getFoldersList();
+ /**
+ *
+ *
+ *
+ * The folder(s) that the IAM policy belongs to, in the form of
+ * folders/{FOLDER_NUMBER}. This field is available when the IAM policy
+ * belongs to one or more folders.
+ * To search against `folders`:
+ * * use a field query. Example: `folders:(123 OR 456)`
+ * * use a free text query. Example: `123`
+ * * specify the `scope` field as this folder in your search request.
+ *
+ *
+ * repeated string folders = 6;
+ *
+ * @return The count of folders.
+ */
+ int getFoldersCount();
+ /**
+ *
+ *
+ *
+ * The folder(s) that the IAM policy belongs to, in the form of
+ * folders/{FOLDER_NUMBER}. This field is available when the IAM policy
+ * belongs to one or more folders.
+ * To search against `folders`:
+ * * use a field query. Example: `folders:(123 OR 456)`
+ * * use a free text query. Example: `123`
+ * * specify the `scope` field as this folder in your search request.
+ *
+ *
+ * repeated string folders = 6;
+ *
+ * @param index The index of the element to return.
+ * @return The folders at the given index.
+ */
+ java.lang.String getFolders(int index);
+ /**
+ *
+ *
+ *
+ * The folder(s) that the IAM policy belongs to, in the form of
+ * folders/{FOLDER_NUMBER}. This field is available when the IAM policy
+ * belongs to one or more folders.
+ * To search against `folders`:
+ * * use a field query. Example: `folders:(123 OR 456)`
+ * * use a free text query. Example: `123`
+ * * specify the `scope` field as this folder in your search request.
+ *
+ *
+ * repeated string folders = 6;
+ *
+ * @param index The index of the value to return.
+ * @return The bytes of the folders at the given index.
+ */
+ com.google.protobuf.ByteString getFoldersBytes(int index);
+
+ /**
+ *
+ *
+ *
+ * The organization that the IAM policy belongs to, in the form
+ * of organizations/{ORGANIZATION_NUMBER}. This field is available when the
+ * IAM policy belongs to an organization.
+ * To search against `organization`:
+ * * use a field query. Example: `organization:123`
+ * * use a free text query. Example: `123`
+ * * specify the `scope` field as this organization in your search request.
+ *
+ *
+ * string organization = 7;
+ *
+ * @return The organization.
+ */
+ java.lang.String getOrganization();
+ /**
+ *
+ *
+ *
+ * The organization that the IAM policy belongs to, in the form
+ * of organizations/{ORGANIZATION_NUMBER}. This field is available when the
+ * IAM policy belongs to an organization.
+ * To search against `organization`:
+ * * use a field query. Example: `organization:123`
+ * * use a free text query. Example: `123`
+ * * specify the `scope` field as this organization in your search request.
+ *
+ *
+ * string organization = 7;
+ *
+ * @return The bytes for organization.
+ */
+ com.google.protobuf.ByteString getOrganizationBytes();
+
/**
*
*
diff --git a/proto-google-cloud-asset-v1/src/main/java/com/google/cloud/asset/v1/SearchAllIamPoliciesRequest.java b/proto-google-cloud-asset-v1/src/main/java/com/google/cloud/asset/v1/SearchAllIamPoliciesRequest.java
index 9ab7c271b..95f6d1c77 100644
--- a/proto-google-cloud-asset-v1/src/main/java/com/google/cloud/asset/v1/SearchAllIamPoliciesRequest.java
+++ b/proto-google-cloud-asset-v1/src/main/java/com/google/cloud/asset/v1/SearchAllIamPoliciesRequest.java
@@ -41,6 +41,8 @@ private SearchAllIamPoliciesRequest() {
scope_ = "";
query_ = "";
pageToken_ = "";
+ assetTypes_ = com.google.protobuf.LazyStringArrayList.EMPTY;
+ orderBy_ = "";
}
@java.lang.Override
@@ -62,6 +64,7 @@ private SearchAllIamPoliciesRequest(
if (extensionRegistry == null) {
throw new java.lang.NullPointerException();
}
+ int mutable_bitField0_ = 0;
com.google.protobuf.UnknownFieldSet.Builder unknownFields =
com.google.protobuf.UnknownFieldSet.newBuilder();
try {
@@ -98,6 +101,23 @@ private SearchAllIamPoliciesRequest(
pageToken_ = s;
break;
}
+ case 42:
+ {
+ java.lang.String s = input.readStringRequireUtf8();
+ if (!((mutable_bitField0_ & 0x00000001) != 0)) {
+ assetTypes_ = new com.google.protobuf.LazyStringArrayList();
+ mutable_bitField0_ |= 0x00000001;
+ }
+ assetTypes_.add(s);
+ break;
+ }
+ case 58:
+ {
+ java.lang.String s = input.readStringRequireUtf8();
+
+ orderBy_ = s;
+ break;
+ }
default:
{
if (!parseUnknownField(input, unknownFields, extensionRegistry, tag)) {
@@ -112,6 +132,9 @@ private SearchAllIamPoliciesRequest(
} catch (java.io.IOException e) {
throw new com.google.protobuf.InvalidProtocolBufferException(e).setUnfinishedMessage(this);
} finally {
+ if (((mutable_bitField0_ & 0x00000001) != 0)) {
+ assetTypes_ = assetTypes_.getUnmodifiableView();
+ }
this.unknownFields = unknownFields.build();
makeExtensionsImmutable();
}
@@ -241,6 +264,10 @@ public com.google.protobuf.ByteString getScopeBytes() {
* * `resource:(instance1 OR instance2) policy:amy` to find
* IAM policy bindings that are set on resources "instance1" or
* "instance2" and also specify user "amy".
+ * * `roles:roles/compute.admin` to find IAM policy bindings that specify the
+ * Compute Admin role.
+ * * `memberTypes:user` to find IAM policy bindings that contain the "user"
+ * member type.
*
*
* string query = 2 [(.google.api.field_behavior) = OPTIONAL];
@@ -299,6 +326,10 @@ public java.lang.String getQuery() {
* * `resource:(instance1 OR instance2) policy:amy` to find
* IAM policy bindings that are set on resources "instance1" or
* "instance2" and also specify user "amy".
+ * * `roles:roles/compute.admin` to find IAM policy bindings that specify the
+ * Compute Admin role.
+ * * `memberTypes:user` to find IAM policy bindings that contain the "user"
+ * member type.
