blob: 64b4f2d833716c243796e02dc4efa79e4092d47a [file] [log] [blame]
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001<html><body>
2<style>
3
4body, h1, h2, h3, div, span, p, pre, a {
5 margin: 0;
6 padding: 0;
7 border: 0;
8 font-weight: inherit;
9 font-style: inherit;
10 font-size: 100%;
11 font-family: inherit;
12 vertical-align: baseline;
13}
14
15body {
16 font-size: 13px;
17 padding: 1em;
18}
19
20h1 {
21 font-size: 26px;
22 margin-bottom: 1em;
23}
24
25h2 {
26 font-size: 24px;
27 margin-bottom: 1em;
28}
29
30h3 {
31 font-size: 20px;
32 margin-bottom: 1em;
33 margin-top: 1em;
34}
35
36pre, code {
37 line-height: 1.5;
38 font-family: Monaco, 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', 'Lucida Console', monospace;
39}
40
41pre {
42 margin-top: 0.5em;
43}
44
45h1, h2, h3, p {
46 font-family: Arial, sans serif;
47}
48
49h1, h2, h3 {
50 border-bottom: solid #CCC 1px;
51}
52
53.toc_element {
54 margin-top: 0.5em;
55}
56
57.firstline {
58 margin-left: 2 em;
59}
60
61.method {
62 margin-top: 1em;
63 border: solid 1px #CCC;
64 padding: 1em;
65 background: #EEE;
66}
67
68.details {
69 font-weight: bold;
70 font-size: 14px;
71}
72
73</style>
74
75<h1><a href="bigtableadmin_v2.html">Cloud Bigtable Admin API</a> . <a href="bigtableadmin_v2.projects.html">projects</a> . <a href="bigtableadmin_v2.projects.instances.html">instances</a></h1>
76<h2>Instance Methods</h2>
77<p class="toc_element">
78 <code><a href="bigtableadmin_v2.projects.instances.appProfiles.html">appProfiles()</a></code>
79</p>
80<p class="firstline">Returns the appProfiles Resource.</p>
81
82<p class="toc_element">
83 <code><a href="bigtableadmin_v2.projects.instances.clusters.html">clusters()</a></code>
84</p>
85<p class="firstline">Returns the clusters Resource.</p>
86
87<p class="toc_element">
88 <code><a href="bigtableadmin_v2.projects.instances.tables.html">tables()</a></code>
89</p>
90<p class="firstline">Returns the tables Resource.</p>
91
92<p class="toc_element">
Dan O'Mearadd494642020-05-01 07:42:23 -070093 <code><a href="#create">create(parent, body=None, x__xgafv=None)</a></code></p>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -070094<p class="firstline">Create an instance within a project.</p>
95<p class="toc_element">
96 <code><a href="#delete">delete(name, x__xgafv=None)</a></code></p>
97<p class="firstline">Delete an instance from a project.</p>
98<p class="toc_element">
99 <code><a href="#get">get(name, x__xgafv=None)</a></code></p>
100<p class="firstline">Gets information about an instance.</p>
101<p class="toc_element">
102 <code><a href="#getIamPolicy">getIamPolicy(resource, body=None, x__xgafv=None)</a></code></p>
103<p class="firstline">Gets the access control policy for an instance resource. Returns an empty</p>
104<p class="toc_element">
105 <code><a href="#list">list(parent, pageToken=None, x__xgafv=None)</a></code></p>
106<p class="firstline">Lists information about instances in a project.</p>
107<p class="toc_element">
108 <code><a href="#list_next">list_next(previous_request, previous_response)</a></code></p>
109<p class="firstline">Retrieves the next page of results.</p>
110<p class="toc_element">
Dan O'Mearadd494642020-05-01 07:42:23 -0700111 <code><a href="#partialUpdateInstance">partialUpdateInstance(name, body=None, updateMask=None, x__xgafv=None)</a></code></p>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700112<p class="firstline">Partially updates an instance within a project. This method can modify all</p>
113<p class="toc_element">
Dan O'Mearadd494642020-05-01 07:42:23 -0700114 <code><a href="#setIamPolicy">setIamPolicy(resource, body=None, x__xgafv=None)</a></code></p>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700115<p class="firstline">Sets the access control policy on an instance resource. Replaces any</p>
116<p class="toc_element">
Dan O'Mearadd494642020-05-01 07:42:23 -0700117 <code><a href="#testIamPermissions">testIamPermissions(resource, body=None, x__xgafv=None)</a></code></p>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700118<p class="firstline">Returns permissions that the caller has on the specified instance resource.</p>
119<p class="toc_element">
Dan O'Mearadd494642020-05-01 07:42:23 -0700120 <code><a href="#update">update(name, body=None, x__xgafv=None)</a></code></p>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700121<p class="firstline">Updates an instance within a project. This method updates only the display</p>
122<h3>Method Details</h3>
123<div class="method">
Dan O'Mearadd494642020-05-01 07:42:23 -0700124 <code class="details" id="create">create(parent, body=None, x__xgafv=None)</code>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700125 <pre>Create an instance within a project.
126
127Args:
Dan O'Mearadd494642020-05-01 07:42:23 -0700128 parent: string, Required. The unique name of the project in which to create the new instance.
129Values are of the form `projects/{project}`. (required)
130 body: object, The request body.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700131 The object takes the form of:
132
133{ # Request message for BigtableInstanceAdmin.CreateInstance.
Bu Sun Kimd059ad82020-07-22 17:02:09 -0700134 &quot;clusters&quot;: { # Required. The clusters to be created within the instance, mapped by desired
135 # cluster ID, e.g., just `mycluster` rather than
136 # `projects/myproject/instances/myinstance/clusters/mycluster`.
137 # Fields marked `OutputOnly` must be left blank.
138 # Currently, at most four clusters can be specified.
139 &quot;a_key&quot;: { # A resizable group of nodes in a particular cloud location, capable
140 # of serving all Tables in the parent
141 # Instance.
142 &quot;location&quot;: &quot;A String&quot;, # Immutable. The location where this cluster&#x27;s nodes and storage reside. For best
143 # performance, clients should be located as close as possible to this
144 # cluster. Currently only zones are supported, so values should be of the
145 # form `projects/{project}/locations/{zone}`.
146 &quot;name&quot;: &quot;A String&quot;, # The unique name of the cluster. Values are of the form
147 # `projects/{project}/instances/{instance}/clusters/a-z*`.
148 &quot;defaultStorageType&quot;: &quot;A String&quot;, # Immutable. The type of storage used by this cluster to serve its
149 # parent instance&#x27;s tables, unless explicitly overridden.
150 &quot;serveNodes&quot;: 42, # Required. The number of nodes allocated to this cluster. More nodes enable higher
151 # throughput and more consistent performance.
152 &quot;state&quot;: &quot;A String&quot;, # Output only. The current state of the cluster.
153 },
154 },
155 &quot;instanceId&quot;: &quot;A String&quot;, # Required. The ID to be used when referring to the new instance within its project,
156 # e.g., just `myinstance` rather than
157 # `projects/myproject/instances/myinstance`.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700158 &quot;instance&quot;: { # A collection of Bigtable Tables and # Required. The instance to create.
159 # Fields marked `OutputOnly` must be left blank.
160 # the resources that serve them.
161 # All tables in an instance are served from all
162 # Clusters in the instance.
Bu Sun Kimd059ad82020-07-22 17:02:09 -0700163 &quot;state&quot;: &quot;A String&quot;, # Output only. The current state of the instance.
164 &quot;displayName&quot;: &quot;A String&quot;, # Required. The descriptive name for this instance as it appears in UIs.
165 # Can be changed at any time, but should be kept globally unique
166 # to avoid confusion.
167 &quot;name&quot;: &quot;A String&quot;, # The unique name of the instance. Values are of the form
168 # `projects/{project}/instances/a-z+[a-z0-9]`.
169 &quot;type&quot;: &quot;A String&quot;, # Required. The type of the instance. Defaults to `PRODUCTION`.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700170 &quot;labels&quot;: { # Required. Labels are a flexible and lightweight mechanism for organizing cloud
171 # resources into groups that reflect a customer&#x27;s organizational needs and
172 # deployment strategies. They can be used to filter resources and aggregate
173 # metrics.
174 #
175 # * Label keys must be between 1 and 63 characters long and must conform to
176 # the regular expression: `\p{Ll}\p{Lo}{0,62}`.
177 # * Label values must be between 0 and 63 characters long and must conform to
178 # the regular expression: `[\p{Ll}\p{Lo}\p{N}_-]{0,63}`.
179 # * No more than 64 labels can be associated with a given resource.
180 # * Keys and values must both be under 128 bytes.
181 &quot;a_key&quot;: &quot;A String&quot;,
182 },
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700183 },
184 &quot;parent&quot;: &quot;A String&quot;, # Required. The unique name of the project in which to create the new instance.
185 # Values are of the form `projects/{project}`.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700186 }
187
188 x__xgafv: string, V1 error format.
189 Allowed values
190 1 - v1 error format
191 2 - v2 error format
192
193Returns:
194 An object of the form:
195
196 { # This resource represents a long-running operation that is the result of a
197 # network API call.
Bu Sun Kimd059ad82020-07-22 17:02:09 -0700198 &quot;metadata&quot;: { # Service-specific metadata associated with the operation. It typically
199 # contains progress information and common metadata such as create time.
200 # Some services might not provide such metadata. Any method that returns a
201 # long-running operation should document the metadata type, if any.
