blob: a9ac9b6854ad809f7e61f689748518d66608997f [file] [log] [blame]
Takashi Matsuo06694102015-09-11 13:55:40 -07001<html><body>
2<style>
3
4body, h1, h2, h3, div, span, p, pre, a {
5 margin: 0;
6 padding: 0;
7 border: 0;
8 font-weight: inherit;
9 font-style: inherit;
10 font-size: 100%;
11 font-family: inherit;
12 vertical-align: baseline;
13}
14
15body {
16 font-size: 13px;
17 padding: 1em;
18}
19
20h1 {
21 font-size: 26px;
22 margin-bottom: 1em;
23}
24
25h2 {
26 font-size: 24px;
27 margin-bottom: 1em;
28}
29
30h3 {
31 font-size: 20px;
32 margin-bottom: 1em;
33 margin-top: 1em;
34}
35
36pre, code {
37 line-height: 1.5;
38 font-family: Monaco, 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', 'Lucida Console', monospace;
39}
40
41pre {
42 margin-top: 0.5em;
43}
44
45h1, h2, h3, p {
46 font-family: Arial, sans serif;
47}
48
49h1, h2, h3 {
50 border-bottom: solid #CCC 1px;
51}
52
53.toc_element {
54 margin-top: 0.5em;
55}
56
57.firstline {
58 margin-left: 2 em;
59}
60
61.method {
62 margin-top: 1em;
63 border: solid 1px #CCC;
64 padding: 1em;
65 background: #EEE;
66}
67
68.details {
69 font-weight: bold;
70 font-size: 14px;
71}
72
73</style>
74
Bu Sun Kim715bd7f2019-06-14 16:50:42 -070075<h1><a href="cloudbilling_v1.html">Cloud Billing API</a> . <a href="cloudbilling_v1.billingAccounts.html">billingAccounts</a></h1>
Takashi Matsuo06694102015-09-11 13:55:40 -070076<h2>Instance Methods</h2>
77<p class="toc_element">
78 <code><a href="cloudbilling_v1.billingAccounts.projects.html">projects()</a></code>
79</p>
80<p class="firstline">Returns the projects Resource.</p>
81
82<p class="toc_element">
Dan O'Mearadd494642020-05-01 07:42:23 -070083 <code><a href="#create">create(body=None, x__xgafv=None)</a></code></p>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -070084<p class="firstline">Creates a billing account.</p>
85<p class="toc_element">
Thomas Coffee2f245372017-03-27 10:39:26 -070086 <code><a href="#get">get(name, x__xgafv=None)</a></code></p>
Sai Cheemalapatic30d2b52017-03-13 12:12:03 -040087<p class="firstline">Gets information about a billing account. The current authenticated user</p>
Takashi Matsuo06694102015-09-11 13:55:40 -070088<p class="toc_element">
Dan O'Mearadd494642020-05-01 07:42:23 -070089 <code><a href="#getIamPolicy">getIamPolicy(resource, options_requestedPolicyVersion=None, x__xgafv=None)</a></code></p>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -070090<p class="firstline">Gets the access control policy for a billing account.</p>
91<p class="toc_element">
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -070092 <code><a href="#list">list(filter=None, pageSize=None, pageToken=None, x__xgafv=None)</a></code></p>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -070093<p class="firstline">Lists the billing accounts that the current authenticated user has</p>
Takashi Matsuo06694102015-09-11 13:55:40 -070094<p class="toc_element">
95 <code><a href="#list_next">list_next(previous_request, previous_response)</a></code></p>
96<p class="firstline">Retrieves the next page of results.</p>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -070097<p class="toc_element">
Dan O'Mearadd494642020-05-01 07:42:23 -070098 <code><a href="#patch">patch(name, body=None, updateMask=None, x__xgafv=None)</a></code></p>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -070099<p class="firstline">Updates a billing account's fields.</p>
100<p class="toc_element">
Dan O'Mearadd494642020-05-01 07:42:23 -0700101 <code><a href="#setIamPolicy">setIamPolicy(resource, body=None, x__xgafv=None)</a></code></p>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700102<p class="firstline">Sets the access control policy for a billing account. Replaces any existing</p>
103<p class="toc_element">
Dan O'Mearadd494642020-05-01 07:42:23 -0700104 <code><a href="#testIamPermissions">testIamPermissions(resource, body=None, x__xgafv=None)</a></code></p>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700105<p class="firstline">Tests the access control policy for a billing account. This method takes</p>
Takashi Matsuo06694102015-09-11 13:55:40 -0700106<h3>Method Details</h3>
107<div class="method">
Dan O'Mearadd494642020-05-01 07:42:23 -0700108 <code class="details" id="create">create(body=None, x__xgafv=None)</code>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700109 <pre>Creates a billing account.
110This method can only be used to create
111[billing subaccounts](https://cloud.google.com/billing/docs/concepts)
112by GCP resellers.
113When creating a subaccount, the current authenticated user must have the
114`billing.accounts.update` IAM permission on the master account, which is
115typically given to billing account
116[administrators](https://cloud.google.com/billing/docs/how-to/billing-access).
117This method will return an error if the master account has not been
118provisioned as a reseller account.
119
120Args:
Dan O'Mearadd494642020-05-01 07:42:23 -0700121 body: object, The request body.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700122 The object takes the form of:
123
124{ # A billing account in [GCP Console](https://console.cloud.google.com/).
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700125 # You can assign a billing account to one or more projects.
126 &quot;displayName&quot;: &quot;A String&quot;, # The display name given to the billing account, such as `My Billing
127 # Account`. This name is displayed in the GCP Console.
128 &quot;masterBillingAccount&quot;: &quot;A String&quot;, # If this account is a
129 # [subaccount](https://cloud.google.com/billing/docs/concepts), then this
130 # will be the resource name of the master billing account that it is being
131 # resold through.
132 # Otherwise this will be empty.
133 &quot;name&quot;: &quot;A String&quot;, # The resource name of the billing account. The resource name has the form
134 # `billingAccounts/{billing_account_id}`. For example,
135 # `billingAccounts/012345-567890-ABCDEF` would be the resource name for
136 # billing account `012345-567890-ABCDEF`.
137 &quot;open&quot;: True or False, # Output only. True if the billing account is open, and will therefore be charged for any
138 # usage on associated projects. False if the billing account is closed, and
139 # therefore projects associated with it will be unable to use paid services.
140 }
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700141
142 x__xgafv: string, V1 error format.
143 Allowed values
144 1 - v1 error format
145 2 - v2 error format
146
147Returns:
148 An object of the form:
149
150 { # A billing account in [GCP Console](https://console.cloud.google.com/).
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700151 # You can assign a billing account to one or more projects.
152 &quot;displayName&quot;: &quot;A String&quot;, # The display name given to the billing account, such as `My Billing
153 # Account`. This name is displayed in the GCP Console.
154 &quot;masterBillingAccount&quot;: &quot;A String&quot;, # If this account is a
155 # [subaccount](https://cloud.google.com/billing/docs/concepts), then this
156 # will be the resource name of the master billing account that it is being
157 # resold through.
158 # Otherwise this will be empty.
159 &quot;name&quot;: &quot;A String&quot;, # The resource name of the billing account. The resource name has the form
160 # `billingAccounts/{billing_account_id}`. For example,
161 # `billingAccounts/012345-567890-ABCDEF` would be the resource name for
162 # billing account `012345-567890-ABCDEF`.
163 &quot;open&quot;: True or False, # Output only. True if the billing account is open, and will therefore be charged for any
164 # usage on associated projects. False if the billing account is closed, and
165 # therefore projects associated with it will be unable to use paid services.
166 }</pre>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700167</div>
168
169<div class="method">
Thomas Coffee2f245372017-03-27 10:39:26 -0700170 <code class="details" id="get">get(name, x__xgafv=None)</code>
Sai Cheemalapatic30d2b52017-03-13 12:12:03 -0400171 <pre>Gets information about a billing account. The current authenticated user
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700172must be a [viewer of the billing
173account](https://cloud.google.com/billing/docs/how-to/billing-access).
Takashi Matsuo06694102015-09-11 13:55:40 -0700174
175Args:
Dan O'Mearadd494642020-05-01 07:42:23 -0700176 name: string, Required. The resource name of the billing account to retrieve. For example,
Sai Cheemalapatic30d2b52017-03-13 12:12:03 -0400177`billingAccounts/012345-567890-ABCDEF`. (required)
Takashi Matsuo06694102015-09-11 13:55:40 -0700178 x__xgafv: string, V1 error format.
