.

1255

#

1256

# * `user:{emailid}`: An email address that represents a specific Google

1257

# account. For example, `alice@example.com` .

1258

#

1259

#

1260

# * `serviceAccount:{emailid}`: An email address that represents a service

1261

# account. For example, `my-other-app@appspot.gserviceaccount.com`.

1262

#

1263

# * `group:{emailid}`: An email address that represents a Google group.

1264

# For example, `admins@example.com`.

1265

#

1266

# * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique

1267

# identifier) representing a user that has been recently deleted. For

1268

# example, `alice@example.com?uid=123456789012345678901`. If the user is

1269

# recovered, this value reverts to `user:{emailid}` and the recovered user

1270

# retains the role in the binding.

1271

#

1272

# * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus

1273

# unique identifier) representing a service account that has been recently

1274

# deleted. For example,

1275

# `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.

1276

# If the service account is undeleted, this value reverts to

1277

# `serviceAccount:{emailid}` and the undeleted service account retains the

1278

# role in the binding.

1279

#

1280

# * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique

1281

# identifier) representing a Google group that has been recently

1282

# deleted. For example, `admins@example.com?uid=123456789012345678901`. If

1283

# the group is recovered, this value reverts to `group:{emailid}` and the

1284

# recovered group retains the role in the binding.

1285

#

1286

#

1287

# * `domain:{domain}`: The G Suite domain (primary) that represents all the

1288

# users of that domain. For example, `google.com` or `example.com`.

1289

#

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

1290

"A String",

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1291

],

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

1292

"role": "A String", # Role that is assigned to `members`.

1293

# For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1294

},

1295

],

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

1296

},

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

1297

"updateMask": "A String", # OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

1298

# the fields in the mask will be modified. If no mask is provided, the

1299

# following default mask is used:

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

1300

# paths: "bindings, etag"

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

1301

# This field is only used by Cloud IAM.

1302

}

1303

1304

x__xgafv: string, V1 error format.

Allowed values

1 - v1 error format

2 - v2 error format

Returns:

An object of the form:

1311

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1312

{ # An Identity and Access Management (IAM) policy, which specifies access

1313

# controls for Google Cloud resources.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

1314

#

1315

#

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1316

# A `Policy` is a collection of `bindings`. A `binding` binds one or more

1317

# `members` to a single `role`. Members can be user accounts, service accounts,

1318

# Google groups, and domains (such as G Suite). A `role` is a named list of

1319

# permissions; each `role` can be an IAM predefined role or a user-created

1320

# custom role.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

1321

#

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1322

# Optionally, a `binding` can specify a `condition`, which is a logical

1323

# expression that allows access to a resource only if the expression evaluates

1324

# to `true`. A condition can add constraints based on attributes of the

1325

# request, the resource, or both.

1326

#

1327

# **JSON example:**

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

1328

#

1329

# {

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

1330

# "bindings": [

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

1331

# {

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

1332

# "role": "roles/resourcemanager.organizationAdmin",

1333

# "members": [

1334

# "user:mike@example.com",

1335

# "group:admins@example.com",

1336

# "domain:google.com",

1337

# "serviceAccount:my-project-id@appspot.gserviceaccount.com"

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

1338

# ]

1339

# },

1340

# {

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

1341

# "role": "roles/resourcemanager.organizationViewer",

1342

# "members": ["user:eve@example.com"],

1343

# "condition": {

1344

# "title": "expirable access",

1345

# "description": "Does not grant access after Sep 2020",

1346

# "expression": "request.time < timestamp('2020-10-01T00:00:00.000Z')",

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1347

# }

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

1348

# }

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1349

# ],

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

1350

# "etag": "BwWWja0YfJA=",

1351

# "version": 3

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

1352

# }

1353

#

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1354

# **YAML example:**

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

#

# bindings:

# - members:

# - user:mike@example.com

1359

# - group:admins@example.com

1360

# - domain:google.com

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1361

# - serviceAccount:my-project-id@appspot.gserviceaccount.com

1362

# role: roles/resourcemanager.organizationAdmin

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

1363

# - members:

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1364

# - user:eve@example.com

1365

# role: roles/resourcemanager.organizationViewer

1366

# condition:

1367

# title: expirable access

1368

# description: Does not grant access after Sep 2020

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

1369

# expression: request.time < timestamp('2020-10-01T00:00:00.000Z')

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1370

# - etag: BwWWja0YfJA=

1371

# - version: 3

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

1372

#

1373

# For a description of IAM and its features, see the

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1374

# [IAM documentation](https://cloud.google.com/iam/docs/).

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

1375

"etag": "A String", # `etag` is used for optimistic concurrency control as a way to help

1376

# prevent simultaneous updates of a policy from overwriting each other.

1377

# It is strongly suggested that systems make use of the `etag` in the

1378

# read-modify-write cycle to perform policy updates in order to avoid race

1379

# conditions: An `etag` is returned in the response to `getIamPolicy`, and

1380

# systems are expected to put that etag in the request to `setIamPolicy` to

1381

# ensure that their change will be applied to the same version of the policy.

1382

#

1383

# **Important:** If you use IAM Conditions, you must include the `etag` field

1384

# whenever you call `setIamPolicy`. If you omit this field, then IAM allows

1385

# you to overwrite a version `3` policy with a version `1` policy, and all of

1386

# the conditions in the version `3` policy are lost.

1387

"version": 42, # Specifies the format of the policy.