*
*
* string query = 2 [(.google.api.field_behavior) = OPTIONAL];
@@ -394,6 +425,182 @@ public com.google.protobuf.ByteString getPageTokenBytes() {
}
}
+ public static final int ASSET_TYPES_FIELD_NUMBER = 5;
+ private com.google.protobuf.LazyStringList assetTypes_;
+ /**
+ *
+ *
+ *
+ * Optional. A list of asset types that the IAM policies are attached to. If empty, it
+ * will search the IAM policies that are attached to all the [searchable asset
+ * types](https://cloud.google.com/asset-inventory/docs/supported-asset-types#searchable_asset_types).
+ * Regular expressions are also supported. For example:
+ * * "compute.googleapis.com.*" snapshots IAM policies attached to asset type
+ * starts with "compute.googleapis.com".
+ * * ".*Instance" snapshots IAM policies attached to asset type ends with
+ * "Instance".
+ * * ".*Instance.*" snapshots IAM policies attached to asset type contains
+ * "Instance".
+ * See [RE2](https://github.com/google/re2/wiki/Syntax) for all supported
+ * regular expression syntax. If the regular expression does not match any
+ * supported asset type, an INVALID_ARGUMENT error will be returned.
+ *
+ *
+ * repeated string asset_types = 5 [(.google.api.field_behavior) = OPTIONAL];
+ *
+ * @return A list containing the assetTypes.
+ */
+ public com.google.protobuf.ProtocolStringList getAssetTypesList() {
+ return assetTypes_;
+ }
+ /**
+ *
+ *
+ *
+ * Optional. A list of asset types that the IAM policies are attached to. If empty, it
+ * will search the IAM policies that are attached to all the [searchable asset
+ * types](https://cloud.google.com/asset-inventory/docs/supported-asset-types#searchable_asset_types).
+ * Regular expressions are also supported. For example:
+ * * "compute.googleapis.com.*" snapshots IAM policies attached to asset type
+ * starts with "compute.googleapis.com".
+ * * ".*Instance" snapshots IAM policies attached to asset type ends with
+ * "Instance".
+ * * ".*Instance.*" snapshots IAM policies attached to asset type contains
+ * "Instance".
+ * See [RE2](https://github.com/google/re2/wiki/Syntax) for all supported
+ * regular expression syntax. If the regular expression does not match any
+ * supported asset type, an INVALID_ARGUMENT error will be returned.
+ *
+ *
+ * repeated string asset_types = 5 [(.google.api.field_behavior) = OPTIONAL];
+ *
+ * @return The count of assetTypes.
+ */
+ public int getAssetTypesCount() {
+ return assetTypes_.size();
+ }
+ /**
+ *
+ *
+ *
+ * Optional. A list of asset types that the IAM policies are attached to. If empty, it
+ * will search the IAM policies that are attached to all the [searchable asset
+ * types](https://cloud.google.com/asset-inventory/docs/supported-asset-types#searchable_asset_types).
+ * Regular expressions are also supported. For example:
+ * * "compute.googleapis.com.*" snapshots IAM policies attached to asset type
+ * starts with "compute.googleapis.com".
+ * * ".*Instance" snapshots IAM policies attached to asset type ends with
+ * "Instance".
+ * * ".*Instance.*" snapshots IAM policies attached to asset type contains
+ * "Instance".
+ * See [RE2](https://github.com/google/re2/wiki/Syntax) for all supported
+ * regular expression syntax. If the regular expression does not match any
+ * supported asset type, an INVALID_ARGUMENT error will be returned.
+ *
+ *
+ * repeated string asset_types = 5 [(.google.api.field_behavior) = OPTIONAL];
+ *
+ * @param index The index of the element to return.
+ * @return The assetTypes at the given index.
+ */
+ public java.lang.String getAssetTypes(int index) {
+ return assetTypes_.get(index);
+ }
+ /**
+ *
+ *
+ *
+ * Optional. A list of asset types that the IAM policies are attached to. If empty, it
+ * will search the IAM policies that are attached to all the [searchable asset
+ * types](https://cloud.google.com/asset-inventory/docs/supported-asset-types#searchable_asset_types).
+ * Regular expressions are also supported. For example:
+ * * "compute.googleapis.com.*" snapshots IAM policies attached to asset type
+ * starts with "compute.googleapis.com".
+ * * ".*Instance" snapshots IAM policies attached to asset type ends with
+ * "Instance".
+ * * ".*Instance.*" snapshots IAM policies attached to asset type contains
+ * "Instance".
+ * See [RE2](https://github.com/google/re2/wiki/Syntax) for all supported
+ * regular expression syntax. If the regular expression does not match any
+ * supported asset type, an INVALID_ARGUMENT error will be returned.
+ *
+ *
+ * repeated string asset_types = 5 [(.google.api.field_behavior) = OPTIONAL];
+ *
+ * @param index The index of the value to return.
+ * @return The bytes of the assetTypes at the given index.
+ */
+ public com.google.protobuf.ByteString getAssetTypesBytes(int index) {
+ return assetTypes_.getByteString(index);
+ }
+
+ public static final int ORDER_BY_FIELD_NUMBER = 7;
+ private volatile java.lang.Object orderBy_;
+ /**
+ *
+ *
+ *
+ * Optional. A comma-separated list of fields specifying the sorting order of the
+ * results. The default order is ascending. Add " DESC" after the field name
+ * to indicate descending order. Redundant space characters are ignored.
+ * Example: "assetType DESC, resource".
+ * Only singular primitive fields in the response are sortable:
+ * * resource
+ * * assetType
+ * * project
+ * All the other fields such as repeated fields (e.g., `folders`) and
+ * non-primitive fields (e.g., `policy`) are not supported.
+ *
+ *
+ * string order_by = 7 [(.google.api.field_behavior) = OPTIONAL];
+ *
+ * @return The orderBy.
+ */
+ @java.lang.Override
+ public java.lang.String getOrderBy() {
+ java.lang.Object ref = orderBy_;
+ if (ref instanceof java.lang.String) {
+ return (java.lang.String) ref;
+ } else {
+ com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+ java.lang.String s = bs.toStringUtf8();
+ orderBy_ = s;
+ return s;
+ }
+ }
+ /**
+ *
+ *
+ *
+ * Optional. A comma-separated list of fields specifying the sorting order of the
+ * results. The default order is ascending. Add " DESC" after the field name
+ * to indicate descending order. Redundant space characters are ignored.