Sai Cheemalapatic30d2b52017-03-13 12:12:03 -0400179 Allowed values
180 1 - v1 error format
181 2 - v2 error format
Takashi Matsuo06694102015-09-11 13:55:40 -0700182
183Returns:
184 An object of the form:
185
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700186 { # A billing account in [GCP Console](https://console.cloud.google.com/).
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700187 # You can assign a billing account to one or more projects.
188 &quot;displayName&quot;: &quot;A String&quot;, # The display name given to the billing account, such as `My Billing
189 # Account`. This name is displayed in the GCP Console.
190 &quot;masterBillingAccount&quot;: &quot;A String&quot;, # If this account is a
191 # [subaccount](https://cloud.google.com/billing/docs/concepts), then this
192 # will be the resource name of the master billing account that it is being
193 # resold through.
194 # Otherwise this will be empty.
195 &quot;name&quot;: &quot;A String&quot;, # The resource name of the billing account. The resource name has the form
196 # `billingAccounts/{billing_account_id}`. For example,
197 # `billingAccounts/012345-567890-ABCDEF` would be the resource name for
198 # billing account `012345-567890-ABCDEF`.
199 &quot;open&quot;: True or False, # Output only. True if the billing account is open, and will therefore be charged for any
200 # usage on associated projects. False if the billing account is closed, and
201 # therefore projects associated with it will be unable to use paid services.
202 }</pre>
Takashi Matsuo06694102015-09-11 13:55:40 -0700203</div>
204
205<div class="method">
Dan O'Mearadd494642020-05-01 07:42:23 -0700206 <code class="details" id="getIamPolicy">getIamPolicy(resource, options_requestedPolicyVersion=None, x__xgafv=None)</code>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700207 <pre>Gets the access control policy for a billing account.
208The caller must have the `billing.accounts.getIamPolicy` permission on the
209account, which is often given to billing account
210[viewers](https://cloud.google.com/billing/docs/how-to/billing-access).
211
212Args:
213 resource: string, REQUIRED: The resource for which the policy is being requested.
214See the operation documentation for the appropriate value for this field. (required)
Dan O'Mearadd494642020-05-01 07:42:23 -0700215 options_requestedPolicyVersion: integer, Optional. The policy format version to be returned.
216
217Valid values are 0, 1, and 3. Requests specifying an invalid value will be
218rejected.
219
220Requests for policies with any conditional bindings must specify version 3.
221Policies without any conditional bindings may specify any valid value or
222leave the field unset.
Bu Sun Kim65020912020-05-20 12:08:20 -0700223
224To learn which resources support conditions in their IAM policies, see the
225[IAM
226documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700227 x__xgafv: string, V1 error format.
228 Allowed values
229 1 - v1 error format
230 2 - v2 error format
231
232Returns:
233 An object of the form:
234
Dan O'Mearadd494642020-05-01 07:42:23 -0700235 { # An Identity and Access Management (IAM) policy, which specifies access
236 # controls for Google Cloud resources.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700237 #
238 #
Dan O'Mearadd494642020-05-01 07:42:23 -0700239 # A `Policy` is a collection of `bindings`. A `binding` binds one or more
240 # `members` to a single `role`. Members can be user accounts, service accounts,
241 # Google groups, and domains (such as G Suite). A `role` is a named list of
242 # permissions; each `role` can be an IAM predefined role or a user-created
243 # custom role.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700244 #
Bu Sun Kim65020912020-05-20 12:08:20 -0700245 # For some types of Google Cloud resources, a `binding` can also specify a
246 # `condition`, which is a logical expression that allows access to a resource
247 # only if the expression evaluates to `true`. A condition can add constraints
248 # based on attributes of the request, the resource, or both. To learn which
249 # resources support conditions in their IAM policies, see the
250 # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
Dan O'Mearadd494642020-05-01 07:42:23 -0700251 #
252 # **JSON example:**
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700253 #
254 # {
Bu Sun Kim65020912020-05-20 12:08:20 -0700255 # &quot;bindings&quot;: [
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700256 # {
Bu Sun Kim65020912020-05-20 12:08:20 -0700257 # &quot;role&quot;: &quot;roles/resourcemanager.organizationAdmin&quot;,
258 # &quot;members&quot;: [
259 # &quot;user:mike@example.com&quot;,
260 # &quot;group:admins@example.com&quot;,
261 # &quot;domain:google.com&quot;,
262 # &quot;serviceAccount:my-project-id@appspot.gserviceaccount.com&quot;
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700263 # ]
264 # },
265 # {
Bu Sun Kim65020912020-05-20 12:08:20 -0700266 # &quot;role&quot;: &quot;roles/resourcemanager.organizationViewer&quot;,
267 # &quot;members&quot;: [
268 # &quot;user:eve@example.com&quot;
269 # ],
270 # &quot;condition&quot;: {
271 # &quot;title&quot;: &quot;expirable access&quot;,
272 # &quot;description&quot;: &quot;Does not grant access after Sep 2020&quot;,
273 # &quot;expression&quot;: &quot;request.time &lt; timestamp(&#x27;2020-10-01T00:00:00.000Z&#x27;)&quot;,
Dan O'Mearadd494642020-05-01 07:42:23 -0700274 # }
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700275 # }
Dan O'Mearadd494642020-05-01 07:42:23 -0700276 # ],
Bu Sun Kim65020912020-05-20 12:08:20 -0700277 # &quot;etag&quot;: &quot;BwWWja0YfJA=&quot;,
278 # &quot;version&quot;: 3
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700279 # }
280 #
Dan O'Mearadd494642020-05-01 07:42:23 -0700281 # **YAML example:**
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700282 #
283 # bindings:
284 # - members:
285 # - user:mike@example.com
286 # - group:admins@example.com
287 # - domain:google.com
Dan O'Mearadd494642020-05-01 07:42:23 -0700288 # - serviceAccount:my-project-id@appspot.gserviceaccount.com
289 # role: roles/resourcemanager.organizationAdmin
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700290 # - members:
Dan O'Mearadd494642020-05-01 07:42:23 -0700291 # - user:eve@example.com
292 # role: roles/resourcemanager.organizationViewer
293 # condition:
294 # title: expirable access
295 # description: Does not grant access after Sep 2020
Bu Sun Kim65020912020-05-20 12:08:20 -0700296 # expression: request.time &lt; timestamp(&#x27;2020-10-01T00:00:00.000Z&#x27;)
Dan O'Mearadd494642020-05-01 07:42:23 -0700297 # - etag: BwWWja0YfJA=
298 # - version: 3
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700299 #
300 # For a description of IAM and its features, see the
Dan O'Mearadd494642020-05-01 07:42:23 -0700301 # [IAM documentation](https://cloud.google.com/iam/docs/).
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700302 &quot;version&quot;: 42, # Specifies the format of the policy.
303 #
304 # Valid values are `0`, `1`, and `3`. Requests that specify an invalid value
305 # are rejected.
306 #
307 # Any operation that affects conditional role bindings must specify version
308 # `3`. This requirement applies to the following operations:
309 #
310 # * Getting a policy that includes a conditional role binding
311 # * Adding a conditional role binding to a policy
312 # * Changing a conditional role binding in a policy
313 # * Removing any role binding, with or without a condition, from a policy
314 # that includes conditions
315 #
316 # **Important:** If you use IAM Conditions, you must include the `etag` field
317 # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
318 # you to overwrite a version `3` policy with a version `1` policy, and all of
319 # the conditions in the version `3` policy are lost.
320 #
321 # If a policy does not include any conditions, operations on that policy may
322 # specify any valid version or leave the field unset.
323 #
324 # To learn which resources support conditions in their IAM policies, see the
325 # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
326 &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
327 # prevent simultaneous updates of a policy from overwriting each other.
328 # It is strongly suggested that systems make use of the `etag` in the
329 # read-modify-write cycle to perform policy updates in order to avoid race
330 # conditions: An `etag` is returned in the response to `getIamPolicy`, and
331 # systems are expected to put that etag in the request to `setIamPolicy` to
332 # ensure that their change will be applied to the same version of the policy.
333 #
334 # **Important:** If you use IAM Conditions, you must include the `etag` field
335 # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
336 # you to overwrite a version `3` policy with a version `1` policy, and all of
337 # the conditions in the version `3` policy are lost.
