googleapis/google/cloud/dataplex/v1/security.proto
Google APIs 69ca7ae2e6 feat(dataplex): add DataProductService to manage data products and underlying data assets
feat(dataplex): add MetadataFeed to CatalogService for tracking metadata changes
feat(dataplex): add LookupContext to CatalogService for LLM-generated resource context
feat(dataplex): add support for attaching aspects to EntryLinks
feat(dataplex): add UpdateEntryLink and LookupEntryLinks methods to CatalogService
feat(dataplex): support OneTime triggers for DataScan operations
feat(dataplex): add debug query support to Data Quality rules
feat(dataplex): allow selective generation scope for Data Documentation scans
feat(dataplex): add SKIPPED state to DataScan catalog publishing status
docs(dataplex): remove deprecated metadata change warnings in Dataplex Catalog

The DataProductService provides APIs to curate and manage collections of data assets as data products, enabling more organized sharing and usage for specific business cases.

MetadataFeeds allow users to monitor metadata changes (CREATE, UPDATE, DELETE) within a specified scope (organization, project, or entry group) and publish them to Pub/Sub.

CatalogService now includes a LookupContext API to provide LLM-generated context for resources, and enhanced EntryLink management, including the ability to attach aspects.

DataScan operations now support a OneTime trigger for single-run scans, and Data Quality rules support DebugQueries to help investigate rule failures by returning diagnostic values.

fix(dataplex)!: remove deprecated Explore-related methods and messages from public client libraries

Breaking Changes:
- Removed ContentService and all associated methods (CreateContent, UpdateContent, DeleteContent, GetContent, ListContent, etc.) and request/response messages.
- Removed Environment and Session management methods from DataplexService (CreateEnvironment, UpdateEnvironment, DeleteEnvironment, ListEnvironments, GetEnvironment, ListSessions) and their associated messages.

PiperOrigin-RevId: 883306841
2026-03-13 13:15:29 -07:00

53 lines
2.3 KiB
Protocol Buffer

// Copyright 2026 Google LLC
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
syntax = "proto3";
package google.cloud.dataplex.v1;
import "google/api/field_behavior.proto";
option go_package = "cloud.google.com/go/dataplex/apiv1/dataplexpb;dataplexpb";
option java_multiple_files = true;
option java_outer_classname = "SecurityProto";
option java_package = "com.google.cloud.dataplex.v1";
// ResourceAccessSpec holds the access control configuration to be enforced
// on the resources, for example, Cloud Storage bucket, BigQuery dataset,
// BigQuery table.
message ResourceAccessSpec {
// Optional. The format of strings follows the pattern followed by IAM in the
// bindings. user:{email}, serviceAccount:{email} group:{email}.
// The set of principals to be granted reader role on the resource.
repeated string readers = 1 [(google.api.field_behavior) = OPTIONAL];
// Optional. The set of principals to be granted writer role on the resource.
repeated string writers = 2 [(google.api.field_behavior) = OPTIONAL];
// Optional. The set of principals to be granted owner role on the resource.
repeated string owners = 3 [(google.api.field_behavior) = OPTIONAL];
}
// DataAccessSpec holds the access control configuration to be enforced on data
// stored within resources (eg: rows, columns in BigQuery Tables). When
// associated with data, the data is only accessible to
// principals explicitly granted access through the DataAccessSpec. Principals
// with access to the containing resource are not implicitly granted access.
message DataAccessSpec {
// Optional. The format of strings follows the pattern followed by IAM in the
// bindings. user:{email}, serviceAccount:{email} group:{email}.
// The set of principals to be granted reader role on data
// stored within resources.
repeated string readers = 1 [(google.api.field_behavior) = OPTIONAL];
}