+ * Example: "assetType DESC, resource".
+ * Only singular primitive fields in the response are sortable:
+ * * resource
+ * * assetType
+ * * project
+ * All the other fields such as repeated fields (e.g., `folders`) and
+ * non-primitive fields (e.g., `policy`) are not supported.
+ *
+ *
+ * string order_by = 7 [(.google.api.field_behavior) = OPTIONAL];
+ *
+ * @return The bytes for orderBy.
+ */
+ @java.lang.Override
+ public com.google.protobuf.ByteString getOrderByBytes() {
+ java.lang.Object ref = orderBy_;
+ if (ref instanceof java.lang.String) {
+ com.google.protobuf.ByteString b =
+ com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+ orderBy_ = b;
+ return b;
+ } else {
+ return (com.google.protobuf.ByteString) ref;
+ }
+ }
+
private byte memoizedIsInitialized = -1;
@java.lang.Override
@@ -420,6 +627,12 @@ public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io
if (!getPageTokenBytes().isEmpty()) {
com.google.protobuf.GeneratedMessageV3.writeString(output, 4, pageToken_);
}
+ for (int i = 0; i < assetTypes_.size(); i++) {
+ com.google.protobuf.GeneratedMessageV3.writeString(output, 5, assetTypes_.getRaw(i));
+ }
+ if (!getOrderByBytes().isEmpty()) {
+ com.google.protobuf.GeneratedMessageV3.writeString(output, 7, orderBy_);
+ }
unknownFields.writeTo(output);
}
@@ -441,6 +654,17 @@ public int getSerializedSize() {
if (!getPageTokenBytes().isEmpty()) {
size += com.google.protobuf.GeneratedMessageV3.computeStringSize(4, pageToken_);
}
+ {
+ int dataSize = 0;
+ for (int i = 0; i < assetTypes_.size(); i++) {
+ dataSize += computeStringSizeNoTag(assetTypes_.getRaw(i));
+ }
+ size += dataSize;
+ size += 1 * getAssetTypesList().size();
+ }
+ if (!getOrderByBytes().isEmpty()) {
+ size += com.google.protobuf.GeneratedMessageV3.computeStringSize(7, orderBy_);
+ }
size += unknownFields.getSerializedSize();
memoizedSize = size;
return size;
@@ -461,6 +685,8 @@ public boolean equals(final java.lang.Object obj) {
if (!getQuery().equals(other.getQuery())) return false;
if (getPageSize() != other.getPageSize()) return false;
if (!getPageToken().equals(other.getPageToken())) return false;
+ if (!getAssetTypesList().equals(other.getAssetTypesList())) return false;
+ if (!getOrderBy().equals(other.getOrderBy())) return false;
if (!unknownFields.equals(other.unknownFields)) return false;
return true;
}
@@ -480,6 +706,12 @@ public int hashCode() {
hash = (53 * hash) + getPageSize();
hash = (37 * hash) + PAGE_TOKEN_FIELD_NUMBER;
hash = (53 * hash) + getPageToken().hashCode();
+ if (getAssetTypesCount() > 0) {
+ hash = (37 * hash) + ASSET_TYPES_FIELD_NUMBER;
+ hash = (53 * hash) + getAssetTypesList().hashCode();
+ }
+ hash = (37 * hash) + ORDER_BY_FIELD_NUMBER;
+ hash = (53 * hash) + getOrderBy().hashCode();
hash = (29 * hash) + unknownFields.hashCode();
memoizedHashCode = hash;
return hash;
@@ -634,6 +866,10 @@ public Builder clear() {
pageToken_ = "";
+ assetTypes_ = com.google.protobuf.LazyStringArrayList.EMPTY;
+ bitField0_ = (bitField0_ & ~0x00000001);
+ orderBy_ = "";
+
return this;
}
@@ -661,10 +897,17 @@ public com.google.cloud.asset.v1.SearchAllIamPoliciesRequest build() {
public com.google.cloud.asset.v1.SearchAllIamPoliciesRequest buildPartial() {
com.google.cloud.asset.v1.SearchAllIamPoliciesRequest result =
new com.google.cloud.asset.v1.SearchAllIamPoliciesRequest(this);
+ int from_bitField0_ = bitField0_;
result.scope_ = scope_;
result.query_ = query_;
result.pageSize_ = pageSize_;
result.pageToken_ = pageToken_;
+ if (((bitField0_ & 0x00000001) != 0)) {
+ assetTypes_ = assetTypes_.getUnmodifiableView();
+ bitField0_ = (bitField0_ & ~0x00000001);
+ }
+ result.assetTypes_ = assetTypes_;
+ result.orderBy_ = orderBy_;
onBuilt();
return result;
}
@@ -730,6 +973,20 @@ public Builder mergeFrom(com.google.cloud.asset.v1.SearchAllIamPoliciesRequest o
pageToken_ = other.pageToken_;
onChanged();
}
+ if (!other.assetTypes_.isEmpty()) {
+ if (assetTypes_.isEmpty()) {
+ assetTypes_ = other.assetTypes_;
+ bitField0_ = (bitField0_ & ~0x00000001);
+ } else {
+ ensureAssetTypesIsMutable();
+ assetTypes_.addAll(other.assetTypes_);
+ }
+ onChanged();
+ }
+ if (!other.getOrderBy().isEmpty()) {
+ orderBy_ = other.orderBy_;
+ onChanged();
+ }
this.mergeUnknownFields(other.unknownFields);
onChanged();
return this;
@@ -760,6 +1017,8 @@ public Builder mergeFrom(
return this;
}
+ private int bitField0_;
+
private java.lang.Object scope_ = "";
/**
*
@@ -952,6 +1211,10 @@ public Builder setScopeBytes(com.google.protobuf.ByteString value) {
* * `resource:(instance1 OR instance2) policy:amy` to find
* IAM policy bindings that are set on resources "instance1" or
* "instance2" and also specify user "amy".
+ * * `roles:roles/compute.admin` to find IAM policy bindings that specify the
+ * Compute Admin role.
+ * * `memberTypes:user` to find IAM policy bindings that contain the "user"
+ * member type.
*
*
* string query = 2 [(.google.api.field_behavior) = OPTIONAL];
@@ -1009,6 +1272,10 @@ public java.lang.String getQuery() {
* * `resource:(instance1 OR instance2) policy:amy` to find
* IAM policy bindings that are set on resources "instance1" or
* "instance2" and also specify user "amy".