Bu Sun Kim65020912020-05-20 12:08:20 -0700338 &quot;bindings&quot;: [ # Associates a list of `members` to a `role`. Optionally, may specify a
Dan O'Mearadd494642020-05-01 07:42:23 -0700339 # `condition` that determines how and when the `bindings` are applied. Each
340 # of the `bindings` must contain at least one member.
341 { # Associates `members` with a `role`.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700342 &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to `members`.
343 # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
Bu Sun Kim65020912020-05-20 12:08:20 -0700344 &quot;condition&quot;: { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.
345 #
346 # If the condition evaluates to `true`, then this binding applies to the
347 # current request.
348 #
349 # If the condition evaluates to `false`, then this binding does not apply to
350 # the current request. However, a different role binding might grant the same
351 # role to one or more of the members in this binding.
352 #
353 # To learn which resources support conditions in their IAM policies, see the
354 # [IAM
355 # documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
Dan O'Mearadd494642020-05-01 07:42:23 -0700356 # syntax. CEL is a C-like expression language. The syntax and semantics of CEL
357 # are documented at https://github.com/google/cel-spec.
358 #
359 # Example (Comparison):
360 #
Bu Sun Kim65020912020-05-20 12:08:20 -0700361 # title: &quot;Summary size limit&quot;
362 # description: &quot;Determines if a summary is less than 100 chars&quot;
363 # expression: &quot;document.summary.size() &lt; 100&quot;
Dan O'Mearadd494642020-05-01 07:42:23 -0700364 #
365 # Example (Equality):
366 #
Bu Sun Kim65020912020-05-20 12:08:20 -0700367 # title: &quot;Requestor is owner&quot;
368 # description: &quot;Determines if requestor is the document owner&quot;
369 # expression: &quot;document.owner == request.auth.claims.email&quot;
Dan O'Mearadd494642020-05-01 07:42:23 -0700370 #
371 # Example (Logic):
372 #
Bu Sun Kim65020912020-05-20 12:08:20 -0700373 # title: &quot;Public documents&quot;
374 # description: &quot;Determine whether the document should be publicly visible&quot;
375 # expression: &quot;document.type != &#x27;private&#x27; &amp;&amp; document.type != &#x27;internal&#x27;&quot;
Dan O'Mearadd494642020-05-01 07:42:23 -0700376 #
377 # Example (Data Manipulation):
378 #
Bu Sun Kim65020912020-05-20 12:08:20 -0700379 # title: &quot;Notification string&quot;
380 # description: &quot;Create a notification string with a timestamp.&quot;
381 # expression: &quot;&#x27;New message received at &#x27; + string(document.create_time)&quot;
Dan O'Mearadd494642020-05-01 07:42:23 -0700382 #
383 # The exact variables and functions that may be referenced within an expression
384 # are determined by the service that evaluates it. See the service
385 # documentation for additional information.
Bu Sun Kim65020912020-05-20 12:08:20 -0700386 &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
Dan O'Mearadd494642020-05-01 07:42:23 -0700387 # syntax.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700388 &quot;location&quot;: &quot;A String&quot;, # Optional. String indicating the location of the expression for error
389 # reporting, e.g. a file name and a position in the file.
Bu Sun Kim65020912020-05-20 12:08:20 -0700390 &quot;title&quot;: &quot;A String&quot;, # Optional. Title for the expression, i.e. a short string describing
Dan O'Mearadd494642020-05-01 07:42:23 -0700391 # its purpose. This can be used e.g. in UIs which allow to enter the
392 # expression.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700393 &quot;description&quot;: &quot;A String&quot;, # Optional. Description of the expression. This is a longer text which
394 # describes the expression, e.g. when hovered over it in a UI.
Dan O'Mearadd494642020-05-01 07:42:23 -0700395 },
Bu Sun Kim65020912020-05-20 12:08:20 -0700396 &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
Dan O'Mearadd494642020-05-01 07:42:23 -0700397 # `members` can have the following values:
398 #
399 # * `allUsers`: A special identifier that represents anyone who is
400 # on the internet; with or without a Google account.
401 #
402 # * `allAuthenticatedUsers`: A special identifier that represents anyone
403 # who is authenticated with a Google account or a service account.
404 #
405 # * `user:{emailid}`: An email address that represents a specific Google
406 # account. For example, `alice@example.com` .
407 #
408 #
409 # * `serviceAccount:{emailid}`: An email address that represents a service
410 # account. For example, `my-other-app@appspot.gserviceaccount.com`.
411 #
412 # * `group:{emailid}`: An email address that represents a Google group.
413 # For example, `admins@example.com`.
414 #
415 # * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
416 # identifier) representing a user that has been recently deleted. For
417 # example, `alice@example.com?uid=123456789012345678901`. If the user is
418 # recovered, this value reverts to `user:{emailid}` and the recovered user
419 # retains the role in the binding.
420 #
421 # * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
422 # unique identifier) representing a service account that has been recently
423 # deleted. For example,
424 # `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
425 # If the service account is undeleted, this value reverts to
426 # `serviceAccount:{emailid}` and the undeleted service account retains the
427 # role in the binding.
428 #
429 # * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
430 # identifier) representing a Google group that has been recently
431 # deleted. For example, `admins@example.com?uid=123456789012345678901`. If
432 # the group is recovered, this value reverts to `group:{emailid}` and the
433 # recovered group retains the role in the binding.
434 #
435 #
436 # * `domain:{domain}`: The G Suite domain (primary) that represents all the
437 # users of that domain. For example, `google.com` or `example.com`.
438 #
Bu Sun Kim65020912020-05-20 12:08:20 -0700439 &quot;A String&quot;,
Dan O'Mearadd494642020-05-01 07:42:23 -0700440 ],
441 },
442 ],
Bu Sun Kim65020912020-05-20 12:08:20 -0700443 &quot;auditConfigs&quot;: [ # Specifies cloud audit logging configuration for this policy.
444 { # Specifies the audit configuration for a service.
445 # The configuration determines which permission types are logged, and what
446 # identities, if any, are exempted from logging.
447 # An AuditConfig must have one or more AuditLogConfigs.
448 #
449 # If there are AuditConfigs for both `allServices` and a specific service,
450 # the union of the two AuditConfigs is used for that service: the log_types
451 # specified in each AuditConfig are enabled, and the exempted_members in each
452 # AuditLogConfig are exempted.
453 #
454 # Example Policy with multiple AuditConfigs:
455 #
456 # {
457 # &quot;audit_configs&quot;: [
458 # {
459 # &quot;service&quot;: &quot;allServices&quot;
460 # &quot;audit_log_configs&quot;: [
461 # {
462 # &quot;log_type&quot;: &quot;DATA_READ&quot;,
463 # &quot;exempted_members&quot;: [
464 # &quot;user:jose@example.com&quot;
465 # ]
466 # },
467 # {
468 # &quot;log_type&quot;: &quot;DATA_WRITE&quot;,
469 # },
470 # {
471 # &quot;log_type&quot;: &quot;ADMIN_READ&quot;,
472 # }
473 # ]
474 # },
475 # {
476 # &quot;service&quot;: &quot;sampleservice.googleapis.com&quot;
477 # &quot;audit_log_configs&quot;: [
478 # {
479 # &quot;log_type&quot;: &quot;DATA_READ&quot;,
480 # },
481 # {
482 # &quot;log_type&quot;: &quot;DATA_WRITE&quot;,
483 # &quot;exempted_members&quot;: [
484 # &quot;user:aliya@example.com&quot;
485 # ]
486 # }
487 # ]
488 # }
489 # ]
490 # }
491 #
492 # For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ
493 # logging. It also exempts jose@example.com from DATA_READ logging, and
494 # aliya@example.com from DATA_WRITE logging.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700495 &quot;service&quot;: &quot;A String&quot;, # Specifies a service that will be enabled for audit logging.
496 # For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
497 # `allServices` is a special value that covers all services.
Bu Sun Kim65020912020-05-20 12:08:20 -0700498 &quot;auditLogConfigs&quot;: [ # The configuration for logging of each type of permission.
499 { # Provides the configuration for logging a type of permissions.
