googleapis/google/iam
Google APIs 994353e532 feat: new iam v3 client for AccessPolicies
docs: Updated comments across various messages, fields, enums, and methods in the IAM v3beta API, including PolicyBinding, PolicyKind, ListPolicyBindingsRequest, and SearchTargetPolicyBindingsRequest to improve clarity

PiperOrigin-RevId: 956618092
2026-07-30 10:54:00 -07:00
..
admin feat: new iam v3beta client for AccessPolicies, this is step 4&5 for go/client-user-guide?API_NAME=iam.googleapis.com%09&API_SHORTNAME=iam&API_PATH=google%2Fiam&API_VERSION=v3&PROTO_SERVICE=AccessPolicies#run-api-publish-changelist 2026-04-17 10:24:13 -07:00
credentials fix: upgrade gRPC service registration func 2025-10-07 10:28:32 -07:00
v1 fix: upgrade gRPC service registration func 2025-10-07 10:28:32 -07:00
v1beta chore: update package names to published versions 2025-10-07 18:18:22 -07:00
v2 fix: upgrade gRPC service registration func 2025-10-07 10:28:32 -07:00
v2beta fix: upgrade gRPC service registration func 2025-10-07 10:28:32 -07:00
v3 feat: new iam v3 client for AccessPolicies 2026-07-30 10:54:00 -07:00
v3beta fix: Restore google-iam-v3beta gem name 2026-05-07 13:50:18 -07:00
BUILD.bazel chore: update preview/stable values for previously migrated libraries, and do not attempt to regenerate .OwlBot.yaml for libraries that already exist 2025-09-18 18:10:09 -07:00
README.md chore: update README files 2023-10-11 10:16:35 -07:00

IAM (Identity and Access Management) Protos

This folder contains protocol buffer types which represent IAM (Identity and Access Management) concepts plus a mix-in service declaration (IAMPolicy) which can be inherited by APIs so that they follow a consistent pattern for IAM operations.

Key Concepts

  • Binding: Associates a list of identities with a particular role. An identity can match things like all users, all authenticated users, a single user, a single service account, a single group, or a single domain. A role is a permission defined by IAM, such as roles/viewer, roles/editor, or roles/owner.
  • Policy: A list of bindings where each role can only appear once. It also contains a version to track iterations of the bindings.

Key Service definitions

  • IAMPolicy: This is a mix-in service which defines three operations:
    • SetIamPolicy: Sets the access control policy on the specified resource.
    • GetIamPolicy: Gets the access control policy for a resource.
    • TestIamPermissions: Returns permissions that a caller has on the specified resource.