Package types (0.3.0)

AccessControlEntry is used to control who can do some operation.

Different types of approval workflows that can be used to gate privileged access granting.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

Request message for ApproveGrant method.

Request message for CheckOnboardingStatus method.

Response message for CheckOnboardingStatus method.

Message for creating an entitlement.

Message for creating a grant

Message for deleting an entitlement.

Request message for DenyGrant method.

An entitlement defines the eligibility of a set of users to obtain predefined access for some time possibly after going through an approval workflow.

Message for getting an entitlement.

Message for getting a grant.

A grant represents a request from a user for obtaining the access specified in an entitlement they are eligible for.

Justification represents a justification for requesting access.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

Message for requesting list of entitlements.

Message for response to listing entitlements.

Message for requesting list of grants.

Message for response to listing grants.

A manual approval workflow where users who are designated as approvers need to call the ApproveGrant/DenyGrant APIs for a grant. The workflow can consist of multiple serial steps where each step defines who can act as approver in that step and how many of those users should approve before the workflow moves to the next step.

This can be used to create approval workflows such as:

• Require an approval from any user in a group G.
• Require an approval from any k number of users from a Group G.
• Require an approval from any user in a group G and then from a user U.

A single user might be part of the approvers ACL for multiple steps in this workflow, but they can only approve once and that approval is only considered to satisfy the approval step at which it was granted.

Represents the metadata of the long-running operation.

Privileged access that this service can be used to gate.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

Request message for RevokeGrant method.

Request message for SearchEntitlements method.

Response message for SearchEntitlements method.

Request message for SearchGrants method.

Response message for SearchGrants method.

Message for updating an entitlement.