+ * * `roles:roles/compute.admin` to find IAM policy bindings that specify the
+ * Compute Admin role.
+ * * `memberTypes:user` to find IAM policy bindings that contain the "user"
+ * member type.
*
*
* string query = 2 [(.google.api.field_behavior) = OPTIONAL];
@@ -1066,6 +1333,10 @@ public com.google.protobuf.ByteString getQueryBytes() {
* * `resource:(instance1 OR instance2) policy:amy` to find
* IAM policy bindings that are set on resources "instance1" or
* "instance2" and also specify user "amy".
+ * * `roles:roles/compute.admin` to find IAM policy bindings that specify the
+ * Compute Admin role.
+ * * `memberTypes:user` to find IAM policy bindings that contain the "user"
+ * member type.
*
*
* string query = 2 [(.google.api.field_behavior) = OPTIONAL];
@@ -1122,6 +1393,10 @@ public Builder setQuery(java.lang.String value) {
* * `resource:(instance1 OR instance2) policy:amy` to find
* IAM policy bindings that are set on resources "instance1" or
* "instance2" and also specify user "amy".
+ * * `roles:roles/compute.admin` to find IAM policy bindings that specify the
+ * Compute Admin role.
+ * * `memberTypes:user` to find IAM policy bindings that contain the "user"
+ * member type.
*
*
* string query = 2 [(.google.api.field_behavior) = OPTIONAL];
@@ -1174,6 +1449,10 @@ public Builder clearQuery() {
* * `resource:(instance1 OR instance2) policy:amy` to find
* IAM policy bindings that are set on resources "instance1" or
* "instance2" and also specify user "amy".
+ * * `roles:roles/compute.admin` to find IAM policy bindings that specify the
+ * Compute Admin role.
+ * * `memberTypes:user` to find IAM policy bindings that contain the "user"
+ * member type.
*
*
* string query = 2 [(.google.api.field_behavior) = OPTIONAL];
@@ -1374,6 +1653,433 @@ public Builder setPageTokenBytes(com.google.protobuf.ByteString value) {
return this;
}
+ private com.google.protobuf.LazyStringList assetTypes_ =
+ com.google.protobuf.LazyStringArrayList.EMPTY;
+
+ private void ensureAssetTypesIsMutable() {
+ if (!((bitField0_ & 0x00000001) != 0)) {
+ assetTypes_ = new com.google.protobuf.LazyStringArrayList(assetTypes_);
+ bitField0_ |= 0x00000001;
+ }
+ }
+ /**
+ *
+ *
+ *
+ * Optional. A list of asset types that the IAM policies are attached to. If empty, it
+ * will search the IAM policies that are attached to all the [searchable asset
+ * types](https://cloud.google.com/asset-inventory/docs/supported-asset-types#searchable_asset_types).
+ * Regular expressions are also supported. For example:
+ * * "compute.googleapis.com.*" snapshots IAM policies attached to asset type
+ * starts with "compute.googleapis.com".
+ * * ".*Instance" snapshots IAM policies attached to asset type ends with
+ * "Instance".
+ * * ".*Instance.*" snapshots IAM policies attached to asset type contains
+ * "Instance".
+ * See [RE2](https://github.com/google/re2/wiki/Syntax) for all supported
+ * regular expression syntax. If the regular expression does not match any
+ * supported asset type, an INVALID_ARGUMENT error will be returned.
+ *
+ *
+ * repeated string asset_types = 5 [(.google.api.field_behavior) = OPTIONAL];
+ *
+ * @return A list containing the assetTypes.
+ */
+ public com.google.protobuf.ProtocolStringList getAssetTypesList() {
+ return assetTypes_.getUnmodifiableView();
+ }
+ /**
+ *
+ *
+ *
+ * Optional. A list of asset types that the IAM policies are attached to. If empty, it
+ * will search the IAM policies that are attached to all the [searchable asset
+ * types](https://cloud.google.com/asset-inventory/docs/supported-asset-types#searchable_asset_types).
+ * Regular expressions are also supported. For example:
+ * * "compute.googleapis.com.*" snapshots IAM policies attached to asset type
+ * starts with "compute.googleapis.com".
+ * * ".*Instance" snapshots IAM policies attached to asset type ends with
+ * "Instance".
+ * * ".*Instance.*" snapshots IAM policies attached to asset type contains
+ * "Instance".
+ * See [RE2](https://github.com/google/re2/wiki/Syntax) for all supported
+ * regular expression syntax. If the regular expression does not match any
+ * supported asset type, an INVALID_ARGUMENT error will be returned.
+ *
+ *
+ * repeated string asset_types = 5 [(.google.api.field_behavior) = OPTIONAL];
+ *
+ * @return The count of assetTypes.
+ */
+ public int getAssetTypesCount() {
+ return assetTypes_.size();
+ }
+ /**
+ *
+ *
+ *
+ * Optional. A list of asset types that the IAM policies are attached to. If empty, it
+ * will search the IAM policies that are attached to all the [searchable asset
+ * types](https://cloud.google.com/asset-inventory/docs/supported-asset-types#searchable_asset_types).
+ * Regular expressions are also supported. For example:
+ * * "compute.googleapis.com.*" snapshots IAM policies attached to asset type
+ * starts with "compute.googleapis.com".
+ * * ".*Instance" snapshots IAM policies attached to asset type ends with
+ * "Instance".
+ * * ".*Instance.*" snapshots IAM policies attached to asset type contains
+ * "Instance".
+ * See [RE2](https://github.com/google/re2/wiki/Syntax) for all supported
+ * regular expression syntax. If the regular expression does not match any
+ * supported asset type, an INVALID_ARGUMENT error will be returned.
+ *
+ *
+ * repeated string asset_types = 5 [(.google.api.field_behavior) = OPTIONAL];
+ *
+ * @param index The index of the element to return.
+ * @return The assetTypes at the given index.
+ */
+ public java.lang.String getAssetTypes(int index) {
+ return assetTypes_.get(index);
+ }
+ /**
+ *
+ *
+ *
+ * Optional. A list of asset types that the IAM policies are attached to. If empty, it
+ * will search the IAM policies that are attached to all the [searchable asset
+ * types](https://cloud.google.com/asset-inventory/docs/supported-asset-types#searchable_asset_types).