202 &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
203 },
204 &quot;error&quot;: { # The `Status` type defines a logical error model that is suitable for # The error result of the operation in case of failure or cancellation.
205 # different programming environments, including REST APIs and RPC APIs. It is
206 # used by [gRPC](https://github.com/grpc). Each `Status` message contains
207 # three pieces of data: error code, error message, and error details.
208 #
209 # You can find out more about this error model and how to work with it in the
210 # [API Design Guide](https://cloud.google.com/apis/design/errors).
211 &quot;details&quot;: [ # A list of messages that carry the error details. There is a common set of
212 # message types for APIs to use.
213 {
214 &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
215 },
216 ],
217 &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
218 # user-facing error message should be localized and sent in the
219 # google.rpc.Status.details field, or localized by the client.
220 &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
221 },
Bu Sun Kim65020912020-05-20 12:08:20 -0700222 &quot;response&quot;: { # The normal response of the operation in case of success. If the original
Dan O'Mearadd494642020-05-01 07:42:23 -0700223 # method returns no data on success, such as `Delete`, the response is
224 # `google.protobuf.Empty`. If the original method is standard
225 # `Get`/`Create`/`Update`, the response should be the resource. For other
226 # methods, the response should have the type `XxxResponse`, where `Xxx`
227 # is the original method name. For example, if the original method name
228 # is `TakeSnapshot()`, the inferred response type is
229 # `TakeSnapshotResponse`.
Bu Sun Kim65020912020-05-20 12:08:20 -0700230 &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
Dan O'Mearadd494642020-05-01 07:42:23 -0700231 },
Bu Sun Kim65020912020-05-20 12:08:20 -0700232 &quot;name&quot;: &quot;A String&quot;, # The server-assigned name, which is only unique within the same service that
Dan O'Mearadd494642020-05-01 07:42:23 -0700233 # originally returns it. If you use the default HTTP mapping, the
234 # `name` should be a resource name ending with `operations/{unique_id}`.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700235 &quot;done&quot;: True or False, # If the value is `false`, it means the operation is still in progress.
236 # If `true`, the operation is completed, and either `error` or `response` is
237 # available.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700238 }</pre>
239</div>
240
241<div class="method">
242 <code class="details" id="delete">delete(name, x__xgafv=None)</code>
243 <pre>Delete an instance from a project.
244
245Args:
Dan O'Mearadd494642020-05-01 07:42:23 -0700246 name: string, Required. The unique name of the instance to be deleted.
247Values are of the form `projects/{project}/instances/{instance}`. (required)
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700248 x__xgafv: string, V1 error format.
249 Allowed values
250 1 - v1 error format
251 2 - v2 error format
252
253Returns:
254 An object of the form:
255
256 { # A generic empty message that you can re-use to avoid defining duplicated
257 # empty messages in your APIs. A typical example is to use it as the request
258 # or the response type of an API method. For instance:
259 #
260 # service Foo {
261 # rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty);
262 # }
263 #
264 # The JSON representation for `Empty` is empty JSON object `{}`.
265 }</pre>
266</div>
267
268<div class="method">
269 <code class="details" id="get">get(name, x__xgafv=None)</code>
270 <pre>Gets information about an instance.
271
272Args:
Dan O'Mearadd494642020-05-01 07:42:23 -0700273 name: string, Required. The unique name of the requested instance. Values are of the form
274`projects/{project}/instances/{instance}`. (required)
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700275 x__xgafv: string, V1 error format.
276 Allowed values
277 1 - v1 error format
278 2 - v2 error format
279
280Returns:
281 An object of the form:
282
283 { # A collection of Bigtable Tables and
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700284 # the resources that serve them.
285 # All tables in an instance are served from all
286 # Clusters in the instance.
Bu Sun Kimd059ad82020-07-22 17:02:09 -0700287 &quot;state&quot;: &quot;A String&quot;, # Output only. The current state of the instance.
288 &quot;displayName&quot;: &quot;A String&quot;, # Required. The descriptive name for this instance as it appears in UIs.
289 # Can be changed at any time, but should be kept globally unique
290 # to avoid confusion.
291 &quot;name&quot;: &quot;A String&quot;, # The unique name of the instance. Values are of the form
292 # `projects/{project}/instances/a-z+[a-z0-9]`.
293 &quot;type&quot;: &quot;A String&quot;, # Required. The type of the instance. Defaults to `PRODUCTION`.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700294 &quot;labels&quot;: { # Required. Labels are a flexible and lightweight mechanism for organizing cloud
295 # resources into groups that reflect a customer&#x27;s organizational needs and
296 # deployment strategies. They can be used to filter resources and aggregate
297 # metrics.
298 #
299 # * Label keys must be between 1 and 63 characters long and must conform to
300 # the regular expression: `\p{Ll}\p{Lo}{0,62}`.
301 # * Label values must be between 0 and 63 characters long and must conform to
302 # the regular expression: `[\p{Ll}\p{Lo}\p{N}_-]{0,63}`.
303 # * No more than 64 labels can be associated with a given resource.
304 # * Keys and values must both be under 128 bytes.
305 &quot;a_key&quot;: &quot;A String&quot;,
306 },
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700307 }</pre>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700308</div>
309
310<div class="method">
311 <code class="details" id="getIamPolicy">getIamPolicy(resource, body=None, x__xgafv=None)</code>
312 <pre>Gets the access control policy for an instance resource. Returns an empty
313policy if an instance exists but does not have a policy set.
314
315Args:
316 resource: string, REQUIRED: The resource for which the policy is being requested.
317See the operation documentation for the appropriate value for this field. (required)
318 body: object, The request body.
319 The object takes the form of:
320
321{ # Request message for `GetIamPolicy` method.
Bu Sun Kim65020912020-05-20 12:08:20 -0700322 &quot;options&quot;: { # Encapsulates settings provided to GetIamPolicy. # OPTIONAL: A `GetPolicyOptions` object for specifying options to
Bu Sun Kimd059ad82020-07-22 17:02:09 -0700323 # `GetIamPolicy`.
Bu Sun Kim65020912020-05-20 12:08:20 -0700324 &quot;requestedPolicyVersion&quot;: 42, # Optional. The policy format version to be returned.
Dan O'Mearadd494642020-05-01 07:42:23 -0700325 #
326 # Valid values are 0, 1, and 3. Requests specifying an invalid value will be
327 # rejected.
328 #
329 # Requests for policies with any conditional bindings must specify version 3.
330 # Policies without any conditional bindings may specify any valid value or
331 # leave the field unset.
Bu Sun Kimd059ad82020-07-22 17:02:09 -0700332 #
333 # To learn which resources support conditions in their IAM policies, see the
334 # [IAM
335 # documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
Dan O'Mearadd494642020-05-01 07:42:23 -0700336 },
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700337 }
338
339 x__xgafv: string, V1 error format.
340 Allowed values
341 1 - v1 error format
342 2 - v2 error format
343
344Returns:
345 An object of the form:
346
Dan O'Mearadd494642020-05-01 07:42:23 -0700347 { # An Identity and Access Management (IAM) policy, which specifies access
348 # controls for Google Cloud resources.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700349 #
350 #
Dan O'Mearadd494642020-05-01 07:42:23 -0700351 # A `Policy` is a collection of `bindings`. A `binding` binds one or more
352 # `members` to a single `role`. Members can be user accounts, service accounts,
353 # Google groups, and domains (such as G Suite). A `role` is a named list of
354 # permissions; each `role` can be an IAM predefined role or a user-created
355 # custom role.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700356 #
Bu Sun Kimd059ad82020-07-22 17:02:09 -0700357 # For some types of Google Cloud resources, a `binding` can also specify a
358 # `condition`, which is a logical expression that allows access to a resource
359 # only if the expression evaluates to `true`. A condition can add constraints
360 # based on attributes of the request, the resource, or both. To learn which
361 # resources support conditions in their IAM policies, see the
362 # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
Dan O'Mearadd494642020-05-01 07:42:23 -0700363 #
364 # **JSON example:**
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700365 #
366 # {
Bu Sun Kim65020912020-05-20 12:08:20 -0700367 # &quot;bindings&quot;: [
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700368 # {
Bu Sun Kim65020912020-05-20 12:08:20 -0700369 # &quot;role&quot;: &quot;roles/resourcemanager.organizationAdmin&quot;,
370 # &quot;members&quot;: [
371 # &quot;user:mike@example.com&quot;,
372 # &quot;group:admins@example.com&quot;,
373 # &quot;domain:google.com&quot;,
374 # &quot;serviceAccount:my-project-id@appspot.gserviceaccount.com&quot;
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700375 # ]
376 # },
377 # {
Bu Sun Kim65020912020-05-20 12:08:20 -0700378 # &quot;role&quot;: &quot;roles/resourcemanager.organizationViewer&quot;,
Bu Sun Kimd059ad82020-07-22 17:02:09 -0700379 # &quot;members&quot;: [
380 # &quot;user:eve@example.com&quot;
381 # ],
Bu Sun Kim65020912020-05-20 12:08:20 -0700382 # &quot;condition&quot;: {
383 # &quot;title&quot;: &quot;expirable access&quot;,
384 # &quot;description&quot;: &quot;Does not grant access after Sep 2020&quot;,
385 # &quot;expression&quot;: &quot;request.time &lt; timestamp(&#x27;2020-10-01T00:00:00.000Z&#x27;)&quot;,
Dan O'Mearadd494642020-05-01 07:42:23 -0700386 # }
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700387 # }
Dan O'Mearadd494642020-05-01 07:42:23 -0700388 # ],
Bu Sun Kim65020912020-05-20 12:08:20 -0700389 # &quot;etag&quot;: &quot;BwWWja0YfJA=&quot;,
390 # &quot;version&quot;: 3
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700391 # }
392 #
Dan O'Mearadd494642020-05-01 07:42:23 -0700393 # **YAML example:**
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700394 #
395 # bindings:
396 # - members:
397 # - user:mike@example.com
398 # - group:admins@example.com
399 # - domain:google.com
Dan O'Mearadd494642020-05-01 07:42:23 -0700400 # - serviceAccount:my-project-id@appspot.gserviceaccount.com
401 # role: roles/resourcemanager.organizationAdmin
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700402 # - members:
Dan O'Mearadd494642020-05-01 07:42:23 -0700403 # - user:eve@example.com
404 # role: roles/resourcemanager.organizationViewer
405 # condition:
406 # title: expirable access
407 # description: Does not grant access after Sep 2020
Bu Sun Kim65020912020-05-20 12:08:20 -0700408 # expression: request.time &lt; timestamp(&#x27;2020-10-01T00:00:00.000Z&#x27;)
Dan O'Mearadd494642020-05-01 07:42:23 -0700409 # - etag: BwWWja0YfJA=
410 # - version: 3
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700411 #
412 # For a description of IAM and its features, see the
Dan O'Mearadd494642020-05-01 07:42:23 -0700413 # [IAM documentation](https://cloud.google.com/iam/docs/).