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1388

#

1389

# Valid values are `0`, `1`, and `3`. Requests that specify an invalid value

1390

# are rejected.

1391

#

1392

# Any operation that affects conditional role bindings must specify version

1393

# `3`. This requirement applies to the following operations:

1394

#

1395

# * Getting a policy that includes a conditional role binding

1396

# * Adding a conditional role binding to a policy

1397

# * Changing a conditional role binding in a policy

1398

# * Removing any role binding, with or without a condition, from a policy

1399

# that includes conditions

1400

#

1401

# **Important:** If you use IAM Conditions, you must include the `etag` field

1402

# whenever you call `setIamPolicy`. If you omit this field, then IAM allows

1403

# you to overwrite a version `3` policy with a version `1` policy, and all of

1404

# the conditions in the version `3` policy are lost.

1405

#

1406

# If a policy does not include any conditions, operations on that policy may

1407

# specify any valid version or leave the field unset.

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

1408

"auditConfigs": [ # Specifies cloud audit logging configuration for this policy.

1409

{ # Specifies the audit configuration for a service.

1410

# The configuration determines which permission types are logged, and what

1411

# identities, if any, are exempted from logging.

1412

# An AuditConfig must have one or more AuditLogConfigs.

1413

#

1414

# If there are AuditConfigs for both `allServices` and a specific service,

1415

# the union of the two AuditConfigs is used for that service: the log_types

1416

# specified in each AuditConfig are enabled, and the exempted_members in each

1417

# AuditLogConfig are exempted.

1418

#

1419

# Example Policy with multiple AuditConfigs:

#

# {

# "audit_configs": [

# {

# "service": "allServices"

1425

# "audit_log_configs": [

1426

# {

1427

# "log_type": "DATA_READ",

1428

# "exempted_members": [

1429

# "user:jose@example.com"

# ]

# },

# {

# "log_type": "DATA_WRITE",

1434

# },

1435

# {

1436

# "log_type": "ADMIN_READ",

# }

# ]

# },

# {

# "service": "sampleservice.googleapis.com"

1442

# "audit_log_configs": [

1443

# {

1444

# "log_type": "DATA_READ",

1445

# },

1446

# {

1447

# "log_type": "DATA_WRITE",

1448

# "exempted_members": [

1449

# "user:aliya@example.com"

# ]

# }

# ]

# }

# ]

# }

#

# For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ

1458

# logging. It also exempts jose@example.com from DATA_READ logging, and

1459

# aliya@example.com from DATA_WRITE logging.

1460

"service": "A String", # Specifies a service that will be enabled for audit logging.

1461

# For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.

1462

# `allServices` is a special value that covers all services.

1463

"auditLogConfigs": [ # The configuration for logging of each type of permission.

1464

{ # Provides the configuration for logging a type of permissions.

# Example:

#

# {

# "audit_log_configs": [

1469

# {

1470

# "log_type": "DATA_READ",

1471

# "exempted_members": [

1472

# "user:jose@example.com"

# ]

# },

# {

# "log_type": "DATA_WRITE",

# }

# ]

# }

#

# This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting

1482

# jose@example.com from DATA_READ logging.

1483

"exemptedMembers": [ # Specifies the identities that do not cause logging for this type of

1484

# permission.

1485

# Follows the same format of Binding.members.

1486

"A String",

1487

],

1488

"logType": "A String", # The log type that this config enables.

},

],

},

],

"bindings": [ # Associates a list of `members` to a `role`. Optionally, may specify a

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1494

# `condition` that determines how and when the `bindings` are applied. Each

1495

# of the `bindings` must contain at least one member.

1496

{ # Associates `members` with a `role`.

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

1497

"condition": { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.