+ * Regular expressions are also supported. For example:
+ * * "compute.googleapis.com.*" snapshots IAM policies attached to asset type
+ * starts with "compute.googleapis.com".
+ * * ".*Instance" snapshots IAM policies attached to asset type ends with
+ * "Instance".
+ * * ".*Instance.*" snapshots IAM policies attached to asset type contains
+ * "Instance".
+ * See [RE2](https://github.com/google/re2/wiki/Syntax) for all supported
+ * regular expression syntax. If the regular expression does not match any
+ * supported asset type, an INVALID_ARGUMENT error will be returned.
+ *
+ *
+ * repeated string asset_types = 5 [(.google.api.field_behavior) = OPTIONAL];
+ *
+ * @param index The index of the value to return.
+ * @return The bytes of the assetTypes at the given index.
+ */
+ public com.google.protobuf.ByteString getAssetTypesBytes(int index) {
+ return assetTypes_.getByteString(index);
+ }
+ /**
+ *
+ *
+ *
+ * Optional. A list of asset types that the IAM policies are attached to. If empty, it
+ * will search the IAM policies that are attached to all the [searchable asset
+ * types](https://cloud.google.com/asset-inventory/docs/supported-asset-types#searchable_asset_types).
+ * Regular expressions are also supported. For example:
+ * * "compute.googleapis.com.*" snapshots IAM policies attached to asset type
+ * starts with "compute.googleapis.com".
+ * * ".*Instance" snapshots IAM policies attached to asset type ends with
+ * "Instance".
+ * * ".*Instance.*" snapshots IAM policies attached to asset type contains
+ * "Instance".
+ * See [RE2](https://github.com/google/re2/wiki/Syntax) for all supported
+ * regular expression syntax. If the regular expression does not match any
+ * supported asset type, an INVALID_ARGUMENT error will be returned.
+ *
+ *
+ * repeated string asset_types = 5 [(.google.api.field_behavior) = OPTIONAL];
+ *
+ * @param index The index to set the value at.
+ * @param value The assetTypes to set.
+ * @return This builder for chaining.
+ */
+ public Builder setAssetTypes(int index, java.lang.String value) {
+ if (value == null) {
+ throw new NullPointerException();
+ }
+ ensureAssetTypesIsMutable();
+ assetTypes_.set(index, value);
+ onChanged();
+ return this;
+ }
+ /**
+ *
+ *
+ *
+ * Optional. A list of asset types that the IAM policies are attached to. If empty, it
+ * will search the IAM policies that are attached to all the [searchable asset
+ * types](https://cloud.google.com/asset-inventory/docs/supported-asset-types#searchable_asset_types).
+ * Regular expressions are also supported. For example:
+ * * "compute.googleapis.com.*" snapshots IAM policies attached to asset type
+ * starts with "compute.googleapis.com".
+ * * ".*Instance" snapshots IAM policies attached to asset type ends with
+ * "Instance".
+ * * ".*Instance.*" snapshots IAM policies attached to asset type contains
+ * "Instance".
+ * See [RE2](https://github.com/google/re2/wiki/Syntax) for all supported
+ * regular expression syntax. If the regular expression does not match any
+ * supported asset type, an INVALID_ARGUMENT error will be returned.
+ *
+ *
+ * repeated string asset_types = 5 [(.google.api.field_behavior) = OPTIONAL];
+ *
+ * @param value The assetTypes to add.
+ * @return This builder for chaining.
+ */
+ public Builder addAssetTypes(java.lang.String value) {
+ if (value == null) {
+ throw new NullPointerException();
+ }
+ ensureAssetTypesIsMutable();
+ assetTypes_.add(value);
+ onChanged();
+ return this;
+ }
+ /**
+ *
+ *
+ *
+ * Optional. A list of asset types that the IAM policies are attached to. If empty, it
+ * will search the IAM policies that are attached to all the [searchable asset
+ * types](https://cloud.google.com/asset-inventory/docs/supported-asset-types#searchable_asset_types).
+ * Regular expressions are also supported. For example:
+ * * "compute.googleapis.com.*" snapshots IAM policies attached to asset type
+ * starts with "compute.googleapis.com".
+ * * ".*Instance" snapshots IAM policies attached to asset type ends with
+ * "Instance".
+ * * ".*Instance.*" snapshots IAM policies attached to asset type contains
+ * "Instance".
+ * See [RE2](https://github.com/google/re2/wiki/Syntax) for all supported
+ * regular expression syntax. If the regular expression does not match any
+ * supported asset type, an INVALID_ARGUMENT error will be returned.
+ *
+ *
+ * repeated string asset_types = 5 [(.google.api.field_behavior) = OPTIONAL];
+ *
+ * @param values The assetTypes to add.
+ * @return This builder for chaining.
+ */
+ public Builder addAllAssetTypes(java.lang.Iterable values) {
+ ensureAssetTypesIsMutable();
+ com.google.protobuf.AbstractMessageLite.Builder.addAll(values, assetTypes_);
+ onChanged();
+ return this;
+ }
+ /**
+ *
+ *
+ *
+ * Optional. A list of asset types that the IAM policies are attached to. If empty, it
+ * will search the IAM policies that are attached to all the [searchable asset
+ * types](https://cloud.google.com/asset-inventory/docs/supported-asset-types#searchable_asset_types).
+ * Regular expressions are also supported. For example:
+ * * "compute.googleapis.com.*" snapshots IAM policies attached to asset type
+ * starts with "compute.googleapis.com".
+ * * ".*Instance" snapshots IAM policies attached to asset type ends with
+ * "Instance".
+ * * ".*Instance.*" snapshots IAM policies attached to asset type contains
+ * "Instance".
+ * See [RE2](https://github.com/google/re2/wiki/Syntax) for all supported
+ * regular expression syntax. If the regular expression does not match any
+ * supported asset type, an INVALID_ARGUMENT error will be returned.
+ *
+ *
+ * repeated string asset_types = 5 [(.google.api.field_behavior) = OPTIONAL];
+ *
+ * @return This builder for chaining.
+ */
+ public Builder clearAssetTypes() {
+ assetTypes_ = com.google.protobuf.LazyStringArrayList.EMPTY;
+ bitField0_ = (bitField0_ & ~0x00000001);
+ onChanged();
+ return this;
+ }
+ /**
+ *
+ *
+ *
+ * Optional. A list of asset types that the IAM policies are attached to. If empty, it
+ * will search the IAM policies that are attached to all the [searchable asset
+ * types](https://cloud.google.com/asset-inventory/docs/supported-asset-types#searchable_asset_types).