Bu Sun Kim65020912020-05-20 12:08:20 -0700414 &quot;bindings&quot;: [ # Associates a list of `members` to a `role`. Optionally, may specify a
Dan O'Mearadd494642020-05-01 07:42:23 -0700415 # `condition` that determines how and when the `bindings` are applied. Each
416 # of the `bindings` must contain at least one member.
417 { # Associates `members` with a `role`.
Bu Sun Kim65020912020-05-20 12:08:20 -0700418 &quot;condition&quot;: { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.
Bu Sun Kimd059ad82020-07-22 17:02:09 -0700419 #
420 # If the condition evaluates to `true`, then this binding applies to the
421 # current request.
422 #
423 # If the condition evaluates to `false`, then this binding does not apply to
424 # the current request. However, a different role binding might grant the same
425 # role to one or more of the members in this binding.
426 #
427 # To learn which resources support conditions in their IAM policies, see the
428 # [IAM
429 # documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
Bu Sun Kim65020912020-05-20 12:08:20 -0700430 # syntax. CEL is a C-like expression language. The syntax and semantics of CEL
431 # are documented at https://github.com/google/cel-spec.
432 #
433 # Example (Comparison):
434 #
435 # title: &quot;Summary size limit&quot;
436 # description: &quot;Determines if a summary is less than 100 chars&quot;
437 # expression: &quot;document.summary.size() &lt; 100&quot;
438 #
439 # Example (Equality):
440 #
441 # title: &quot;Requestor is owner&quot;
442 # description: &quot;Determines if requestor is the document owner&quot;
443 # expression: &quot;document.owner == request.auth.claims.email&quot;
444 #
445 # Example (Logic):
446 #
447 # title: &quot;Public documents&quot;
448 # description: &quot;Determine whether the document should be publicly visible&quot;
449 # expression: &quot;document.type != &#x27;private&#x27; &amp;&amp; document.type != &#x27;internal&#x27;&quot;
450 #
451 # Example (Data Manipulation):
452 #
453 # title: &quot;Notification string&quot;
454 # description: &quot;Create a notification string with a timestamp.&quot;
455 # expression: &quot;&#x27;New message received at &#x27; + string(document.create_time)&quot;
456 #
457 # The exact variables and functions that may be referenced within an expression
458 # are determined by the service that evaluates it. See the service
459 # documentation for additional information.
Bu Sun Kimd059ad82020-07-22 17:02:09 -0700460 &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
461 # syntax.
462 &quot;description&quot;: &quot;A String&quot;, # Optional. Description of the expression. This is a longer text which
463 # describes the expression, e.g. when hovered over it in a UI.
464 &quot;location&quot;: &quot;A String&quot;, # Optional. String indicating the location of the expression for error
465 # reporting, e.g. a file name and a position in the file.
Bu Sun Kim65020912020-05-20 12:08:20 -0700466 &quot;title&quot;: &quot;A String&quot;, # Optional. Title for the expression, i.e. a short string describing
467 # its purpose. This can be used e.g. in UIs which allow to enter the
468 # expression.
Bu Sun Kim65020912020-05-20 12:08:20 -0700469 },
470 &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
Dan O'Mearadd494642020-05-01 07:42:23 -0700471 # `members` can have the following values:
472 #
473 # * `allUsers`: A special identifier that represents anyone who is
474 # on the internet; with or without a Google account.
475 #
476 # * `allAuthenticatedUsers`: A special identifier that represents anyone
477 # who is authenticated with a Google account or a service account.
478 #
479 # * `user:{emailid}`: An email address that represents a specific Google
480 # account. For example, `alice@example.com` .
481 #
482 #
483 # * `serviceAccount:{emailid}`: An email address that represents a service
484 # account. For example, `my-other-app@appspot.gserviceaccount.com`.
485 #
486 # * `group:{emailid}`: An email address that represents a Google group.
487 # For example, `admins@example.com`.
488 #
489 # * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
490 # identifier) representing a user that has been recently deleted. For
491 # example, `alice@example.com?uid=123456789012345678901`. If the user is
492 # recovered, this value reverts to `user:{emailid}` and the recovered user
493 # retains the role in the binding.
494 #
495 # * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
496 # unique identifier) representing a service account that has been recently
497 # deleted. For example,
498 # `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
499 # If the service account is undeleted, this value reverts to
500 # `serviceAccount:{emailid}` and the undeleted service account retains the
501 # role in the binding.
502 #
503 # * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
504 # identifier) representing a Google group that has been recently
505 # deleted. For example, `admins@example.com?uid=123456789012345678901`. If
506 # the group is recovered, this value reverts to `group:{emailid}` and the
507 # recovered group retains the role in the binding.
508 #
509 #
510 # * `domain:{domain}`: The G Suite domain (primary) that represents all the
511 # users of that domain. For example, `google.com` or `example.com`.
512 #
Bu Sun Kim65020912020-05-20 12:08:20 -0700513 &quot;A String&quot;,
Dan O'Mearadd494642020-05-01 07:42:23 -0700514 ],
Bu Sun Kim65020912020-05-20 12:08:20 -0700515 &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to `members`.
516 # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
Dan O'Mearadd494642020-05-01 07:42:23 -0700517 },
518 ],
Bu Sun Kimd059ad82020-07-22 17:02:09 -0700519 &quot;auditConfigs&quot;: [ # Specifies cloud audit logging configuration for this policy.
520 { # Specifies the audit configuration for a service.
521 # The configuration determines which permission types are logged, and what
522 # identities, if any, are exempted from logging.
523 # An AuditConfig must have one or more AuditLogConfigs.
524 #
525 # If there are AuditConfigs for both `allServices` and a specific service,
526 # the union of the two AuditConfigs is used for that service: the log_types
527 # specified in each AuditConfig are enabled, and the exempted_members in each
528 # AuditLogConfig are exempted.
529 #
530 # Example Policy with multiple AuditConfigs:
531 #
532 # {
533 # &quot;audit_configs&quot;: [
534 # {
535 # &quot;service&quot;: &quot;allServices&quot;,
536 # &quot;audit_log_configs&quot;: [
537 # {
538 # &quot;log_type&quot;: &quot;DATA_READ&quot;,
539 # &quot;exempted_members&quot;: [
540 # &quot;user:jose@example.com&quot;
541 # ]
542 # },
543 # {
544 # &quot;log_type&quot;: &quot;DATA_WRITE&quot;
545 # },
546 # {
547 # &quot;log_type&quot;: &quot;ADMIN_READ&quot;
548 # }
549 # ]
550 # },
551 # {
552 # &quot;service&quot;: &quot;sampleservice.googleapis.com&quot;,
553 # &quot;audit_log_configs&quot;: [
554 # {
555 # &quot;log_type&quot;: &quot;DATA_READ&quot;
556 # },
557 # {
558 # &quot;log_type&quot;: &quot;DATA_WRITE&quot;,
559 # &quot;exempted_members&quot;: [
560 # &quot;user:aliya@example.com&quot;
561 # ]
562 # }
563 # ]
564 # }
565 # ]
566 # }
567 #
568 # For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ
569 # logging. It also exempts jose@example.com from DATA_READ logging, and
570 # aliya@example.com from DATA_WRITE logging.
571 &quot;auditLogConfigs&quot;: [ # The configuration for logging of each type of permission.
572 { # Provides the configuration for logging a type of permissions.
573 # Example:
574 #
575 # {
576 # &quot;audit_log_configs&quot;: [
577 # {
578 # &quot;log_type&quot;: &quot;DATA_READ&quot;,
579 # &quot;exempted_members&quot;: [
580 # &quot;user:jose@example.com&quot;
581 # ]
582 # },
583 # {
584 # &quot;log_type&quot;: &quot;DATA_WRITE&quot;
585 # }
586 # ]
587 # }
588 #
589 # This enables &#x27;DATA_READ&#x27; and &#x27;DATA_WRITE&#x27; logging, while exempting
590 # jose@example.com from DATA_READ logging.
591 &quot;exemptedMembers&quot;: [ # Specifies the identities that do not cause logging for this type of
592 # permission.
593 # Follows the same format of Binding.members.