500 # Example:
501 #
502 # {
503 # &quot;audit_log_configs&quot;: [
504 # {
505 # &quot;log_type&quot;: &quot;DATA_READ&quot;,
506 # &quot;exempted_members&quot;: [
507 # &quot;user:jose@example.com&quot;
508 # ]
509 # },
510 # {
511 # &quot;log_type&quot;: &quot;DATA_WRITE&quot;,
512 # }
513 # ]
514 # }
515 #
516 # This enables &#x27;DATA_READ&#x27; and &#x27;DATA_WRITE&#x27; logging, while exempting
517 # jose@example.com from DATA_READ logging.
518 &quot;exemptedMembers&quot;: [ # Specifies the identities that do not cause logging for this type of
519 # permission.
520 # Follows the same format of Binding.members.
521 &quot;A String&quot;,
522 ],
523 &quot;logType&quot;: &quot;A String&quot;, # The log type that this config enables.
524 },
525 ],
Bu Sun Kim65020912020-05-20 12:08:20 -0700526 },
527 ],
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700528 }</pre>
529</div>
530
531<div class="method">
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700532 <code class="details" id="list">list(filter=None, pageSize=None, pageToken=None, x__xgafv=None)</code>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700533 <pre>Lists the billing accounts that the current authenticated user has
534permission to
535[view](https://cloud.google.com/billing/docs/how-to/billing-access).
Takashi Matsuo06694102015-09-11 13:55:40 -0700536
537Args:
Bu Sun Kim65020912020-05-20 12:08:20 -0700538 filter: string, Options for how to filter the returned billing accounts.
539Currently this only supports filtering for
540[subaccounts](https://cloud.google.com/billing/docs/concepts) under a
541single provided reseller billing account.
542(e.g. &quot;master_billing_account=billingAccounts/012345-678901-ABCDEF&quot;).
543Boolean algebra and other fields are not currently supported.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700544 pageSize: integer, Requested page size. The maximum page size is 100; this is also the
545default.
Sai Cheemalapatic30d2b52017-03-13 12:12:03 -0400546 pageToken: string, A token identifying a page of results to return. This should be a
547`next_page_token` value returned from a previous `ListBillingAccounts`
548call. If unspecified, the first page of results is returned.
Takashi Matsuo06694102015-09-11 13:55:40 -0700549 x__xgafv: string, V1 error format.
Sai Cheemalapatic30d2b52017-03-13 12:12:03 -0400550 Allowed values
551 1 - v1 error format
552 2 - v2 error format
Takashi Matsuo06694102015-09-11 13:55:40 -0700553
554Returns:
555 An object of the form:
556
557 { # Response message for `ListBillingAccounts`.
Bu Sun Kim65020912020-05-20 12:08:20 -0700558 &quot;nextPageToken&quot;: &quot;A String&quot;, # A token to retrieve the next page of results. To retrieve the next page,
559 # call `ListBillingAccounts` again with the `page_token` field set to this
560 # value. This field is empty if there are no more results to retrieve.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700561 &quot;billingAccounts&quot;: [ # A list of billing accounts.
562 { # A billing account in [GCP Console](https://console.cloud.google.com/).
563 # You can assign a billing account to one or more projects.
564 &quot;displayName&quot;: &quot;A String&quot;, # The display name given to the billing account, such as `My Billing
565 # Account`. This name is displayed in the GCP Console.
566 &quot;masterBillingAccount&quot;: &quot;A String&quot;, # If this account is a
567 # [subaccount](https://cloud.google.com/billing/docs/concepts), then this
568 # will be the resource name of the master billing account that it is being
569 # resold through.
570 # Otherwise this will be empty.
571 &quot;name&quot;: &quot;A String&quot;, # The resource name of the billing account. The resource name has the form
572 # `billingAccounts/{billing_account_id}`. For example,
573 # `billingAccounts/012345-567890-ABCDEF` would be the resource name for
574 # billing account `012345-567890-ABCDEF`.
575 &quot;open&quot;: True or False, # Output only. True if the billing account is open, and will therefore be charged for any
576 # usage on associated projects. False if the billing account is closed, and
577 # therefore projects associated with it will be unable to use paid services.
578 },
579 ],
Takashi Matsuo06694102015-09-11 13:55:40 -0700580 }</pre>
581</div>
582
583<div class="method">
584 <code class="details" id="list_next">list_next(previous_request, previous_response)</code>
585 <pre>Retrieves the next page of results.
586
587Args:
588 previous_request: The request for the previous page. (required)
589 previous_response: The response from the request for the previous page. (required)
590
591Returns:
Bu Sun Kim65020912020-05-20 12:08:20 -0700592 A request object that you can call &#x27;execute()&#x27; on to request the next
Takashi Matsuo06694102015-09-11 13:55:40 -0700593 page. Returns None if there are no more items in the collection.
594 </pre>
595</div>
596
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700597<div class="method">
Dan O'Mearadd494642020-05-01 07:42:23 -0700598 <code class="details" id="patch">patch(name, body=None, updateMask=None, x__xgafv=None)</code>
Bu Sun Kim65020912020-05-20 12:08:20 -0700599 <pre>Updates a billing account&#x27;s fields.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700600Currently the only field that can be edited is `display_name`.
601The current authenticated user must have the `billing.accounts.update`
602IAM permission, which is typically given to the
603[administrator](https://cloud.google.com/billing/docs/how-to/billing-access)
604of the billing account.
605
606Args:
Dan O'Mearadd494642020-05-01 07:42:23 -0700607 name: string, Required. The name of the billing account resource to be updated. (required)
608 body: object, The request body.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700609 The object takes the form of:
610
611{ # A billing account in [GCP Console](https://console.cloud.google.com/).
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700612 # You can assign a billing account to one or more projects.
613 &quot;displayName&quot;: &quot;A String&quot;, # The display name given to the billing account, such as `My Billing
614 # Account`. This name is displayed in the GCP Console.
615 &quot;masterBillingAccount&quot;: &quot;A String&quot;, # If this account is a
616 # [subaccount](https://cloud.google.com/billing/docs/concepts), then this
617 # will be the resource name of the master billing account that it is being
618 # resold through.
619 # Otherwise this will be empty.
620 &quot;name&quot;: &quot;A String&quot;, # The resource name of the billing account. The resource name has the form
621 # `billingAccounts/{billing_account_id}`. For example,
622 # `billingAccounts/012345-567890-ABCDEF` would be the resource name for
623 # billing account `012345-567890-ABCDEF`.
624 &quot;open&quot;: True or False, # Output only. True if the billing account is open, and will therefore be charged for any
625 # usage on associated projects. False if the billing account is closed, and
626 # therefore projects associated with it will be unable to use paid services.
627 }
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700628
629 updateMask: string, The update mask applied to the resource.
Bu Sun Kim65020912020-05-20 12:08:20 -0700630Only &quot;display_name&quot; is currently supported.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700631 x__xgafv: string, V1 error format.
632 Allowed values
633 1 - v1 error format
634 2 - v2 error format
635
636Returns:
637 An object of the form:
638
639 { # A billing account in [GCP Console](https://console.cloud.google.com/).
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700640 # You can assign a billing account to one or more projects.
641 &quot;displayName&quot;: &quot;A String&quot;, # The display name given to the billing account, such as `My Billing
642 # Account`. This name is displayed in the GCP Console.
643 &quot;masterBillingAccount&quot;: &quot;A String&quot;, # If this account is a
644 # [subaccount](https://cloud.google.com/billing/docs/concepts), then this
645 # will be the resource name of the master billing account that it is being
646 # resold through.
647 # Otherwise this will be empty.
648 &quot;name&quot;: &quot;A String&quot;, # The resource name of the billing account. The resource name has the form
649 # `billingAccounts/{billing_account_id}`. For example,
650 # `billingAccounts/012345-567890-ABCDEF` would be the resource name for
651 # billing account `012345-567890-ABCDEF`.
652 &quot;open&quot;: True or False, # Output only. True if the billing account is open, and will therefore be charged for any
653 # usage on associated projects. False if the billing account is closed, and
654 # therefore projects associated with it will be unable to use paid services.
655 }</pre>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700656</div>
657
658<div class="method">
Dan O'Mearadd494642020-05-01 07:42:23 -0700659 <code class="details" id="setIamPolicy">setIamPolicy(resource, body=None, x__xgafv=None)</code>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700660 <pre>Sets the access control policy for a billing account. Replaces any existing
661policy.