+ * Regular expressions are also supported. For example:
+ * * "compute.googleapis.com.*" snapshots IAM policies attached to asset type
+ * starts with "compute.googleapis.com".
+ * * ".*Instance" snapshots IAM policies attached to asset type ends with
+ * "Instance".
+ * * ".*Instance.*" snapshots IAM policies attached to asset type contains
+ * "Instance".
+ * See [RE2](https://github.com/google/re2/wiki/Syntax) for all supported
+ * regular expression syntax. If the regular expression does not match any
+ * supported asset type, an INVALID_ARGUMENT error will be returned.
+ *
+ *
+ * repeated string asset_types = 5 [(.google.api.field_behavior) = OPTIONAL];
+ *
+ * @param value The bytes of the assetTypes to add.
+ * @return This builder for chaining.
+ */
+ public Builder addAssetTypesBytes(com.google.protobuf.ByteString value) {
+ if (value == null) {
+ throw new NullPointerException();
+ }
+ checkByteStringIsUtf8(value);
+ ensureAssetTypesIsMutable();
+ assetTypes_.add(value);
+ onChanged();
+ return this;
+ }
+
+ private java.lang.Object orderBy_ = "";
+ /**
+ *
+ *
+ *
+ * Optional. A comma-separated list of fields specifying the sorting order of the
+ * results. The default order is ascending. Add " DESC" after the field name
+ * to indicate descending order. Redundant space characters are ignored.
+ * Example: "assetType DESC, resource".
+ * Only singular primitive fields in the response are sortable:
+ * * resource
+ * * assetType
+ * * project
+ * All the other fields such as repeated fields (e.g., `folders`) and
+ * non-primitive fields (e.g., `policy`) are not supported.
+ *
+ *
+ * string order_by = 7 [(.google.api.field_behavior) = OPTIONAL];
+ *
+ * @return The orderBy.
+ */
+ public java.lang.String getOrderBy() {
+ java.lang.Object ref = orderBy_;
+ if (!(ref instanceof java.lang.String)) {
+ com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+ java.lang.String s = bs.toStringUtf8();
+ orderBy_ = s;
+ return s;
+ } else {
+ return (java.lang.String) ref;
+ }
+ }
+ /**
+ *
+ *
+ *
+ * Optional. A comma-separated list of fields specifying the sorting order of the
+ * results. The default order is ascending. Add " DESC" after the field name
+ * to indicate descending order. Redundant space characters are ignored.
+ * Example: "assetType DESC, resource".
+ * Only singular primitive fields in the response are sortable:
+ * * resource
+ * * assetType
+ * * project
+ * All the other fields such as repeated fields (e.g., `folders`) and
+ * non-primitive fields (e.g., `policy`) are not supported.
+ *
+ *
+ * string order_by = 7 [(.google.api.field_behavior) = OPTIONAL];
+ *
+ * @return The bytes for orderBy.
+ */
+ public com.google.protobuf.ByteString getOrderByBytes() {
+ java.lang.Object ref = orderBy_;
+ if (ref instanceof String) {
+ com.google.protobuf.ByteString b =
+ com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+ orderBy_ = b;
+ return b;
+ } else {
+ return (com.google.protobuf.ByteString) ref;
+ }
+ }
+ /**
+ *
+ *
+ *
+ * Optional. A comma-separated list of fields specifying the sorting order of the
+ * results. The default order is ascending. Add " DESC" after the field name
+ * to indicate descending order. Redundant space characters are ignored.
+ * Example: "assetType DESC, resource".
+ * Only singular primitive fields in the response are sortable:
+ * * resource
+ * * assetType
+ * * project
+ * All the other fields such as repeated fields (e.g., `folders`) and
+ * non-primitive fields (e.g., `policy`) are not supported.
+ *
+ *
+ * string order_by = 7 [(.google.api.field_behavior) = OPTIONAL];
+ *
+ * @param value The orderBy to set.
+ * @return This builder for chaining.
+ */
+ public Builder setOrderBy(java.lang.String value) {
+ if (value == null) {
+ throw new NullPointerException();
+ }
+
+ orderBy_ = value;
+ onChanged();
+ return this;
+ }
+ /**
+ *
+ *
+ *
+ * Optional. A comma-separated list of fields specifying the sorting order of the
+ * results. The default order is ascending. Add " DESC" after the field name
+ * to indicate descending order. Redundant space characters are ignored.
+ * Example: "assetType DESC, resource".
+ * Only singular primitive fields in the response are sortable:
+ * * resource
+ * * assetType
+ * * project
+ * All the other fields such as repeated fields (e.g., `folders`) and
+ * non-primitive fields (e.g., `policy`) are not supported.
+ *
+ *
+ * string order_by = 7 [(.google.api.field_behavior) = OPTIONAL];
+ *
+ * @return This builder for chaining.
+ */
+ public Builder clearOrderBy() {
+
+ orderBy_ = getDefaultInstance().getOrderBy();
+ onChanged();
+ return this;
+ }
+ /**
+ *
+ *
+ *
+ * Optional. A comma-separated list of fields specifying the sorting order of the
+ * results. The default order is ascending. Add " DESC" after the field name
+ * to indicate descending order. Redundant space characters are ignored.
+ * Example: "assetType DESC, resource".
+ * Only singular primitive fields in the response are sortable:
+ * * resource
+ * * assetType
+ * * project
+ * All the other fields such as repeated fields (e.g., `folders`) and
+ * non-primitive fields (e.g., `policy`) are not supported.
+ *
+ *
+ * string order_by = 7 [(.google.api.field_behavior) = OPTIONAL];
+ *
+ * @param value The bytes for orderBy to set.
+ * @return This builder for chaining.