594 &quot;A String&quot;,
595 ],
596 &quot;logType&quot;: &quot;A String&quot;, # The log type that this config enables.
597 },
598 ],
599 &quot;service&quot;: &quot;A String&quot;, # Specifies a service that will be enabled for audit logging.
600 # For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
601 # `allServices` is a special value that covers all services.
602 },
603 ],
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700604 &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
605 # prevent simultaneous updates of a policy from overwriting each other.
606 # It is strongly suggested that systems make use of the `etag` in the
607 # read-modify-write cycle to perform policy updates in order to avoid race
608 # conditions: An `etag` is returned in the response to `getIamPolicy`, and
609 # systems are expected to put that etag in the request to `setIamPolicy` to
610 # ensure that their change will be applied to the same version of the policy.
611 #
612 # **Important:** If you use IAM Conditions, you must include the `etag` field
613 # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
614 # you to overwrite a version `3` policy with a version `1` policy, and all of
615 # the conditions in the version `3` policy are lost.
Bu Sun Kimd059ad82020-07-22 17:02:09 -0700616 &quot;version&quot;: 42, # Specifies the format of the policy.
617 #
618 # Valid values are `0`, `1`, and `3`. Requests that specify an invalid value
619 # are rejected.
620 #
621 # Any operation that affects conditional role bindings must specify version
622 # `3`. This requirement applies to the following operations:
623 #
624 # * Getting a policy that includes a conditional role binding
625 # * Adding a conditional role binding to a policy
626 # * Changing a conditional role binding in a policy
627 # * Removing any role binding, with or without a condition, from a policy
628 # that includes conditions
629 #
630 # **Important:** If you use IAM Conditions, you must include the `etag` field
631 # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
632 # you to overwrite a version `3` policy with a version `1` policy, and all of
633 # the conditions in the version `3` policy are lost.
634 #
635 # If a policy does not include any conditions, operations on that policy may
636 # specify any valid version or leave the field unset.
637 #
638 # To learn which resources support conditions in their IAM policies, see the
639 # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700640 }</pre>
641</div>
642
643<div class="method">
644 <code class="details" id="list">list(parent, pageToken=None, x__xgafv=None)</code>
645 <pre>Lists information about instances in a project.
646
647Args:
Dan O'Mearadd494642020-05-01 07:42:23 -0700648 parent: string, Required. The unique name of the project for which a list of instances is requested.
649Values are of the form `projects/{project}`. (required)
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700650 pageToken: string, DEPRECATED: This field is unused and ignored.
651 x__xgafv: string, V1 error format.
652 Allowed values
653 1 - v1 error format
654 2 - v2 error format
655
656Returns:
657 An object of the form:
658
659 { # Response message for BigtableInstanceAdmin.ListInstances.
Bu Sun Kim65020912020-05-20 12:08:20 -0700660 &quot;failedLocations&quot;: [ # Locations from which Instance information could not be retrieved,
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700661 # due to an outage or some other transient condition.
662 # Instances whose Clusters are all in one of the failed locations
663 # may be missing from `instances`, and Instances with at least one
664 # Cluster in a failed location may only have partial information returned.
Dan O'Mearadd494642020-05-01 07:42:23 -0700665 # Values are of the form `projects/&lt;project&gt;/locations/&lt;zone_id&gt;`
Bu Sun Kim65020912020-05-20 12:08:20 -0700666 &quot;A String&quot;,
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700667 ],
Bu Sun Kim65020912020-05-20 12:08:20 -0700668 &quot;nextPageToken&quot;: &quot;A String&quot;, # DEPRECATED: This field is unused and ignored.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700669 &quot;instances&quot;: [ # The list of requested instances.
670 { # A collection of Bigtable Tables and
671 # the resources that serve them.
672 # All tables in an instance are served from all
673 # Clusters in the instance.
Bu Sun Kimd059ad82020-07-22 17:02:09 -0700674 &quot;state&quot;: &quot;A String&quot;, # Output only. The current state of the instance.
675 &quot;displayName&quot;: &quot;A String&quot;, # Required. The descriptive name for this instance as it appears in UIs.
676 # Can be changed at any time, but should be kept globally unique
677 # to avoid confusion.
678 &quot;name&quot;: &quot;A String&quot;, # The unique name of the instance. Values are of the form
679 # `projects/{project}/instances/a-z+[a-z0-9]`.
680 &quot;type&quot;: &quot;A String&quot;, # Required. The type of the instance. Defaults to `PRODUCTION`.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700681 &quot;labels&quot;: { # Required. Labels are a flexible and lightweight mechanism for organizing cloud
682 # resources into groups that reflect a customer&#x27;s organizational needs and
683 # deployment strategies. They can be used to filter resources and aggregate
684 # metrics.
685 #
686 # * Label keys must be between 1 and 63 characters long and must conform to
687 # the regular expression: `\p{Ll}\p{Lo}{0,62}`.
688 # * Label values must be between 0 and 63 characters long and must conform to
689 # the regular expression: `[\p{Ll}\p{Lo}\p{N}_-]{0,63}`.
690 # * No more than 64 labels can be associated with a given resource.
691 # * Keys and values must both be under 128 bytes.
692 &quot;a_key&quot;: &quot;A String&quot;,
693 },
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700694 },
695 ],
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700696 }</pre>
697</div>
698
699<div class="method">
700 <code class="details" id="list_next">list_next(previous_request, previous_response)</code>
701 <pre>Retrieves the next page of results.
702
703Args:
704 previous_request: The request for the previous page. (required)
705 previous_response: The response from the request for the previous page. (required)
706
707Returns:
Bu Sun Kim65020912020-05-20 12:08:20 -0700708 A request object that you can call &#x27;execute()&#x27; on to request the next
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700709 page. Returns None if there are no more items in the collection.
710 </pre>
711</div>
712
713<div class="method">
Dan O'Mearadd494642020-05-01 07:42:23 -0700714 <code class="details" id="partialUpdateInstance">partialUpdateInstance(name, body=None, updateMask=None, x__xgafv=None)</code>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700715 <pre>Partially updates an instance within a project. This method can modify all
716fields of an Instance and is the preferred way to update an Instance.
717
718Args:
Bu Sun Kimd059ad82020-07-22 17:02:09 -0700719 name: string, The unique name of the instance. Values are of the form
Dan O'Mearadd494642020-05-01 07:42:23 -0700720`projects/{project}/instances/a-z+[a-z0-9]`. (required)
721 body: object, The request body.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700722 The object takes the form of:
723
724{ # A collection of Bigtable Tables and
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700725 # the resources that serve them.
726 # All tables in an instance are served from all
727 # Clusters in the instance.
Bu Sun Kimd059ad82020-07-22 17:02:09 -0700728 &quot;state&quot;: &quot;A String&quot;, # Output only. The current state of the instance.
729 &quot;displayName&quot;: &quot;A String&quot;, # Required. The descriptive name for this instance as it appears in UIs.
730 # Can be changed at any time, but should be kept globally unique
731 # to avoid confusion.
732 &quot;name&quot;: &quot;A String&quot;, # The unique name of the instance. Values are of the form
733 # `projects/{project}/instances/a-z+[a-z0-9]`.
734 &quot;type&quot;: &quot;A String&quot;, # Required. The type of the instance. Defaults to `PRODUCTION`.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700735 &quot;labels&quot;: { # Required. Labels are a flexible and lightweight mechanism for organizing cloud
736 # resources into groups that reflect a customer&#x27;s organizational needs and
737 # deployment strategies. They can be used to filter resources and aggregate
738 # metrics.
739 #
740 # * Label keys must be between 1 and 63 characters long and must conform to
741 # the regular expression: `\p{Ll}\p{Lo}{0,62}`.
742 # * Label values must be between 0 and 63 characters long and must conform to
743 # the regular expression: `[\p{Ll}\p{Lo}\p{N}_-]{0,63}`.
744 # * No more than 64 labels can be associated with a given resource.
745 # * Keys and values must both be under 128 bytes.
746 &quot;a_key&quot;: &quot;A String&quot;,
747 },
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700748 }
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700749
Dan O'Mearadd494642020-05-01 07:42:23 -0700750 updateMask: string, Required. The subset of Instance fields which should be replaced.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700751Must be explicitly set.
752 x__xgafv: string, V1 error format.
753 Allowed values
754 1 - v1 error format
755 2 - v2 error format
756
757Returns:
758 An object of the form:
759
760 { # This resource represents a long-running operation that is the result of a
761 # network API call.
Bu Sun Kimd059ad82020-07-22 17:02:09 -0700762 &quot;metadata&quot;: { # Service-specific metadata associated with the operation. It typically
763 # contains progress information and common metadata such as create time.
764 # Some services might not provide such metadata. Any method that returns a
765 # long-running operation should document the metadata type, if any.
766 &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
767 },
768 &quot;error&quot;: { # The `Status` type defines a logical error model that is suitable for # The error result of the operation in case of failure or cancellation.
769 # different programming environments, including REST APIs and RPC APIs. It is
770 # used by [gRPC](https://github.com/grpc). Each `Status` message contains
771 # three pieces of data: error code, error message, and error details.
772 #
773 # You can find out more about this error model and how to work with it in the
774 # [API Design Guide](https://cloud.google.com/apis/design/errors).
775 &quot;details&quot;: [ # A list of messages that carry the error details. There is a common set of
776 # message types for APIs to use.
777 {
778 &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
779 },
780 ],
781 &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
782 # user-facing error message should be localized and sent in the
783 # google.rpc.Status.details field, or localized by the client.