662The caller must have the `billing.accounts.setIamPolicy` permission on the
663account, which is often given to billing account
664[administrators](https://cloud.google.com/billing/docs/how-to/billing-access).
665
666Args:
667 resource: string, REQUIRED: The resource for which the policy is being specified.
668See the operation documentation for the appropriate value for this field. (required)
Dan O'Mearadd494642020-05-01 07:42:23 -0700669 body: object, The request body.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700670 The object takes the form of:
671
672{ # Request message for `SetIamPolicy` method.
Bu Sun Kim65020912020-05-20 12:08:20 -0700673 &quot;policy&quot;: { # An Identity and Access Management (IAM) policy, which specifies access # REQUIRED: The complete policy to be applied to the `resource`. The size of
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700674 # the policy is limited to a few 10s of KB. An empty policy is a
675 # valid policy but certain Cloud Platform services (such as Projects)
676 # might reject them.
Dan O'Mearadd494642020-05-01 07:42:23 -0700677 # controls for Google Cloud resources.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700678 #
679 #
Dan O'Mearadd494642020-05-01 07:42:23 -0700680 # A `Policy` is a collection of `bindings`. A `binding` binds one or more
681 # `members` to a single `role`. Members can be user accounts, service accounts,
682 # Google groups, and domains (such as G Suite). A `role` is a named list of
683 # permissions; each `role` can be an IAM predefined role or a user-created
684 # custom role.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700685 #
Bu Sun Kim65020912020-05-20 12:08:20 -0700686 # For some types of Google Cloud resources, a `binding` can also specify a
687 # `condition`, which is a logical expression that allows access to a resource
688 # only if the expression evaluates to `true`. A condition can add constraints
689 # based on attributes of the request, the resource, or both. To learn which
690 # resources support conditions in their IAM policies, see the
691 # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
Dan O'Mearadd494642020-05-01 07:42:23 -0700692 #
693 # **JSON example:**
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700694 #
695 # {
Bu Sun Kim65020912020-05-20 12:08:20 -0700696 # &quot;bindings&quot;: [
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700697 # {
Bu Sun Kim65020912020-05-20 12:08:20 -0700698 # &quot;role&quot;: &quot;roles/resourcemanager.organizationAdmin&quot;,
699 # &quot;members&quot;: [
700 # &quot;user:mike@example.com&quot;,
701 # &quot;group:admins@example.com&quot;,
702 # &quot;domain:google.com&quot;,
703 # &quot;serviceAccount:my-project-id@appspot.gserviceaccount.com&quot;
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700704 # ]
705 # },
706 # {
Bu Sun Kim65020912020-05-20 12:08:20 -0700707 # &quot;role&quot;: &quot;roles/resourcemanager.organizationViewer&quot;,
708 # &quot;members&quot;: [
709 # &quot;user:eve@example.com&quot;
710 # ],
711 # &quot;condition&quot;: {
712 # &quot;title&quot;: &quot;expirable access&quot;,
713 # &quot;description&quot;: &quot;Does not grant access after Sep 2020&quot;,
714 # &quot;expression&quot;: &quot;request.time &lt; timestamp(&#x27;2020-10-01T00:00:00.000Z&#x27;)&quot;,
Dan O'Mearadd494642020-05-01 07:42:23 -0700715 # }
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700716 # }
Dan O'Mearadd494642020-05-01 07:42:23 -0700717 # ],
Bu Sun Kim65020912020-05-20 12:08:20 -0700718 # &quot;etag&quot;: &quot;BwWWja0YfJA=&quot;,
719 # &quot;version&quot;: 3
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700720 # }
721 #
Dan O'Mearadd494642020-05-01 07:42:23 -0700722 # **YAML example:**
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700723 #
724 # bindings:
725 # - members:
726 # - user:mike@example.com
727 # - group:admins@example.com
728 # - domain:google.com
Dan O'Mearadd494642020-05-01 07:42:23 -0700729 # - serviceAccount:my-project-id@appspot.gserviceaccount.com
730 # role: roles/resourcemanager.organizationAdmin
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700731 # - members:
Dan O'Mearadd494642020-05-01 07:42:23 -0700732 # - user:eve@example.com
733 # role: roles/resourcemanager.organizationViewer
734 # condition:
735 # title: expirable access
736 # description: Does not grant access after Sep 2020
Bu Sun Kim65020912020-05-20 12:08:20 -0700737 # expression: request.time &lt; timestamp(&#x27;2020-10-01T00:00:00.000Z&#x27;)
Dan O'Mearadd494642020-05-01 07:42:23 -0700738 # - etag: BwWWja0YfJA=
739 # - version: 3
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700740 #
741 # For a description of IAM and its features, see the
Dan O'Mearadd494642020-05-01 07:42:23 -0700742 # [IAM documentation](https://cloud.google.com/iam/docs/).
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700743 &quot;version&quot;: 42, # Specifies the format of the policy.
744 #
745 # Valid values are `0`, `1`, and `3`. Requests that specify an invalid value
746 # are rejected.
747 #
748 # Any operation that affects conditional role bindings must specify version
749 # `3`. This requirement applies to the following operations:
750 #
751 # * Getting a policy that includes a conditional role binding
752 # * Adding a conditional role binding to a policy
753 # * Changing a conditional role binding in a policy
754 # * Removing any role binding, with or without a condition, from a policy
755 # that includes conditions
756 #
757 # **Important:** If you use IAM Conditions, you must include the `etag` field
758 # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
759 # you to overwrite a version `3` policy with a version `1` policy, and all of
760 # the conditions in the version `3` policy are lost.
761 #
762 # If a policy does not include any conditions, operations on that policy may
763 # specify any valid version or leave the field unset.
764 #
765 # To learn which resources support conditions in their IAM policies, see the
766 # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
767 &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
768 # prevent simultaneous updates of a policy from overwriting each other.
769 # It is strongly suggested that systems make use of the `etag` in the
770 # read-modify-write cycle to perform policy updates in order to avoid race
771 # conditions: An `etag` is returned in the response to `getIamPolicy`, and
772 # systems are expected to put that etag in the request to `setIamPolicy` to
773 # ensure that their change will be applied to the same version of the policy.
774 #
775 # **Important:** If you use IAM Conditions, you must include the `etag` field
776 # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
777 # you to overwrite a version `3` policy with a version `1` policy, and all of
778 # the conditions in the version `3` policy are lost.
Bu Sun Kim65020912020-05-20 12:08:20 -0700779 &quot;bindings&quot;: [ # Associates a list of `members` to a `role`. Optionally, may specify a
Dan O'Mearadd494642020-05-01 07:42:23 -0700780 # `condition` that determines how and when the `bindings` are applied. Each
781 # of the `bindings` must contain at least one member.
782 { # Associates `members` with a `role`.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700783 &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to `members`.
784 # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
Bu Sun Kim65020912020-05-20 12:08:20 -0700785 &quot;condition&quot;: { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.
786 #
787 # If the condition evaluates to `true`, then this binding applies to the
788 # current request.
789 #
790 # If the condition evaluates to `false`, then this binding does not apply to
791 # the current request. However, a different role binding might grant the same
792 # role to one or more of the members in this binding.
793 #
794 # To learn which resources support conditions in their IAM policies, see the
795 # [IAM
796 # documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
Dan O'Mearadd494642020-05-01 07:42:23 -0700797 # syntax. CEL is a C-like expression language. The syntax and semantics of CEL
798 # are documented at https://github.com/google/cel-spec.
799 #
800 # Example (Comparison):
801 #
Bu Sun Kim65020912020-05-20 12:08:20 -0700802 # title: &quot;Summary size limit&quot;
803 # description: &quot;Determines if a summary is less than 100 chars&quot;
804 # expression: &quot;document.summary.size() &lt; 100&quot;
Dan O'Mearadd494642020-05-01 07:42:23 -0700805 #
806 # Example (Equality):
807 #
Bu Sun Kim65020912020-05-20 12:08:20 -0700808 # title: &quot;Requestor is owner&quot;
809 # description: &quot;Determines if requestor is the document owner&quot;
810 # expression: &quot;document.owner == request.auth.claims.email&quot;
Dan O'Mearadd494642020-05-01 07:42:23 -0700811 #
812 # Example (Logic):
813 #
Bu Sun Kim65020912020-05-20 12:08:20 -0700814 # title: &quot;Public documents&quot;
815 # description: &quot;Determine whether the document should be publicly visible&quot;
816 # expression: &quot;document.type != &#x27;private&#x27; &amp;&amp; document.type != &#x27;internal&#x27;&quot;
Dan O'Mearadd494642020-05-01 07:42:23 -0700817 #
818 # Example (Data Manipulation):
819 #
Bu Sun Kim65020912020-05-20 12:08:20 -0700820 # title: &quot;Notification string&quot;
821 # description: &quot;Create a notification string with a timestamp.&quot;
822 # expression: &quot;&#x27;New message received at &#x27; + string(document.create_time)&quot;
Dan O'Mearadd494642020-05-01 07:42:23 -0700823 #
824 # The exact variables and functions that may be referenced within an expression
825 # are determined by the service that evaluates it. See the service
826 # documentation for additional information.