+ */
+ public Builder setOrderByBytes(com.google.protobuf.ByteString value) {
+ if (value == null) {
+ throw new NullPointerException();
+ }
+ checkByteStringIsUtf8(value);
+
+ orderBy_ = value;
+ onChanged();
+ return this;
+ }
+
@java.lang.Override
public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
return super.setUnknownFields(unknownFields);
diff --git a/proto-google-cloud-asset-v1/src/main/java/com/google/cloud/asset/v1/SearchAllIamPoliciesRequestOrBuilder.java b/proto-google-cloud-asset-v1/src/main/java/com/google/cloud/asset/v1/SearchAllIamPoliciesRequestOrBuilder.java
index dfb8af0ad..b09fa81dd 100644
--- a/proto-google-cloud-asset-v1/src/main/java/com/google/cloud/asset/v1/SearchAllIamPoliciesRequestOrBuilder.java
+++ b/proto-google-cloud-asset-v1/src/main/java/com/google/cloud/asset/v1/SearchAllIamPoliciesRequestOrBuilder.java
@@ -106,6 +106,10 @@ public interface SearchAllIamPoliciesRequestOrBuilder
* * `resource:(instance1 OR instance2) policy:amy` to find
* IAM policy bindings that are set on resources "instance1" or
* "instance2" and also specify user "amy".
+ * * `roles:roles/compute.admin` to find IAM policy bindings that specify the
+ * Compute Admin role.
+ * * `memberTypes:user` to find IAM policy bindings that contain the "user"
+ * member type.
*
*
* string query = 2 [(.google.api.field_behavior) = OPTIONAL];
@@ -153,6 +157,10 @@ public interface SearchAllIamPoliciesRequestOrBuilder
* * `resource:(instance1 OR instance2) policy:amy` to find
* IAM policy bindings that are set on resources "instance1" or
* "instance2" and also specify user "amy".
+ * * `roles:roles/compute.admin` to find IAM policy bindings that specify the
+ * Compute Admin role.
+ * * `memberTypes:user` to find IAM policy bindings that contain the "user"
+ * member type.
*
*
* string query = 2 [(.google.api.field_behavior) = OPTIONAL];
@@ -207,4 +215,146 @@ public interface SearchAllIamPoliciesRequestOrBuilder
* @return The bytes for pageToken.
*/
com.google.protobuf.ByteString getPageTokenBytes();
+
+ /**
+ *
+ *
+ *
+ * Optional. A list of asset types that the IAM policies are attached to. If empty, it
+ * will search the IAM policies that are attached to all the [searchable asset
+ * types](https://cloud.google.com/asset-inventory/docs/supported-asset-types#searchable_asset_types).
+ * Regular expressions are also supported. For example:
+ * * "compute.googleapis.com.*" snapshots IAM policies attached to asset type
+ * starts with "compute.googleapis.com".
+ * * ".*Instance" snapshots IAM policies attached to asset type ends with
+ * "Instance".
+ * * ".*Instance.*" snapshots IAM policies attached to asset type contains
+ * "Instance".
+ * See [RE2](https://github.com/google/re2/wiki/Syntax) for all supported
+ * regular expression syntax. If the regular expression does not match any
+ * supported asset type, an INVALID_ARGUMENT error will be returned.
+ *
+ *
+ * repeated string asset_types = 5 [(.google.api.field_behavior) = OPTIONAL];
+ *
+ * @return A list containing the assetTypes.
+ */
+ java.util.List getAssetTypesList();
+ /**
+ *
+ *
+ *
+ * Optional. A list of asset types that the IAM policies are attached to. If empty, it
+ * will search the IAM policies that are attached to all the [searchable asset
+ * types](https://cloud.google.com/asset-inventory/docs/supported-asset-types#searchable_asset_types).
+ * Regular expressions are also supported. For example:
+ * * "compute.googleapis.com.*" snapshots IAM policies attached to asset type
+ * starts with "compute.googleapis.com".
+ * * ".*Instance" snapshots IAM policies attached to asset type ends with
+ * "Instance".
+ * * ".*Instance.*" snapshots IAM policies attached to asset type contains
+ * "Instance".
+ * See [RE2](https://github.com/google/re2/wiki/Syntax) for all supported
+ * regular expression syntax. If the regular expression does not match any
+ * supported asset type, an INVALID_ARGUMENT error will be returned.
+ *
+ *
+ * repeated string asset_types = 5 [(.google.api.field_behavior) = OPTIONAL];
+ *
+ * @return The count of assetTypes.
+ */
+ int getAssetTypesCount();
+ /**
+ *
+ *
+ *
+ * Optional. A list of asset types that the IAM policies are attached to. If empty, it
+ * will search the IAM policies that are attached to all the [searchable asset
+ * types](https://cloud.google.com/asset-inventory/docs/supported-asset-types#searchable_asset_types).
+ * Regular expressions are also supported. For example:
+ * * "compute.googleapis.com.*" snapshots IAM policies attached to asset type
+ * starts with "compute.googleapis.com".
+ * * ".*Instance" snapshots IAM policies attached to asset type ends with
+ * "Instance".
+ * * ".*Instance.*" snapshots IAM policies attached to asset type contains
+ * "Instance".
+ * See [RE2](https://github.com/google/re2/wiki/Syntax) for all supported
+ * regular expression syntax. If the regular expression does not match any
+ * supported asset type, an INVALID_ARGUMENT error will be returned.
+ *
+ *
+ * repeated string asset_types = 5 [(.google.api.field_behavior) = OPTIONAL];
+ *
+ * @param index The index of the element to return.
+ * @return The assetTypes at the given index.
+ */
+ java.lang.String getAssetTypes(int index);
+ /**
+ *
+ *
+ *
+ * Optional. A list of asset types that the IAM policies are attached to. If empty, it
+ * will search the IAM policies that are attached to all the [searchable asset
+ * types](https://cloud.google.com/asset-inventory/docs/supported-asset-types#searchable_asset_types).
+ * Regular expressions are also supported. For example:
+ * * "compute.googleapis.com.*" snapshots IAM policies attached to asset type
+ * starts with "compute.googleapis.com".
+ * * ".*Instance" snapshots IAM policies attached to asset type ends with
+ * "Instance".
+ * * ".*Instance.*" snapshots IAM policies attached to asset type contains
+ * "Instance".
+ * See [RE2](https://github.com/google/re2/wiki/Syntax) for all supported
+ * regular expression syntax. If the regular expression does not match any
+ * supported asset type, an INVALID_ARGUMENT error will be returned.
+ *
+ *
+ * repeated string asset_types = 5 [(.google.api.field_behavior) = OPTIONAL];
+ *
+ * @param index The index of the value to return.
+ * @return The bytes of the assetTypes at the given index.
+ */
+ com.google.protobuf.ByteString getAssetTypesBytes(int index);
+
+ /**
+ *
+ *
+ *
+ * Optional. A comma-separated list of fields specifying the sorting order of the
+ * results. The default order is ascending. Add " DESC" after the field name
+ * to indicate descending order. Redundant space characters are ignored.