784 &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
785 },
Bu Sun Kim65020912020-05-20 12:08:20 -0700786 &quot;response&quot;: { # The normal response of the operation in case of success. If the original
Dan O'Mearadd494642020-05-01 07:42:23 -0700787 # method returns no data on success, such as `Delete`, the response is
788 # `google.protobuf.Empty`. If the original method is standard
789 # `Get`/`Create`/`Update`, the response should be the resource. For other
790 # methods, the response should have the type `XxxResponse`, where `Xxx`
791 # is the original method name. For example, if the original method name
792 # is `TakeSnapshot()`, the inferred response type is
793 # `TakeSnapshotResponse`.
Bu Sun Kim65020912020-05-20 12:08:20 -0700794 &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
Dan O'Mearadd494642020-05-01 07:42:23 -0700795 },
Bu Sun Kim65020912020-05-20 12:08:20 -0700796 &quot;name&quot;: &quot;A String&quot;, # The server-assigned name, which is only unique within the same service that
Dan O'Mearadd494642020-05-01 07:42:23 -0700797 # originally returns it. If you use the default HTTP mapping, the
798 # `name` should be a resource name ending with `operations/{unique_id}`.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700799 &quot;done&quot;: True or False, # If the value is `false`, it means the operation is still in progress.
800 # If `true`, the operation is completed, and either `error` or `response` is
801 # available.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700802 }</pre>
803</div>
804
805<div class="method">
Dan O'Mearadd494642020-05-01 07:42:23 -0700806 <code class="details" id="setIamPolicy">setIamPolicy(resource, body=None, x__xgafv=None)</code>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700807 <pre>Sets the access control policy on an instance resource. Replaces any
808existing policy.
809
810Args:
811 resource: string, REQUIRED: The resource for which the policy is being specified.
812See the operation documentation for the appropriate value for this field. (required)
Dan O'Mearadd494642020-05-01 07:42:23 -0700813 body: object, The request body.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700814 The object takes the form of:
815
816{ # Request message for `SetIamPolicy` method.
Bu Sun Kimd059ad82020-07-22 17:02:09 -0700817 &quot;updateMask&quot;: &quot;A String&quot;, # OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only
818 # the fields in the mask will be modified. If no mask is provided, the
819 # following default mask is used:
820 #
821 # `paths: &quot;bindings, etag&quot;`
Bu Sun Kim65020912020-05-20 12:08:20 -0700822 &quot;policy&quot;: { # An Identity and Access Management (IAM) policy, which specifies access # REQUIRED: The complete policy to be applied to the `resource`. The size of
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700823 # the policy is limited to a few 10s of KB. An empty policy is a
824 # valid policy but certain Cloud Platform services (such as Projects)
825 # might reject them.
Dan O'Mearadd494642020-05-01 07:42:23 -0700826 # controls for Google Cloud resources.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700827 #
828 #
Dan O'Mearadd494642020-05-01 07:42:23 -0700829 # A `Policy` is a collection of `bindings`. A `binding` binds one or more
830 # `members` to a single `role`. Members can be user accounts, service accounts,
831 # Google groups, and domains (such as G Suite). A `role` is a named list of
832 # permissions; each `role` can be an IAM predefined role or a user-created
833 # custom role.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700834 #
Bu Sun Kimd059ad82020-07-22 17:02:09 -0700835 # For some types of Google Cloud resources, a `binding` can also specify a
836 # `condition`, which is a logical expression that allows access to a resource
837 # only if the expression evaluates to `true`. A condition can add constraints
838 # based on attributes of the request, the resource, or both. To learn which
839 # resources support conditions in their IAM policies, see the
840 # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
Dan O'Mearadd494642020-05-01 07:42:23 -0700841 #
842 # **JSON example:**
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700843 #
844 # {
Bu Sun Kim65020912020-05-20 12:08:20 -0700845 # &quot;bindings&quot;: [
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700846 # {
Bu Sun Kim65020912020-05-20 12:08:20 -0700847 # &quot;role&quot;: &quot;roles/resourcemanager.organizationAdmin&quot;,
848 # &quot;members&quot;: [
849 # &quot;user:mike@example.com&quot;,
850 # &quot;group:admins@example.com&quot;,
851 # &quot;domain:google.com&quot;,
852 # &quot;serviceAccount:my-project-id@appspot.gserviceaccount.com&quot;
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700853 # ]
854 # },
855 # {
Bu Sun Kim65020912020-05-20 12:08:20 -0700856 # &quot;role&quot;: &quot;roles/resourcemanager.organizationViewer&quot;,
Bu Sun Kimd059ad82020-07-22 17:02:09 -0700857 # &quot;members&quot;: [
858 # &quot;user:eve@example.com&quot;
859 # ],
Bu Sun Kim65020912020-05-20 12:08:20 -0700860 # &quot;condition&quot;: {
861 # &quot;title&quot;: &quot;expirable access&quot;,
862 # &quot;description&quot;: &quot;Does not grant access after Sep 2020&quot;,
863 # &quot;expression&quot;: &quot;request.time &lt; timestamp(&#x27;2020-10-01T00:00:00.000Z&#x27;)&quot;,
Dan O'Mearadd494642020-05-01 07:42:23 -0700864 # }
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700865 # }
Dan O'Mearadd494642020-05-01 07:42:23 -0700866 # ],
Bu Sun Kim65020912020-05-20 12:08:20 -0700867 # &quot;etag&quot;: &quot;BwWWja0YfJA=&quot;,
868 # &quot;version&quot;: 3
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700869 # }
870 #
Dan O'Mearadd494642020-05-01 07:42:23 -0700871 # **YAML example:**
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700872 #
873 # bindings:
874 # - members:
875 # - user:mike@example.com
876 # - group:admins@example.com
877 # - domain:google.com
Dan O'Mearadd494642020-05-01 07:42:23 -0700878 # - serviceAccount:my-project-id@appspot.gserviceaccount.com
879 # role: roles/resourcemanager.organizationAdmin
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700880 # - members:
Dan O'Mearadd494642020-05-01 07:42:23 -0700881 # - user:eve@example.com
882 # role: roles/resourcemanager.organizationViewer
883 # condition:
884 # title: expirable access
885 # description: Does not grant access after Sep 2020
Bu Sun Kim65020912020-05-20 12:08:20 -0700886 # expression: request.time &lt; timestamp(&#x27;2020-10-01T00:00:00.000Z&#x27;)
Dan O'Mearadd494642020-05-01 07:42:23 -0700887 # - etag: BwWWja0YfJA=
888 # - version: 3
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700889 #
890 # For a description of IAM and its features, see the
Dan O'Mearadd494642020-05-01 07:42:23 -0700891 # [IAM documentation](https://cloud.google.com/iam/docs/).
Bu Sun Kim65020912020-05-20 12:08:20 -0700892 &quot;bindings&quot;: [ # Associates a list of `members` to a `role`. Optionally, may specify a
Dan O'Mearadd494642020-05-01 07:42:23 -0700893 # `condition` that determines how and when the `bindings` are applied. Each
894 # of the `bindings` must contain at least one member.
895 { # Associates `members` with a `role`.
Bu Sun Kim65020912020-05-20 12:08:20 -0700896 &quot;condition&quot;: { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.
Bu Sun Kimd059ad82020-07-22 17:02:09 -0700897 #
898 # If the condition evaluates to `true`, then this binding applies to the
899 # current request.
900 #
901 # If the condition evaluates to `false`, then this binding does not apply to
902 # the current request. However, a different role binding might grant the same
903 # role to one or more of the members in this binding.
904 #
905 # To learn which resources support conditions in their IAM policies, see the
906 # [IAM
907 # documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
Bu Sun Kim65020912020-05-20 12:08:20 -0700908 # syntax. CEL is a C-like expression language. The syntax and semantics of CEL
909 # are documented at https://github.com/google/cel-spec.
910 #
911 # Example (Comparison):
912 #
913 # title: &quot;Summary size limit&quot;
914 # description: &quot;Determines if a summary is less than 100 chars&quot;
915 # expression: &quot;document.summary.size() &lt; 100&quot;
916 #
917 # Example (Equality):
918 #
919 # title: &quot;Requestor is owner&quot;
920 # description: &quot;Determines if requestor is the document owner&quot;
921 # expression: &quot;document.owner == request.auth.claims.email&quot;
922 #
923 # Example (Logic):
924 #
925 # title: &quot;Public documents&quot;
926 # description: &quot;Determine whether the document should be publicly visible&quot;
927 # expression: &quot;document.type != &#x27;private&#x27; &amp;&amp; document.type != &#x27;internal&#x27;&quot;
928 #
929 # Example (Data Manipulation):
930 #
931 # title: &quot;Notification string&quot;
932 # description: &quot;Create a notification string with a timestamp.&quot;
933 # expression: &quot;&#x27;New message received at &#x27; + string(document.create_time)&quot;
934 #
935 # The exact variables and functions that may be referenced within an expression
936 # are determined by the service that evaluates it. See the service
937 # documentation for additional information.
Bu Sun Kimd059ad82020-07-22 17:02:09 -0700938 &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
939 # syntax.
940 &quot;description&quot;: &quot;A String&quot;, # Optional. Description of the expression. This is a longer text which
941 # describes the expression, e.g. when hovered over it in a UI.
942 &quot;location&quot;: &quot;A String&quot;, # Optional. String indicating the location of the expression for error
943 # reporting, e.g. a file name and a position in the file.
Bu Sun Kim65020912020-05-20 12:08:20 -0700944 &quot;title&quot;: &quot;A String&quot;, # Optional. Title for the expression, i.e. a short string describing
945 # its purpose. This can be used e.g. in UIs which allow to enter the
946 # expression.