Bu Sun Kim65020912020-05-20 12:08:20 -0700827 &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
Dan O'Mearadd494642020-05-01 07:42:23 -0700828 # syntax.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700829 &quot;location&quot;: &quot;A String&quot;, # Optional. String indicating the location of the expression for error
830 # reporting, e.g. a file name and a position in the file.
Bu Sun Kim65020912020-05-20 12:08:20 -0700831 &quot;title&quot;: &quot;A String&quot;, # Optional. Title for the expression, i.e. a short string describing
Dan O'Mearadd494642020-05-01 07:42:23 -0700832 # its purpose. This can be used e.g. in UIs which allow to enter the
833 # expression.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700834 &quot;description&quot;: &quot;A String&quot;, # Optional. Description of the expression. This is a longer text which
835 # describes the expression, e.g. when hovered over it in a UI.
Dan O'Mearadd494642020-05-01 07:42:23 -0700836 },
Bu Sun Kim65020912020-05-20 12:08:20 -0700837 &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
Dan O'Mearadd494642020-05-01 07:42:23 -0700838 # `members` can have the following values:
839 #
840 # * `allUsers`: A special identifier that represents anyone who is
841 # on the internet; with or without a Google account.
842 #
843 # * `allAuthenticatedUsers`: A special identifier that represents anyone
844 # who is authenticated with a Google account or a service account.
845 #
846 # * `user:{emailid}`: An email address that represents a specific Google
847 # account. For example, `alice@example.com` .
848 #
849 #
850 # * `serviceAccount:{emailid}`: An email address that represents a service
851 # account. For example, `my-other-app@appspot.gserviceaccount.com`.
852 #
853 # * `group:{emailid}`: An email address that represents a Google group.
854 # For example, `admins@example.com`.
855 #
856 # * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
857 # identifier) representing a user that has been recently deleted. For
858 # example, `alice@example.com?uid=123456789012345678901`. If the user is
859 # recovered, this value reverts to `user:{emailid}` and the recovered user
860 # retains the role in the binding.
861 #
862 # * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
863 # unique identifier) representing a service account that has been recently
864 # deleted. For example,
865 # `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
866 # If the service account is undeleted, this value reverts to
867 # `serviceAccount:{emailid}` and the undeleted service account retains the
868 # role in the binding.
869 #
870 # * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
871 # identifier) representing a Google group that has been recently
872 # deleted. For example, `admins@example.com?uid=123456789012345678901`. If
873 # the group is recovered, this value reverts to `group:{emailid}` and the
874 # recovered group retains the role in the binding.
875 #
876 #
877 # * `domain:{domain}`: The G Suite domain (primary) that represents all the
878 # users of that domain. For example, `google.com` or `example.com`.
879 #
Bu Sun Kim65020912020-05-20 12:08:20 -0700880 &quot;A String&quot;,
Dan O'Mearadd494642020-05-01 07:42:23 -0700881 ],
882 },
883 ],
Bu Sun Kim65020912020-05-20 12:08:20 -0700884 &quot;auditConfigs&quot;: [ # Specifies cloud audit logging configuration for this policy.
885 { # Specifies the audit configuration for a service.
886 # The configuration determines which permission types are logged, and what
887 # identities, if any, are exempted from logging.
888 # An AuditConfig must have one or more AuditLogConfigs.
889 #
890 # If there are AuditConfigs for both `allServices` and a specific service,
891 # the union of the two AuditConfigs is used for that service: the log_types
892 # specified in each AuditConfig are enabled, and the exempted_members in each
893 # AuditLogConfig are exempted.
894 #
895 # Example Policy with multiple AuditConfigs:
896 #
897 # {
898 # &quot;audit_configs&quot;: [
899 # {
900 # &quot;service&quot;: &quot;allServices&quot;
901 # &quot;audit_log_configs&quot;: [
902 # {
903 # &quot;log_type&quot;: &quot;DATA_READ&quot;,
904 # &quot;exempted_members&quot;: [
905 # &quot;user:jose@example.com&quot;
906 # ]
907 # },
908 # {
909 # &quot;log_type&quot;: &quot;DATA_WRITE&quot;,
910 # },
911 # {
912 # &quot;log_type&quot;: &quot;ADMIN_READ&quot;,
913 # }
914 # ]
915 # },
916 # {
917 # &quot;service&quot;: &quot;sampleservice.googleapis.com&quot;
918 # &quot;audit_log_configs&quot;: [
919 # {
920 # &quot;log_type&quot;: &quot;DATA_READ&quot;,
921 # },
922 # {
923 # &quot;log_type&quot;: &quot;DATA_WRITE&quot;,
924 # &quot;exempted_members&quot;: [
925 # &quot;user:aliya@example.com&quot;
926 # ]
927 # }
928 # ]
929 # }
930 # ]
931 # }
932 #
933 # For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ
934 # logging. It also exempts jose@example.com from DATA_READ logging, and
935 # aliya@example.com from DATA_WRITE logging.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -0700936 &quot;service&quot;: &quot;A String&quot;, # Specifies a service that will be enabled for audit logging.
937 # For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
938 # `allServices` is a special value that covers all services.
Bu Sun Kim65020912020-05-20 12:08:20 -0700939 &quot;auditLogConfigs&quot;: [ # The configuration for logging of each type of permission.
940 { # Provides the configuration for logging a type of permissions.
941 # Example:
942 #
943 # {
944 # &quot;audit_log_configs&quot;: [
945 # {
946 # &quot;log_type&quot;: &quot;DATA_READ&quot;,
947 # &quot;exempted_members&quot;: [
948 # &quot;user:jose@example.com&quot;
949 # ]
950 # },
951 # {
952 # &quot;log_type&quot;: &quot;DATA_WRITE&quot;,
953 # }
954 # ]
955 # }
956 #
957 # This enables &#x27;DATA_READ&#x27; and &#x27;DATA_WRITE&#x27; logging, while exempting
958 # jose@example.com from DATA_READ logging.
959 &quot;exemptedMembers&quot;: [ # Specifies the identities that do not cause logging for this type of
960 # permission.
961 # Follows the same format of Binding.members.
962 &quot;A String&quot;,
963 ],
964 &quot;logType&quot;: &quot;A String&quot;, # The log type that this config enables.
965 },
966 ],
Bu Sun Kim65020912020-05-20 12:08:20 -0700967 },
968 ],
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700969 },
Bu Sun Kim65020912020-05-20 12:08:20 -0700970 &quot;updateMask&quot;: &quot;A String&quot;, # OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700971 # the fields in the mask will be modified. If no mask is provided, the
972 # following default mask is used:
Dan O'Mearadd494642020-05-01 07:42:23 -0700973 #
Bu Sun Kim65020912020-05-20 12:08:20 -0700974 # `paths: &quot;bindings, etag&quot;`
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700975 }
976
977 x__xgafv: string, V1 error format.