+ * Example: "assetType DESC, resource".
+ * Only singular primitive fields in the response are sortable:
+ * * resource
+ * * assetType
+ * * project
+ * All the other fields such as repeated fields (e.g., `folders`) and
+ * non-primitive fields (e.g., `policy`) are not supported.
+ *
+ *
+ * string order_by = 7 [(.google.api.field_behavior) = OPTIONAL];
+ *
+ * @return The orderBy.
+ */
+ java.lang.String getOrderBy();
+ /**
+ *
+ *
+ *
+ * Optional. A comma-separated list of fields specifying the sorting order of the
+ * results. The default order is ascending. Add " DESC" after the field name
+ * to indicate descending order. Redundant space characters are ignored.
+ * Example: "assetType DESC, resource".
+ * Only singular primitive fields in the response are sortable:
+ * * resource
+ * * assetType
+ * * project
+ * All the other fields such as repeated fields (e.g., `folders`) and
+ * non-primitive fields (e.g., `policy`) are not supported.
+ *
+ *
+ * string order_by = 7 [(.google.api.field_behavior) = OPTIONAL];
+ *
+ * @return The bytes for orderBy.
+ */
+ com.google.protobuf.ByteString getOrderByBytes();
}
diff --git a/proto-google-cloud-asset-v1/src/main/proto/google/cloud/asset/v1/asset_service.proto b/proto-google-cloud-asset-v1/src/main/proto/google/cloud/asset/v1/asset_service.proto
index eadaef285..59f517bb0 100644
--- a/proto-google-cloud-asset-v1/src/main/proto/google/cloud/asset/v1/asset_service.proto
+++ b/proto-google-cloud-asset-v1/src/main/proto/google/cloud/asset/v1/asset_service.proto
@@ -838,6 +838,10 @@ message SearchAllIamPoliciesRequest {
// * `resource:(instance1 OR instance2) policy:amy` to find
// IAM policy bindings that are set on resources "instance1" or
// "instance2" and also specify user "amy".
+ // * `roles:roles/compute.admin` to find IAM policy bindings that specify the
+ // Compute Admin role.
+ // * `memberTypes:user` to find IAM policy bindings that contain the "user"
+ // member type.
string query = 2 [(google.api.field_behavior) = OPTIONAL];
// Optional. The page size for search result pagination. Page size is capped at 500 even
@@ -851,6 +855,36 @@ message SearchAllIamPoliciesRequest {
// previous response. The values of all other method parameters must be
// identical to those in the previous call.
string page_token = 4 [(google.api.field_behavior) = OPTIONAL];
+
+ // Optional. A list of asset types that the IAM policies are attached to. If empty, it
+ // will search the IAM policies that are attached to all the [searchable asset
+ // types](https://cloud.google.com/asset-inventory/docs/supported-asset-types#searchable_asset_types).
+ //
+ // Regular expressions are also supported. For example:
+ //
+ // * "compute.googleapis.com.*" snapshots IAM policies attached to asset type
+ // starts with "compute.googleapis.com".
+ // * ".*Instance" snapshots IAM policies attached to asset type ends with
+ // "Instance".
+ // * ".*Instance.*" snapshots IAM policies attached to asset type contains
+ // "Instance".
+ //
+ // See [RE2](https://github.com/google/re2/wiki/Syntax) for all supported
+ // regular expression syntax. If the regular expression does not match any
+ // supported asset type, an INVALID_ARGUMENT error will be returned.
+ repeated string asset_types = 5 [(google.api.field_behavior) = OPTIONAL];
+
+ // Optional. A comma-separated list of fields specifying the sorting order of the
+ // results. The default order is ascending. Add " DESC" after the field name
+ // to indicate descending order. Redundant space characters are ignored.
+ // Example: "assetType DESC, resource".
+ // Only singular primitive fields in the response are sortable:
+ // * resource
+ // * assetType
+ // * project
+ // All the other fields such as repeated fields (e.g., `folders`) and
+ // non-primitive fields (e.g., `policy`) are not supported.
+ string order_by = 7 [(google.api.field_behavior) = OPTIONAL];
}
// Search all IAM policies response.
diff --git a/proto-google-cloud-asset-v1/src/main/proto/google/cloud/asset/v1/assets.proto b/proto-google-cloud-asset-v1/src/main/proto/google/cloud/asset/v1/assets.proto
index 572ed739a..a607784e8 100644
--- a/proto-google-cloud-asset-v1/src/main/proto/google/cloud/asset/v1/assets.proto
+++ b/proto-google-cloud-asset-v1/src/main/proto/google/cloud/asset/v1/assets.proto
@@ -463,6 +463,14 @@ message IamPolicySearchResult {
// * use a field query. Example: `resource:organizations/123`
string resource = 1;
+ // The type of the resource associated with this IAM policy. Example:
+ // `compute.googleapis.com/Disk`.
+ //
+ // To search against the `asset_type`:
+ //
+ // * specify the `asset_types` field in your search request.
+ string asset_type = 5;
+
// The project that the associated GCP resource belongs to, in the form of
// projects/{PROJECT_NUMBER}. If an IAM policy is set on a resource (like VM
// instance, Cloud Storage bucket), the project field will indicate the
@@ -474,6 +482,28 @@ message IamPolicySearchResult {
// * specify the `scope` field as this project in your search request.
string project = 2;
+ // The folder(s) that the IAM policy belongs to, in the form of
+ // folders/{FOLDER_NUMBER}. This field is available when the IAM policy
+ // belongs to one or more folders.
+ //
+ // To search against `folders`:
+ //
+ // * use a field query. Example: `folders:(123 OR 456)`
+ // * use a free text query. Example: `123`
+ // * specify the `scope` field as this folder in your search request.
+ repeated string folders = 6;
+
+ // The organization that the IAM policy belongs to, in the form
+ // of organizations/{ORGANIZATION_NUMBER}. This field is available when the
+ // IAM policy belongs to an organization.
+ //
+ // To search against `organization`:
+ //
+ // * use a field query. Example: `organization:123`
+ // * use a free text query. Example: `123`
+ // * specify the `scope` field as this organization in your search request.
+ string organization = 7;
+
// The IAM policy directly set on the given resource. Note that the original
// IAM policy can contain multiple bindings. This only contains the bindings
// that match the given query. For queries that don't contain a constrain on