Bu Sun Kim65020912020-05-20 12:08:20 -0700947 },
948 &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
Dan O'Mearadd494642020-05-01 07:42:23 -0700949 # `members` can have the following values:
950 #
951 # * `allUsers`: A special identifier that represents anyone who is
952 # on the internet; with or without a Google account.
953 #
954 # * `allAuthenticatedUsers`: A special identifier that represents anyone
955 # who is authenticated with a Google account or a service account.
956 #
957 # * `user:{emailid}`: An email address that represents a specific Google
958 # account. For example, `alice@example.com` .
959 #
960 #
961 # * `serviceAccount:{emailid}`: An email address that represents a service
962 # account. For example, `my-other-app@appspot.gserviceaccount.com`.
963 #
964 # * `group:{emailid}`: An email address that represents a Google group.
965 # For example, `admins@example.com`.
966 #
967 # * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
968 # identifier) representing a user that has been recently deleted. For
969 # example, `alice@example.com?uid=123456789012345678901`. If the user is
970 # recovered, this value reverts to `user:{emailid}` and the recovered user
971 # retains the role in the binding.
972 #
973 # * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
974 # unique identifier) representing a service account that has been recently
975 # deleted. For example,
976 # `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
977 # If the service account is undeleted, this value reverts to
978 # `serviceAccount:{emailid}` and the undeleted service account retains the
979 # role in the binding.
980 #
981 # * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
982 # identifier) representing a Google group that has been recently
983 # deleted. For example, `admins@example.com?uid=123456789012345678901`. If
984 # the group is recovered, this value reverts to `group:{emailid}` and the
985 # recovered group retains the role in the binding.
986 #
987 #
988 # * `domain:{domain}`: The G Suite domain (primary) that represents all the
989 # users of that domain. For example, `google.com` or `example.com`.
990 #
Bu Sun Kim65020912020-05-20 12:08:20 -0700991 &quot;A String&quot;,
Dan O'Mearadd494642020-05-01 07:42:23 -0700992 ],
Bu Sun Kim65020912020-05-20 12:08:20 -0700993 &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to `members`.
994 # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
Dan O'Mearadd494642020-05-01 07:42:23 -0700995 },
996 ],
Bu Sun Kimd059ad82020-07-22 17:02:09 -0700997 &quot;auditConfigs&quot;: [ # Specifies cloud audit logging configuration for this policy.
998 { # Specifies the audit configuration for a service.
999 # The configuration determines which permission types are logged, and what
1000 # identities, if any, are exempted from logging.
1001 # An AuditConfig must have one or more AuditLogConfigs.
1002 #
1003 # If there are AuditConfigs for both `allServices` and a specific service,
1004 # the union of the two AuditConfigs is used for that service: the log_types
1005 # specified in each AuditConfig are enabled, and the exempted_members in each
1006 # AuditLogConfig are exempted.
1007 #
1008 # Example Policy with multiple AuditConfigs:
1009 #
1010 # {
1011 # &quot;audit_configs&quot;: [
1012 # {
1013 # &quot;service&quot;: &quot;allServices&quot;,
1014 # &quot;audit_log_configs&quot;: [
1015 # {
1016 # &quot;log_type&quot;: &quot;DATA_READ&quot;,
1017 # &quot;exempted_members&quot;: [
1018 # &quot;user:jose@example.com&quot;
1019 # ]
1020 # },
1021 # {
1022 # &quot;log_type&quot;: &quot;DATA_WRITE&quot;
1023 # },
1024 # {
1025 # &quot;log_type&quot;: &quot;ADMIN_READ&quot;
1026 # }
1027 # ]
1028 # },
1029 # {
1030 # &quot;service&quot;: &quot;sampleservice.googleapis.com&quot;,
1031 # &quot;audit_log_configs&quot;: [
1032 # {
1033 # &quot;log_type&quot;: &quot;DATA_READ&quot;
1034 # },
1035 # {
1036 # &quot;log_type&quot;: &quot;DATA_WRITE&quot;,
1037 # &quot;exempted_members&quot;: [
1038 # &quot;user:aliya@example.com&quot;
1039 # ]
1040 # }
1041 # ]
1042 # }
1043 # ]
1044 # }
1045 #
1046 # For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ
1047 # logging. It also exempts jose@example.com from DATA_READ logging, and
1048 # aliya@example.com from DATA_WRITE logging.
1049 &quot;auditLogConfigs&quot;: [ # The configuration for logging of each type of permission.
1050 { # Provides the configuration for logging a type of permissions.
1051 # Example:
1052 #
1053 # {
1054 # &quot;audit_log_configs&quot;: [
1055 # {
1056 # &quot;log_type&quot;: &quot;DATA_READ&quot;,
1057 # &quot;exempted_members&quot;: [
1058 # &quot;user:jose@example.com&quot;
1059 # ]
1060 # },
1061 # {
1062 # &quot;log_type&quot;: &quot;DATA_WRITE&quot;
1063 # }
1064 # ]
1065 # }
1066 #
1067 # This enables &#x27;DATA_READ&#x27; and &#x27;DATA_WRITE&#x27; logging, while exempting
1068 # jose@example.com from DATA_READ logging.
1069 &quot;exemptedMembers&quot;: [ # Specifies the identities that do not cause logging for this type of
1070 # permission.
1071 # Follows the same format of Binding.members.
1072 &quot;A String&quot;,
1073 ],
1074 &quot;logType&quot;: &quot;A String&quot;, # The log type that this config enables.
1075 },
1076 ],
1077 &quot;service&quot;: &quot;A String&quot;, # Specifies a service that will be enabled for audit logging.
1078 # For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
1079 # `allServices` is a special value that covers all services.
1080 },
1081 ],
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -07001082 &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
1083 # prevent simultaneous updates of a policy from overwriting each other.
1084 # It is strongly suggested that systems make use of the `etag` in the
1085 # read-modify-write cycle to perform policy updates in order to avoid race
1086 # conditions: An `etag` is returned in the response to `getIamPolicy`, and
1087 # systems are expected to put that etag in the request to `setIamPolicy` to
1088 # ensure that their change will be applied to the same version of the policy.
1089 #
1090 # **Important:** If you use IAM Conditions, you must include the `etag` field
1091 # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
1092 # you to overwrite a version `3` policy with a version `1` policy, and all of
1093 # the conditions in the version `3` policy are lost.
Bu Sun Kimd059ad82020-07-22 17:02:09 -07001094 &quot;version&quot;: 42, # Specifies the format of the policy.
1095 #
1096 # Valid values are `0`, `1`, and `3`. Requests that specify an invalid value
1097 # are rejected.
1098 #
1099 # Any operation that affects conditional role bindings must specify version
1100 # `3`. This requirement applies to the following operations:
1101 #
1102 # * Getting a policy that includes a conditional role binding
1103 # * Adding a conditional role binding to a policy
1104 # * Changing a conditional role binding in a policy
1105 # * Removing any role binding, with or without a condition, from a policy
1106 # that includes conditions
1107 #
1108 # **Important:** If you use IAM Conditions, you must include the `etag` field
1109 # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
1110 # you to overwrite a version `3` policy with a version `1` policy, and all of
1111 # the conditions in the version `3` policy are lost.
1112 #
1113 # If a policy does not include any conditions, operations on that policy may
1114 # specify any valid version or leave the field unset.
1115 #
1116 # To learn which resources support conditions in their IAM policies, see the
1117 # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001118 },
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001119 }
1120
1121 x__xgafv: string, V1 error format.