978 Allowed values
979 1 - v1 error format
980 2 - v2 error format
981
982Returns:
983 An object of the form:
984
Dan O'Mearadd494642020-05-01 07:42:23 -0700985 { # An Identity and Access Management (IAM) policy, which specifies access
986 # controls for Google Cloud resources.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700987 #
988 #
Dan O'Mearadd494642020-05-01 07:42:23 -0700989 # A `Policy` is a collection of `bindings`. A `binding` binds one or more
990 # `members` to a single `role`. Members can be user accounts, service accounts,
991 # Google groups, and domains (such as G Suite). A `role` is a named list of
992 # permissions; each `role` can be an IAM predefined role or a user-created
993 # custom role.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -0700994 #
Bu Sun Kim65020912020-05-20 12:08:20 -0700995 # For some types of Google Cloud resources, a `binding` can also specify a
996 # `condition`, which is a logical expression that allows access to a resource
997 # only if the expression evaluates to `true`. A condition can add constraints
998 # based on attributes of the request, the resource, or both. To learn which
999 # resources support conditions in their IAM policies, see the
1000 # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
Dan O'Mearadd494642020-05-01 07:42:23 -07001001 #
1002 # **JSON example:**
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001003 #
1004 # {
Bu Sun Kim65020912020-05-20 12:08:20 -07001005 # &quot;bindings&quot;: [
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001006 # {
Bu Sun Kim65020912020-05-20 12:08:20 -07001007 # &quot;role&quot;: &quot;roles/resourcemanager.organizationAdmin&quot;,
1008 # &quot;members&quot;: [
1009 # &quot;user:mike@example.com&quot;,
1010 # &quot;group:admins@example.com&quot;,
1011 # &quot;domain:google.com&quot;,
1012 # &quot;serviceAccount:my-project-id@appspot.gserviceaccount.com&quot;
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001013 # ]
1014 # },
1015 # {
Bu Sun Kim65020912020-05-20 12:08:20 -07001016 # &quot;role&quot;: &quot;roles/resourcemanager.organizationViewer&quot;,
1017 # &quot;members&quot;: [
1018 # &quot;user:eve@example.com&quot;
1019 # ],
1020 # &quot;condition&quot;: {
1021 # &quot;title&quot;: &quot;expirable access&quot;,
1022 # &quot;description&quot;: &quot;Does not grant access after Sep 2020&quot;,
1023 # &quot;expression&quot;: &quot;request.time &lt; timestamp(&#x27;2020-10-01T00:00:00.000Z&#x27;)&quot;,
Dan O'Mearadd494642020-05-01 07:42:23 -07001024 # }
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001025 # }
Dan O'Mearadd494642020-05-01 07:42:23 -07001026 # ],
Bu Sun Kim65020912020-05-20 12:08:20 -07001027 # &quot;etag&quot;: &quot;BwWWja0YfJA=&quot;,
1028 # &quot;version&quot;: 3
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001029 # }
1030 #
Dan O'Mearadd494642020-05-01 07:42:23 -07001031 # **YAML example:**
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001032 #
1033 # bindings:
1034 # - members:
1035 # - user:mike@example.com
1036 # - group:admins@example.com
1037 # - domain:google.com
Dan O'Mearadd494642020-05-01 07:42:23 -07001038 # - serviceAccount:my-project-id@appspot.gserviceaccount.com
1039 # role: roles/resourcemanager.organizationAdmin
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001040 # - members:
Dan O'Mearadd494642020-05-01 07:42:23 -07001041 # - user:eve@example.com
1042 # role: roles/resourcemanager.organizationViewer
1043 # condition:
1044 # title: expirable access
1045 # description: Does not grant access after Sep 2020
Bu Sun Kim65020912020-05-20 12:08:20 -07001046 # expression: request.time &lt; timestamp(&#x27;2020-10-01T00:00:00.000Z&#x27;)
Dan O'Mearadd494642020-05-01 07:42:23 -07001047 # - etag: BwWWja0YfJA=
1048 # - version: 3
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001049 #
1050 # For a description of IAM and its features, see the
Dan O'Mearadd494642020-05-01 07:42:23 -07001051 # [IAM documentation](https://cloud.google.com/iam/docs/).
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -07001052 &quot;version&quot;: 42, # Specifies the format of the policy.
1053 #
1054 # Valid values are `0`, `1`, and `3`. Requests that specify an invalid value
1055 # are rejected.
1056 #
1057 # Any operation that affects conditional role bindings must specify version
1058 # `3`. This requirement applies to the following operations:
1059 #
1060 # * Getting a policy that includes a conditional role binding
1061 # * Adding a conditional role binding to a policy
1062 # * Changing a conditional role binding in a policy
1063 # * Removing any role binding, with or without a condition, from a policy
1064 # that includes conditions
1065 #
1066 # **Important:** If you use IAM Conditions, you must include the `etag` field
1067 # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
1068 # you to overwrite a version `3` policy with a version `1` policy, and all of
1069 # the conditions in the version `3` policy are lost.
1070 #
1071 # If a policy does not include any conditions, operations on that policy may
1072 # specify any valid version or leave the field unset.
1073 #
1074 # To learn which resources support conditions in their IAM policies, see the
1075 # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
1076 &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
1077 # prevent simultaneous updates of a policy from overwriting each other.
1078 # It is strongly suggested that systems make use of the `etag` in the
1079 # read-modify-write cycle to perform policy updates in order to avoid race
1080 # conditions: An `etag` is returned in the response to `getIamPolicy`, and
1081 # systems are expected to put that etag in the request to `setIamPolicy` to
1082 # ensure that their change will be applied to the same version of the policy.
1083 #
1084 # **Important:** If you use IAM Conditions, you must include the `etag` field
1085 # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
1086 # you to overwrite a version `3` policy with a version `1` policy, and all of
1087 # the conditions in the version `3` policy are lost.
Bu Sun Kim65020912020-05-20 12:08:20 -07001088 &quot;bindings&quot;: [ # Associates a list of `members` to a `role`. Optionally, may specify a
Dan O'Mearadd494642020-05-01 07:42:23 -07001089 # `condition` that determines how and when the `bindings` are applied. Each
1090 # of the `bindings` must contain at least one member.
1091 { # Associates `members` with a `role`.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -07001092 &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to `members`.
1093 # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
Bu Sun Kim65020912020-05-20 12:08:20 -07001094 &quot;condition&quot;: { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.
1095 #
1096 # If the condition evaluates to `true`, then this binding applies to the
1097 # current request.
1098 #
1099 # If the condition evaluates to `false`, then this binding does not apply to
1100 # the current request. However, a different role binding might grant the same
1101 # role to one or more of the members in this binding.
1102 #
1103 # To learn which resources support conditions in their IAM policies, see the
1104 # [IAM
1105 # documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
Dan O'Mearadd494642020-05-01 07:42:23 -07001106 # syntax. CEL is a C-like expression language. The syntax and semantics of CEL
1107 # are documented at https://github.com/google/cel-spec.
1108 #
1109 # Example (Comparison):
1110 #
Bu Sun Kim65020912020-05-20 12:08:20 -07001111 # title: &quot;Summary size limit&quot;
1112 # description: &quot;Determines if a summary is less than 100 chars&quot;
1113 # expression: &quot;document.summary.size() &lt; 100&quot;
Dan O'Mearadd494642020-05-01 07:42:23 -07001114 #
1115 # Example (Equality):
1116 #
Bu Sun Kim65020912020-05-20 12:08:20 -07001117 # title: &quot;Requestor is owner&quot;
1118 # description: &quot;Determines if requestor is the document owner&quot;
1119 # expression: &quot;document.owner == request.auth.claims.email&quot;
Dan O'Mearadd494642020-05-01 07:42:23 -07001120 #
1121 # Example (Logic):
1122 #
Bu Sun Kim65020912020-05-20 12:08:20 -07001123 # title: &quot;Public documents&quot;
1124 # description: &quot;Determine whether the document should be publicly visible&quot;
1125 # expression: &quot;document.type != &#x27;private&#x27; &amp;&amp; document.type != &#x27;internal&#x27;&quot;
Dan O'Mearadd494642020-05-01 07:42:23 -07001126 #
1127 # Example (Data Manipulation):
1128 #
Bu Sun Kim65020912020-05-20 12:08:20 -07001129 # title: &quot;Notification string&quot;
1130 # description: &quot;Create a notification string with a timestamp.&quot;
1131 # expression: &quot;&#x27;New message received at &#x27; + string(document.create_time)&quot;
Dan O'Mearadd494642020-05-01 07:42:23 -07001132 #
1133 # The exact variables and functions that may be referenced within an expression
1134 # are determined by the service that evaluates it. See the service
1135 # documentation for additional information.
Bu Sun Kim65020912020-05-20 12:08:20 -07001136 &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
Dan O'Mearadd494642020-05-01 07:42:23 -07001137 # syntax.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -07001138 &quot;location&quot;: &quot;A String&quot;, # Optional. String indicating the location of the expression for error
1139 # reporting, e.g. a file name and a position in the file.