1498

# NOTE: An unsatisfied condition will not allow user access via current

1499

# binding. Different bindings, including their conditions, are examined

1500

# independently.

1501

# syntax. CEL is a C-like expression language. The syntax and semantics of CEL

1502

# are documented at https://github.com/google/cel-spec.

1503

#

1504

# Example (Comparison):

1505

#

1506

# title: "Summary size limit"

1507

# description: "Determines if a summary is less than 100 chars"

1508

# expression: "document.summary.size() < 100"

1509

#

1510

# Example (Equality):

1511

#

1512

# title: "Requestor is owner"

1513

# description: "Determines if requestor is the document owner"

1514

# expression: "document.owner == request.auth.claims.email"

#

# Example (Logic):

#

# title: "Public documents"

1519

# description: "Determine whether the document should be publicly visible"

1520

# expression: "document.type != 'private' && document.type != 'internal'"

1521

#

1522

# Example (Data Manipulation):

1523

#

1524

# title: "Notification string"

1525

# description: "Create a notification string with a timestamp."

1526

# expression: "'New message received at ' + string(document.create_time)"

1527

#

1528

# The exact variables and functions that may be referenced within an expression

1529

# are determined by the service that evaluates it. See the service

1530

# documentation for additional information.

1531

"description": "A String", # Optional. Description of the expression. This is a longer text which

1532

# describes the expression, e.g. when hovered over it in a UI.

1533

"expression": "A String", # Textual representation of an expression in Common Expression Language

1534

# syntax.

1535

"title": "A String", # Optional. Title for the expression, i.e. a short string describing

1536

# its purpose. This can be used e.g. in UIs which allow to enter the

1537

# expression.

1538

"location": "A String", # Optional. String indicating the location of the expression for error

1539

# reporting, e.g. a file name and a position in the file.

1540

},

1541

"members": [ # Specifies the identities requesting access for a Cloud Platform resource.

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1542

# `members` can have the following values:

1543

#

1544

# * `allUsers`: A special identifier that represents anyone who is

1545

# on the internet; with or without a Google account.

1546

#

1547

# * `allAuthenticatedUsers`: A special identifier that represents anyone

1548

# who is authenticated with a Google account or a service account.

1549

#

1550

# * `user:{emailid}`: An email address that represents a specific Google

1551

# account. For example, `alice@example.com` .

1552

#

1553

#

1554

# * `serviceAccount:{emailid}`: An email address that represents a service

1555

# account. For example, `my-other-app@appspot.gserviceaccount.com`.

1556

#

1557

# * `group:{emailid}`: An email address that represents a Google group.

1558

# For example, `admins@example.com`.

1559

#

1560

# * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique

1561

# identifier) representing a user that has been recently deleted. For

1562

# example, `alice@example.com?uid=123456789012345678901`. If the user is

1563

# recovered, this value reverts to `user:{emailid}` and the recovered user

1564

# retains the role in the binding.

1565

#

1566

# * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus

1567

# unique identifier) representing a service account that has been recently

1568

# deleted. For example,

1569

# `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.

1570

# If the service account is undeleted, this value reverts to

1571

# `serviceAccount:{emailid}` and the undeleted service account retains the

1572

# role in the binding.

1573

#

1574

# * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique

1575

# identifier) representing a Google group that has been recently

1576

# deleted. For example, `admins@example.com?uid=123456789012345678901`. If

1577

# the group is recovered, this value reverts to `group:{emailid}` and the

1578

# recovered group retains the role in the binding.

1579

#

1580

#

1581

# * `domain:{domain}`: The G Suite domain (primary) that represents all the

1582

# users of that domain. For example, `google.com` or `example.com`.

1583

#

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

1584

"A String",

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1585

],

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

1586

"role": "A String", # Role that is assigned to `members`.

1587

# For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1588

},

1589

],

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

}</pre>

</div>

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1594

<code class="details" id="testIamPermissions">testIamPermissions(resource, body=None, x__xgafv=None)</code>

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

1595

<pre>Returns permissions that the caller has on the specified table resource.

1596

1597

Args:

1598

resource: string, REQUIRED: The resource for which the policy detail is being requested.

1599

See the operation documentation for the appropriate value for this field. (required)

Dan O'Meara

2020-05-01 07:42:23 -0700

[diff] [blame]

1600

body: object, The request body.

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

1601

The object takes the form of:

1602

1603

{ # Request message for `TestIamPermissions` method.

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

1604

"permissions": [ # The set of permissions to check for the `resource`. Permissions with

1605

# wildcards (such as '*' or 'storage.*') are not allowed. For more

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

1606

# information see

1607

# [IAM Overview](https://cloud.google.com/iam/docs/overview#permissions).

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

1608

"A String",

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

],

}

x__xgafv: string, V1 error format.

Allowed values

1 - v1 error format

2 - v2 error format

Returns:

An object of the form:

1619

1620

{ # Response message for `TestIamPermissions` method.

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

1621

"permissions": [ # A subset of `TestPermissionsRequest.permissions` that the caller is

Bu Sun Kim

2019-06-14 16:50:42 -0700

[diff] [blame]

1622

# allowed.

Bu Sun Kim

2020-05-20 12:08:20 -0700

[diff] [blame^]

1623

"A String",

Bu Sun Kim