1122 Allowed values
1123 1 - v1 error format
1124 2 - v2 error format
1125
1126Returns:
1127 An object of the form:
1128
Dan O'Mearadd494642020-05-01 07:42:23 -07001129 { # An Identity and Access Management (IAM) policy, which specifies access
1130 # controls for Google Cloud resources.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001131 #
1132 #
Dan O'Mearadd494642020-05-01 07:42:23 -07001133 # A `Policy` is a collection of `bindings`. A `binding` binds one or more
1134 # `members` to a single `role`. Members can be user accounts, service accounts,
1135 # Google groups, and domains (such as G Suite). A `role` is a named list of
1136 # permissions; each `role` can be an IAM predefined role or a user-created
1137 # custom role.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001138 #
Bu Sun Kimd059ad82020-07-22 17:02:09 -07001139 # For some types of Google Cloud resources, a `binding` can also specify a
1140 # `condition`, which is a logical expression that allows access to a resource
1141 # only if the expression evaluates to `true`. A condition can add constraints
1142 # based on attributes of the request, the resource, or both. To learn which
1143 # resources support conditions in their IAM policies, see the
1144 # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
Dan O'Mearadd494642020-05-01 07:42:23 -07001145 #
1146 # **JSON example:**
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001147 #
1148 # {
Bu Sun Kim65020912020-05-20 12:08:20 -07001149 # &quot;bindings&quot;: [
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001150 # {
Bu Sun Kim65020912020-05-20 12:08:20 -07001151 # &quot;role&quot;: &quot;roles/resourcemanager.organizationAdmin&quot;,
1152 # &quot;members&quot;: [
1153 # &quot;user:mike@example.com&quot;,
1154 # &quot;group:admins@example.com&quot;,
1155 # &quot;domain:google.com&quot;,
1156 # &quot;serviceAccount:my-project-id@appspot.gserviceaccount.com&quot;
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001157 # ]
1158 # },
1159 # {
Bu Sun Kim65020912020-05-20 12:08:20 -07001160 # &quot;role&quot;: &quot;roles/resourcemanager.organizationViewer&quot;,
Bu Sun Kimd059ad82020-07-22 17:02:09 -07001161 # &quot;members&quot;: [
1162 # &quot;user:eve@example.com&quot;
1163 # ],
Bu Sun Kim65020912020-05-20 12:08:20 -07001164 # &quot;condition&quot;: {
1165 # &quot;title&quot;: &quot;expirable access&quot;,
1166 # &quot;description&quot;: &quot;Does not grant access after Sep 2020&quot;,
1167 # &quot;expression&quot;: &quot;request.time &lt; timestamp(&#x27;2020-10-01T00:00:00.000Z&#x27;)&quot;,
Dan O'Mearadd494642020-05-01 07:42:23 -07001168 # }
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001169 # }
Dan O'Mearadd494642020-05-01 07:42:23 -07001170 # ],
Bu Sun Kim65020912020-05-20 12:08:20 -07001171 # &quot;etag&quot;: &quot;BwWWja0YfJA=&quot;,
1172 # &quot;version&quot;: 3
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001173 # }
1174 #
Dan O'Mearadd494642020-05-01 07:42:23 -07001175 # **YAML example:**
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001176 #
1177 # bindings:
1178 # - members:
1179 # - user:mike@example.com
1180 # - group:admins@example.com
1181 # - domain:google.com
Dan O'Mearadd494642020-05-01 07:42:23 -07001182 # - serviceAccount:my-project-id@appspot.gserviceaccount.com
1183 # role: roles/resourcemanager.organizationAdmin
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001184 # - members:
Dan O'Mearadd494642020-05-01 07:42:23 -07001185 # - user:eve@example.com
1186 # role: roles/resourcemanager.organizationViewer
1187 # condition:
1188 # title: expirable access
1189 # description: Does not grant access after Sep 2020
Bu Sun Kim65020912020-05-20 12:08:20 -07001190 # expression: request.time &lt; timestamp(&#x27;2020-10-01T00:00:00.000Z&#x27;)
Dan O'Mearadd494642020-05-01 07:42:23 -07001191 # - etag: BwWWja0YfJA=
1192 # - version: 3
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001193 #
1194 # For a description of IAM and its features, see the
Dan O'Mearadd494642020-05-01 07:42:23 -07001195 # [IAM documentation](https://cloud.google.com/iam/docs/).
Bu Sun Kim65020912020-05-20 12:08:20 -07001196 &quot;bindings&quot;: [ # Associates a list of `members` to a `role`. Optionally, may specify a
Dan O'Mearadd494642020-05-01 07:42:23 -07001197 # `condition` that determines how and when the `bindings` are applied. Each
1198 # of the `bindings` must contain at least one member.
1199 { # Associates `members` with a `role`.
Bu Sun Kim65020912020-05-20 12:08:20 -07001200 &quot;condition&quot;: { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.
Bu Sun Kimd059ad82020-07-22 17:02:09 -07001201 #
1202 # If the condition evaluates to `true`, then this binding applies to the
1203 # current request.
1204 #
1205 # If the condition evaluates to `false`, then this binding does not apply to
1206 # the current request. However, a different role binding might grant the same
1207 # role to one or more of the members in this binding.
1208 #
1209 # To learn which resources support conditions in their IAM policies, see the
1210 # [IAM
1211 # documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
Bu Sun Kim65020912020-05-20 12:08:20 -07001212 # syntax. CEL is a C-like expression language. The syntax and semantics of CEL
1213 # are documented at https://github.com/google/cel-spec.
1214 #
1215 # Example (Comparison):
1216 #
1217 # title: &quot;Summary size limit&quot;
1218 # description: &quot;Determines if a summary is less than 100 chars&quot;
1219 # expression: &quot;document.summary.size() &lt; 100&quot;
1220 #
1221 # Example (Equality):
1222 #
1223 # title: &quot;Requestor is owner&quot;
1224 # description: &quot;Determines if requestor is the document owner&quot;
1225 # expression: &quot;document.owner == request.auth.claims.email&quot;
1226 #
1227 # Example (Logic):
1228 #
1229 # title: &quot;Public documents&quot;
1230 # description: &quot;Determine whether the document should be publicly visible&quot;
1231 # expression: &quot;document.type != &#x27;private&#x27; &amp;&amp; document.type != &#x27;internal&#x27;&quot;
1232 #
1233 # Example (Data Manipulation):
1234 #
1235 # title: &quot;Notification string&quot;
1236 # description: &quot;Create a notification string with a timestamp.&quot;
1237 # expression: &quot;&#x27;New message received at &#x27; + string(document.create_time)&quot;
1238 #
1239 # The exact variables and functions that may be referenced within an expression
1240 # are determined by the service that evaluates it. See the service
1241 # documentation for additional information.
Bu Sun Kimd059ad82020-07-22 17:02:09 -07001242 &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
1243 # syntax.
1244 &quot;description&quot;: &quot;A String&quot;, # Optional. Description of the expression. This is a longer text which
1245 # describes the expression, e.g. when hovered over it in a UI.
1246 &quot;location&quot;: &quot;A String&quot;, # Optional. String indicating the location of the expression for error
1247 # reporting, e.g. a file name and a position in the file.
Bu Sun Kim65020912020-05-20 12:08:20 -07001248 &quot;title&quot;: &quot;A String&quot;, # Optional. Title for the expression, i.e. a short string describing
1249 # its purpose. This can be used e.g. in UIs which allow to enter the
1250 # expression.
Bu Sun Kim65020912020-05-20 12:08:20 -07001251 },
1252 &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
Dan O'Mearadd494642020-05-01 07:42:23 -07001253 # `members` can have the following values:
1254 #
1255 # * `allUsers`: A special identifier that represents anyone who is
1256 # on the internet; with or without a Google account.
1257 #
1258 # * `allAuthenticatedUsers`: A special identifier that represents anyone
1259 # who is authenticated with a Google account or a service account.
1260 #
1261 # * `user:{emailid}`: An email address that represents a specific Google
1262 # account. For example, `alice@example.com` .
1263 #
1264 #
1265 # * `serviceAccount:{emailid}`: An email address that represents a service
1266 # account. For example, `my-other-app@appspot.gserviceaccount.com`.
1267 #
1268 # * `group:{emailid}`: An email address that represents a Google group.
1269 # For example, `admins@example.com`.
1270 #
1271 # * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
1272 # identifier) representing a user that has been recently deleted. For
1273 # example, `alice@example.com?uid=123456789012345678901`. If the user is
1274 # recovered, this value reverts to `user:{emailid}` and the recovered user
1275 # retains the role in the binding.
1276 #
1277 # * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
1278 # unique identifier) representing a service account that has been recently
1279 # deleted. For example,
1280 # `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
1281 # If the service account is undeleted, this value reverts to
1282 # `serviceAccount:{emailid}` and the undeleted service account retains the
1283 # role in the binding.
1284 #
1285 # * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
1286 # identifier) representing a Google group that has been recently
1287 # deleted. For example, `admins@example.com?uid=123456789012345678901`. If
1288 # the group is recovered, this value reverts to `group:{emailid}` and the
1289 # recovered group retains the role in the binding.
1290 #
1291 #
1292 # * `domain:{domain}`: The G Suite domain (primary) that represents all the
1293 # users of that domain. For example, `google.com` or `example.com`.
1294 #
Bu Sun Kim65020912020-05-20 12:08:20 -07001295 &quot;A String&quot;,
Dan O'Mearadd494642020-05-01 07:42:23 -07001296 ],
Bu Sun Kim65020912020-05-20 12:08:20 -07001297 &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to `members`.
1298 # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
Dan O'Mearadd494642020-05-01 07:42:23 -07001299 },
1300 ],
Bu Sun Kimd059ad82020-07-22 17:02:09 -07001301 &quot;auditConfigs&quot;: [ # Specifies cloud audit logging configuration for this policy.
1302 { # Specifies the audit configuration for a service.
1303 # The configuration determines which permission types are logged, and what
1304 # identities, if any, are exempted from logging.
1305 # An AuditConfig must have one or more AuditLogConfigs.
1306 #
1307 # If there are AuditConfigs for both `allServices` and a specific service,
1308 # the union of the two AuditConfigs is used for that service: the log_types
1309 # specified in each AuditConfig are enabled, and the exempted_members in each
1310 # AuditLogConfig are exempted.
1311 #
1312 # Example Policy with multiple AuditConfigs:
1313 #
1314 # {
1315 # &quot;audit_configs&quot;: [
1316 # {
1317 # &quot;service&quot;: &quot;allServices&quot;,
1318 # &quot;audit_log_configs&quot;: [
1319 # {
1320 # &quot;log_type&quot;: &quot;DATA_READ&quot;,
1321 # &quot;exempted_members&quot;: [
1322 # &quot;user:jose@example.com&quot;
1323 # ]
1324 # },
1325 # {
1326 # &quot;log_type&quot;: &quot;DATA_WRITE&quot;
1327 # },
1328 # {
1329 # &quot;log_type&quot;: &quot;ADMIN_READ&quot;
1330 # }
1331 # ]
1332 # },
1333 # {
1334 # &quot;service&quot;: &quot;sampleservice.googleapis.com&quot;,
1335 # &quot;audit_log_configs&quot;: [
1336 # {
1337 # &quot;log_type&quot;: &quot;DATA_READ&quot;
1338 # },
1339 # {
1340 # &quot;log_type&quot;: &quot;DATA_WRITE&quot;,
1341 # &quot;exempted_members&quot;: [
1342 # &quot;user:aliya@example.com&quot;
1343 # ]
1344 # }
1345 # ]
1346 # }
1347 # ]
1348 # }
1349 #
1350 # For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ
1351 # logging. It also exempts jose@example.com from DATA_READ logging, and
1352 # aliya@example.com from DATA_WRITE logging.