Bu Sun Kim65020912020-05-20 12:08:20 -07001140 &quot;title&quot;: &quot;A String&quot;, # Optional. Title for the expression, i.e. a short string describing
Dan O'Mearadd494642020-05-01 07:42:23 -07001141 # its purpose. This can be used e.g. in UIs which allow to enter the
1142 # expression.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -07001143 &quot;description&quot;: &quot;A String&quot;, # Optional. Description of the expression. This is a longer text which
1144 # describes the expression, e.g. when hovered over it in a UI.
Dan O'Mearadd494642020-05-01 07:42:23 -07001145 },
Bu Sun Kim65020912020-05-20 12:08:20 -07001146 &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
Dan O'Mearadd494642020-05-01 07:42:23 -07001147 # `members` can have the following values:
1148 #
1149 # * `allUsers`: A special identifier that represents anyone who is
1150 # on the internet; with or without a Google account.
1151 #
1152 # * `allAuthenticatedUsers`: A special identifier that represents anyone
1153 # who is authenticated with a Google account or a service account.
1154 #
1155 # * `user:{emailid}`: An email address that represents a specific Google
1156 # account. For example, `alice@example.com` .
1157 #
1158 #
1159 # * `serviceAccount:{emailid}`: An email address that represents a service
1160 # account. For example, `my-other-app@appspot.gserviceaccount.com`.
1161 #
1162 # * `group:{emailid}`: An email address that represents a Google group.
1163 # For example, `admins@example.com`.
1164 #
1165 # * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
1166 # identifier) representing a user that has been recently deleted. For
1167 # example, `alice@example.com?uid=123456789012345678901`. If the user is
1168 # recovered, this value reverts to `user:{emailid}` and the recovered user
1169 # retains the role in the binding.
1170 #
1171 # * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
1172 # unique identifier) representing a service account that has been recently
1173 # deleted. For example,
1174 # `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
1175 # If the service account is undeleted, this value reverts to
1176 # `serviceAccount:{emailid}` and the undeleted service account retains the
1177 # role in the binding.
1178 #
1179 # * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
1180 # identifier) representing a Google group that has been recently
1181 # deleted. For example, `admins@example.com?uid=123456789012345678901`. If
1182 # the group is recovered, this value reverts to `group:{emailid}` and the
1183 # recovered group retains the role in the binding.
1184 #
1185 #
1186 # * `domain:{domain}`: The G Suite domain (primary) that represents all the
1187 # users of that domain. For example, `google.com` or `example.com`.
1188 #
Bu Sun Kim65020912020-05-20 12:08:20 -07001189 &quot;A String&quot;,
Dan O'Mearadd494642020-05-01 07:42:23 -07001190 ],
1191 },
1192 ],
Bu Sun Kim65020912020-05-20 12:08:20 -07001193 &quot;auditConfigs&quot;: [ # Specifies cloud audit logging configuration for this policy.
1194 { # Specifies the audit configuration for a service.
1195 # The configuration determines which permission types are logged, and what
1196 # identities, if any, are exempted from logging.
1197 # An AuditConfig must have one or more AuditLogConfigs.
1198 #
1199 # If there are AuditConfigs for both `allServices` and a specific service,
1200 # the union of the two AuditConfigs is used for that service: the log_types
1201 # specified in each AuditConfig are enabled, and the exempted_members in each
1202 # AuditLogConfig are exempted.
1203 #
1204 # Example Policy with multiple AuditConfigs:
1205 #
1206 # {
1207 # &quot;audit_configs&quot;: [
1208 # {
1209 # &quot;service&quot;: &quot;allServices&quot;
1210 # &quot;audit_log_configs&quot;: [
1211 # {
1212 # &quot;log_type&quot;: &quot;DATA_READ&quot;,
1213 # &quot;exempted_members&quot;: [
1214 # &quot;user:jose@example.com&quot;
1215 # ]
1216 # },
1217 # {
1218 # &quot;log_type&quot;: &quot;DATA_WRITE&quot;,
1219 # },
1220 # {
1221 # &quot;log_type&quot;: &quot;ADMIN_READ&quot;,
1222 # }
1223 # ]
1224 # },
1225 # {
1226 # &quot;service&quot;: &quot;sampleservice.googleapis.com&quot;
1227 # &quot;audit_log_configs&quot;: [
1228 # {
1229 # &quot;log_type&quot;: &quot;DATA_READ&quot;,
1230 # },
1231 # {
1232 # &quot;log_type&quot;: &quot;DATA_WRITE&quot;,
1233 # &quot;exempted_members&quot;: [
1234 # &quot;user:aliya@example.com&quot;
1235 # ]
1236 # }
1237 # ]
1238 # }
1239 # ]
1240 # }
1241 #
1242 # For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ
1243 # logging. It also exempts jose@example.com from DATA_READ logging, and
1244 # aliya@example.com from DATA_WRITE logging.
Bu Sun Kim4ed7d3f2020-05-27 12:20:54 -07001245 &quot;service&quot;: &quot;A String&quot;, # Specifies a service that will be enabled for audit logging.
1246 # For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
1247 # `allServices` is a special value that covers all services.
Bu Sun Kim65020912020-05-20 12:08:20 -07001248 &quot;auditLogConfigs&quot;: [ # The configuration for logging of each type of permission.
1249 { # Provides the configuration for logging a type of permissions.
1250 # Example:
1251 #
1252 # {
1253 # &quot;audit_log_configs&quot;: [
1254 # {
1255 # &quot;log_type&quot;: &quot;DATA_READ&quot;,
1256 # &quot;exempted_members&quot;: [
1257 # &quot;user:jose@example.com&quot;
1258 # ]
1259 # },
1260 # {
1261 # &quot;log_type&quot;: &quot;DATA_WRITE&quot;,
1262 # }
1263 # ]
1264 # }
1265 #
1266 # This enables &#x27;DATA_READ&#x27; and &#x27;DATA_WRITE&#x27; logging, while exempting
1267 # jose@example.com from DATA_READ logging.
1268 &quot;exemptedMembers&quot;: [ # Specifies the identities that do not cause logging for this type of
1269 # permission.
1270 # Follows the same format of Binding.members.
1271 &quot;A String&quot;,
1272 ],
1273 &quot;logType&quot;: &quot;A String&quot;, # The log type that this config enables.
1274 },
1275 ],
Bu Sun Kim65020912020-05-20 12:08:20 -07001276 },
1277 ],
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001278 }</pre>
1279</div>
1280
1281<div class="method">
Dan O'Mearadd494642020-05-01 07:42:23 -07001282 <code class="details" id="testIamPermissions">testIamPermissions(resource, body=None, x__xgafv=None)</code>
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001283 <pre>Tests the access control policy for a billing account. This method takes
1284the resource and a set of permissions as input and returns the subset of
1285the input permissions that the caller is allowed for that resource.
1286
1287Args:
1288 resource: string, REQUIRED: The resource for which the policy detail is being requested.
1289See the operation documentation for the appropriate value for this field. (required)
Dan O'Mearadd494642020-05-01 07:42:23 -07001290 body: object, The request body.
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001291 The object takes the form of:
1292
1293{ # Request message for `TestIamPermissions` method.
Bu Sun Kim65020912020-05-20 12:08:20 -07001294 &quot;permissions&quot;: [ # The set of permissions to check for the `resource`. Permissions with
1295 # wildcards (such as &#x27;*&#x27; or &#x27;storage.*&#x27;) are not allowed. For more
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001296 # information see
1297 # [IAM Overview](https://cloud.google.com/iam/docs/overview#permissions).
Bu Sun Kim65020912020-05-20 12:08:20 -07001298 &quot;A String&quot;,
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001299 ],
1300 }
1301
1302 x__xgafv: string, V1 error format.
1303 Allowed values
1304 1 - v1 error format
1305 2 - v2 error format
1306
1307Returns:
1308 An object of the form:
1309
1310 { # Response message for `TestIamPermissions` method.
Bu Sun Kim65020912020-05-20 12:08:20 -07001311 &quot;permissions&quot;: [ # A subset of `TestPermissionsRequest.permissions` that the caller is
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001312 # allowed.
Bu Sun Kim65020912020-05-20 12:08:20 -07001313 &quot;A String&quot;,
Bu Sun Kim715bd7f2019-06-14 16:50:42 -07001314 ],
1315 }</pre>
1316</div>
1317
Takashi Matsuo06694102015-09-11 13:55:40 -07001318</body></html>