1353 &quot;auditLogConfigs&quot;: [ # The configuration for logging of each type of permission.
1354 { # Provides the configuration for logging a type of permissions.
1355 # Example:
1356 #
1357 # {
1358 # &quot;audit_log_configs&quot;: [
1359 # {
1360 # &quot;log_type&quot;: &quot;DATA_READ&quot;,
1361 # &quot;exempted_members&quot;: [
1362 # &quot;user:jose@example.com&quot;
1363 # ]
1364 # },
1365 # {
1366 # &quot;log_type&quot;: &quot;DATA_WRITE&quot;
1367 # }
1368 # ]
1369 # }
1370 #
1371 # This enables &#x27;DATA_READ&#x27; and &#x27;DATA_WRITE&#x27; logging, while exempting
1372 # jose@example.com from DATA_READ logging.
1373 &quot;exemptedMembers&quot;: [ # Specifies the identities that do not cause logging for this type of
1374 # permission.
1375 # Follows the same format of Binding.members.
1376 &quot;A String&quot;,
1377 ],
1378 &quot;logType&quot;: &quot;A String&quot;, # The log type that this config enables.
1379 },
1380 ],
1381 &quot;service&quot;: &quot;A String&quot;, # Specifies a service that will be enabled for audit logging.
1382 # For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
1383 # `allServices` is a special value that covers all services.
1384 },
1385 ],
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -07001386 &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
1387 # prevent simultaneous updates of a policy from overwriting each other.
1388 # It is strongly suggested that systems make use of the `etag` in the
1389 # read-modify-write cycle to perform policy updates in order to avoid race
1390 # conditions: An `etag` is returned in the response to `getIamPolicy`, and
1391 # systems are expected to put that etag in the request to `setIamPolicy` to
1392 # ensure that their change will be applied to the same version of the policy.
1393 #
1394 # **Important:** If you use IAM Conditions, you must include the `etag` field
1395 # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
1396 # you to overwrite a version `3` policy with a version `1` policy, and all of
1397 # the conditions in the version `3` policy are lost.
Bu Sun Kimd059ad82020-07-22 17:02:09 -07001398 &quot;version&quot;: 42, # Specifies the format of the policy.
1399 #
1400 # Valid values are `0`, `1`, and `3`. Requests that specify an invalid value
1401 # are rejected.
1402 #
1403 # Any operation that affects conditional role bindings must specify version
1404 # `3`. This requirement applies to the following operations:
1405 #
1406 # * Getting a policy that includes a conditional role binding
1407 # * Adding a conditional role binding to a policy
1408 # * Changing a conditional role binding in a policy
1409 # * Removing any role binding, with or without a condition, from a policy
1410 # that includes conditions
1411 #
1412 # **Important:** If you use IAM Conditions, you must include the `etag` field
1413 # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
1414 # you to overwrite a version `3` policy with a version `1` policy, and all of
1415 # the conditions in the version `3` policy are lost.
1416 #
1417 # If a policy does not include any conditions, operations on that policy may
1418 # specify any valid version or leave the field unset.
1419 #
1420 # To learn which resources support conditions in their IAM policies, see the
1421 # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001422 }</pre>
1423</div>
1424
1425<div class="method">
Dan O'Mearadd494642020-05-01 07:42:23 -07001426 <code class="details" id="testIamPermissions">testIamPermissions(resource, body=None, x__xgafv=None)</code>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001427 <pre>Returns permissions that the caller has on the specified instance resource.
1428
1429Args:
1430 resource: string, REQUIRED: The resource for which the policy detail is being requested.
1431See the operation documentation for the appropriate value for this field. (required)
Dan O'Mearadd494642020-05-01 07:42:23 -07001432 body: object, The request body.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001433 The object takes the form of:
1434
1435{ # Request message for `TestIamPermissions` method.
Bu Sun Kim65020912020-05-20 12:08:20 -07001436 &quot;permissions&quot;: [ # The set of permissions to check for the `resource`. Permissions with
1437 # wildcards (such as &#x27;*&#x27; or &#x27;storage.*&#x27;) are not allowed. For more
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001438 # information see
1439 # [IAM Overview](https://cloud.google.com/iam/docs/overview#permissions).
Bu Sun Kim65020912020-05-20 12:08:20 -07001440 &quot;A String&quot;,
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001441 ],
1442 }
1443
1444 x__xgafv: string, V1 error format.
1445 Allowed values
1446 1 - v1 error format
1447 2 - v2 error format
1448
1449Returns:
1450 An object of the form:
1451
1452 { # Response message for `TestIamPermissions` method.
Bu Sun Kim65020912020-05-20 12:08:20 -07001453 &quot;permissions&quot;: [ # A subset of `TestPermissionsRequest.permissions` that the caller is
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001454 # allowed.
Bu Sun Kim65020912020-05-20 12:08:20 -07001455 &quot;A String&quot;,
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001456 ],
1457 }</pre>
1458</div>
1459
1460<div class="method">
Dan O'Mearadd494642020-05-01 07:42:23 -07001461 <code class="details" id="update">update(name, body=None, x__xgafv=None)</code>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001462 <pre>Updates an instance within a project. This method updates only the display
1463name and type for an Instance. To update other Instance properties, such as
1464labels, use PartialUpdateInstance.
1465
1466Args:
Bu Sun Kimd059ad82020-07-22 17:02:09 -07001467 name: string, The unique name of the instance. Values are of the form
Dan O'Mearadd494642020-05-01 07:42:23 -07001468`projects/{project}/instances/a-z+[a-z0-9]`. (required)
1469 body: object, The request body.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001470 The object takes the form of:
1471
1472{ # A collection of Bigtable Tables and
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001473 # the resources that serve them.
1474 # All tables in an instance are served from all
1475 # Clusters in the instance.
Bu Sun Kimd059ad82020-07-22 17:02:09 -07001476 &quot;state&quot;: &quot;A String&quot;, # Output only. The current state of the instance.
1477 &quot;displayName&quot;: &quot;A String&quot;, # Required. The descriptive name for this instance as it appears in UIs.
1478 # Can be changed at any time, but should be kept globally unique
1479 # to avoid confusion.
1480 &quot;name&quot;: &quot;A String&quot;, # The unique name of the instance. Values are of the form
1481 # `projects/{project}/instances/a-z+[a-z0-9]`.
1482 &quot;type&quot;: &quot;A String&quot;, # Required. The type of the instance. Defaults to `PRODUCTION`.
Bu Sun Kim65020912020-05-20 12:08:20 -07001483 &quot;labels&quot;: { # Required. Labels are a flexible and lightweight mechanism for organizing cloud
1484 # resources into groups that reflect a customer&#x27;s organizational needs and
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001485 # deployment strategies. They can be used to filter resources and aggregate
1486 # metrics.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -07001487 #
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001488 # * Label keys must be between 1 and 63 characters long and must conform to
1489 # the regular expression: `\p{Ll}\p{Lo}{0,62}`.
1490 # * Label values must be between 0 and 63 characters long and must conform to
1491 # the regular expression: `[\p{Ll}\p{Lo}\p{N}_-]{0,63}`.
1492 # * No more than 64 labels can be associated with a given resource.
1493 # * Keys and values must both be under 128 bytes.
Bu Sun Kim65020912020-05-20 12:08:20 -07001494 &quot;a_key&quot;: &quot;A String&quot;,
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001495 },
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -07001496 }
1497
1498 x__xgafv: string, V1 error format.
1499 Allowed values
1500 1 - v1 error format
1501 2 - v2 error format
1502
1503Returns:
1504 An object of the form:
1505
1506 { # A collection of Bigtable Tables and
1507 # the resources that serve them.
1508 # All tables in an instance are served from all
1509 # Clusters in the instance.
Bu Sun Kimd059ad82020-07-22 17:02:09 -07001510 &quot;state&quot;: &quot;A String&quot;, # Output only. The current state of the instance.
1511 &quot;displayName&quot;: &quot;A String&quot;, # Required. The descriptive name for this instance as it appears in UIs.
1512 # Can be changed at any time, but should be kept globally unique
1513 # to avoid confusion.
1514 &quot;name&quot;: &quot;A String&quot;, # The unique name of the instance. Values are of the form
1515 # `projects/{project}/instances/a-z+[a-z0-9]`.
1516 &quot;type&quot;: &quot;A String&quot;, # Required. The type of the instance. Defaults to `PRODUCTION`.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -07001517 &quot;labels&quot;: { # Required. Labels are a flexible and lightweight mechanism for organizing cloud
1518 # resources into groups that reflect a customer&#x27;s organizational needs and
1519 # deployment strategies. They can be used to filter resources and aggregate
1520 # metrics.
1521 #
1522 # * Label keys must be between 1 and 63 characters long and must conform to
1523 # the regular expression: `\p{Ll}\p{Lo}{0,62}`.
1524 # * Label values must be between 0 and 63 characters long and must conform to
1525 # the regular expression: `[\p{Ll}\p{Lo}\p{N}_-]{0,63}`.
1526 # * No more than 64 labels can be associated with a given resource.
1527 # * Keys and values must both be under 128 bytes.
1528 &quot;a_key&quot;: &quot;A String&quot;,
1529 },
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -07001530 }</pre>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001531</div>
1532
1533</body></html>