1# -*- coding: utf-8 -*- 2# Generated by the protocol buffer compiler. DO NOT EDIT! 3# source: google/cloud/iam_admin_v1/proto/iam.proto 4 5from google.protobuf.internal import enum_type_wrapper 6from google.protobuf import descriptor as _descriptor 7from google.protobuf import message as _message 8from google.protobuf import reflection as _reflection 9from google.protobuf import symbol_database as _symbol_database 10# @@protoc_insertion_point(imports) 11 12_sym_db = _symbol_database.Default() 13 14 15from google.api import annotations_pb2 as google_dot_api_dot_annotations__pb2 16from google.api import client_pb2 as google_dot_api_dot_client__pb2 17from google.api import field_behavior_pb2 as google_dot_api_dot_field__behavior__pb2 18from google.api import resource_pb2 as google_dot_api_dot_resource__pb2 19from google.iam.v1 import iam_policy_pb2 as google_dot_iam_dot_v1_dot_iam__policy__pb2 20from google.iam.v1 import policy_pb2 as google_dot_iam_dot_v1_dot_policy__pb2 21from google.protobuf import empty_pb2 as google_dot_protobuf_dot_empty__pb2 22from google.protobuf import field_mask_pb2 as google_dot_protobuf_dot_field__mask__pb2 23from google.protobuf import timestamp_pb2 as google_dot_protobuf_dot_timestamp__pb2 24 25 26DESCRIPTOR = _descriptor.FileDescriptor( 27 name='google/cloud/iam_admin_v1/proto/iam.proto', 28 package='google.iam.admin.v1', 29 syntax='proto3', 30 serialized_options=b'\n\027com.google.iam.admin.v1B\010IamProtoP\001Z8google.golang.org/genproto/googleapis/iam/admin/v1;admin\370\001\001', 31 create_key=_descriptor._internal_create_key, 32 serialized_pb=b'\n)google/cloud/iam_admin_v1/proto/iam.proto\x12\x13google.iam.admin.v1\x1a\x1cgoogle/api/annotations.proto\x1a\x17google/api/client.proto\x1a\x1fgoogle/api/field_behavior.proto\x1a\x19google/api/resource.proto\x1a\x1egoogle/iam/v1/iam_policy.proto\x1a\x1agoogle/iam/v1/policy.proto\x1a\x1bgoogle/protobuf/empty.proto\x1a google/protobuf/field_mask.proto\x1a\x1fgoogle/protobuf/timestamp.proto\"\xf0\x01\n\x0eServiceAccount\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x12\n\nproject_id\x18\x02 \x01(\t\x12\x11\n\tunique_id\x18\x04 \x01(\t\x12\r\n\x05\x65mail\x18\x05 \x01(\t\x12\x14\n\x0c\x64isplay_name\x18\x06 \x01(\t\x12\x0c\n\x04\x65tag\x18\x07 \x01(\x0c\x12\x18\n\x10oauth2_client_id\x18\t \x01(\t:\\\xea\x41Y\n!iam.googleapis.com/ServiceAccount\x12\x34projects/{project}/serviceAccounts/{service_account}\"\xb7\x01\n\x1b\x43reateServiceAccountRequest\x12\x41\n\x04name\x18\x01 \x01(\tB3\xe0\x41\x02\xfa\x41-\n+cloudresourcemanager.googleapis.com/Project\x12\x17\n\naccount_id\x18\x02 \x01(\tB\x03\xe0\x41\x02\x12<\n\x0fservice_account\x18\x03 \x01(\x0b\x32#.google.iam.admin.v1.ServiceAccount\"\x86\x01\n\x1aListServiceAccountsRequest\x12\x41\n\x04name\x18\x01 \x01(\tB3\xe0\x41\x02\xfa\x41-\n+cloudresourcemanager.googleapis.com/Project\x12\x11\n\tpage_size\x18\x02 \x01(\x05\x12\x12\n\npage_token\x18\x03 \x01(\t\"m\n\x1bListServiceAccountsResponse\x12\x35\n\x08\x61\x63\x63ounts\x18\x01 \x03(\x0b\x32#.google.iam.admin.v1.ServiceAccount\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\"S\n\x18GetServiceAccountRequest\x12\x37\n\x04name\x18\x01 \x01(\tB)\xe0\x41\x02\xfa\x41#\n!iam.googleapis.com/ServiceAccount\"V\n\x1b\x44\x65leteServiceAccountRequest\x12\x37\n\x04name\x18\x01 \x01(\tB)\xe0\x41\x02\xfa\x41#\n!iam.googleapis.com/ServiceAccount\"\xf2\x01\n\x1dListServiceAccountKeysRequest\x12\x37\n\x04name\x18\x01 \x01(\tB)\xe0\x41\x02\xfa\x41#\n!iam.googleapis.com/ServiceAccount\x12M\n\tkey_types\x18\x02 \x03(\x0e\x32:.google.iam.admin.v1.ListServiceAccountKeysRequest.KeyType\"I\n\x07KeyType\x12\x18\n\x14KEY_TYPE_UNSPECIFIED\x10\x00\x12\x10\n\x0cUSER_MANAGED\x10\x01\x12\x12\n\x0eSYSTEM_MANAGED\x10\x02\"V\n\x1eListServiceAccountKeysResponse\x12\x34\n\x04keys\x18\x01 \x03(\x0b\x32&.google.iam.admin.v1.ServiceAccountKey\"\x96\x01\n\x1bGetServiceAccountKeyRequest\x12,\n\x04name\x18\x01 \x01(\tB\x1e\xe0\x41\x02\xfa\x41\x18\n\x16iam.googleapis.com/Key\x12I\n\x0fpublic_key_type\x18\x02 \x01(\x0e\x32\x30.google.iam.admin.v1.ServiceAccountPublicKeyType\"\xb4\x03\n\x11ServiceAccountKey\x12\x0c\n\x04name\x18\x01 \x01(\t\x12K\n\x10private_key_type\x18\x02 \x01(\x0e\x32\x31.google.iam.admin.v1.ServiceAccountPrivateKeyType\x12\x46\n\rkey_algorithm\x18\x08 \x01(\x0e\x32/.google.iam.admin.v1.ServiceAccountKeyAlgorithm\x12\x18\n\x10private_key_data\x18\x03 \x01(\x0c\x12\x17\n\x0fpublic_key_data\x18\x07 \x01(\x0c\x12\x34\n\x10valid_after_time\x18\x04 \x01(\x0b\x32\x1a.google.protobuf.Timestamp\x12\x35\n\x11valid_before_time\x18\x05 \x01(\x0b\x32\x1a.google.protobuf.Timestamp:\\\xea\x41Y\n\x16iam.googleapis.com/Key\x12?projects/{project}/serviceAccounts/{service_account}/keys/{key}\"\xee\x01\n\x1e\x43reateServiceAccountKeyRequest\x12\x37\n\x04name\x18\x01 \x01(\tB)\xe0\x41\x02\xfa\x41#\n!iam.googleapis.com/ServiceAccount\x12K\n\x10private_key_type\x18\x02 \x01(\x0e\x32\x31.google.iam.admin.v1.ServiceAccountPrivateKeyType\x12\x46\n\rkey_algorithm\x18\x03 \x01(\x0e\x32/.google.iam.admin.v1.ServiceAccountKeyAlgorithm\"N\n\x1e\x44\x65leteServiceAccountKeyRequest\x12,\n\x04name\x18\x01 \x01(\tB\x1e\xe0\x41\x02\xfa\x41\x18\n\x16iam.googleapis.com/Key\"f\n\x0fSignBlobRequest\x12\x37\n\x04name\x18\x01 \x01(\tB)\xe0\x41\x02\xfa\x41#\n!iam.googleapis.com/ServiceAccount\x12\x1a\n\rbytes_to_sign\x18\x02 \x01(\x0c\x42\x03\xe0\x41\x02\"5\n\x10SignBlobResponse\x12\x0e\n\x06key_id\x18\x01 \x01(\t\x12\x11\n\tsignature\x18\x02 \x01(\x0c\"_\n\x0eSignJwtRequest\x12\x37\n\x04name\x18\x01 \x01(\tB)\xe0\x41\x02\xfa\x41#\n!iam.googleapis.com/ServiceAccount\x12\x14\n\x07payload\x18\x02 \x01(\tB\x03\xe0\x41\x02\"5\n\x0fSignJwtResponse\x12\x0e\n\x06key_id\x18\x01 \x01(\t\x12\x12\n\nsigned_jwt\x18\x02 \x01(\t\"\x86\x02\n\x04Role\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\r\n\x05title\x18\x02 \x01(\t\x12\x13\n\x0b\x64\x65scription\x18\x03 \x01(\t\x12\x1c\n\x14included_permissions\x18\x07 \x03(\t\x12\x38\n\x05stage\x18\x08 \x01(\x0e\x32).google.iam.admin.v1.Role.RoleLaunchStage\x12\x0c\n\x04\x65tag\x18\t \x01(\x0c\x12\x0f\n\x07\x64\x65leted\x18\x0b \x01(\x08\"U\n\x0fRoleLaunchStage\x12\t\n\x05\x41LPHA\x10\x00\x12\x08\n\x04\x42\x45TA\x10\x01\x12\x06\n\x02GA\x10\x02\x12\x0e\n\nDEPRECATED\x10\x04\x12\x0c\n\x08\x44ISABLED\x10\x05\x12\x07\n\x03\x45\x41P\x10\x06\"\x91\x01\n\x1aQueryGrantableRolesRequest\x12\x1f\n\x12\x66ull_resource_name\x18\x01 \x01(\tB\x03\xe0\x41\x02\x12+\n\x04view\x18\x02 \x01(\x0e\x32\x1d.google.iam.admin.v1.RoleView\x12\x11\n\tpage_size\x18\x03 \x01(\x05\x12\x12\n\npage_token\x18\x04 \x01(\t\"`\n\x1bQueryGrantableRolesResponse\x12(\n\x05roles\x18\x01 \x03(\x0b\x32\x19.google.iam.admin.v1.Role\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\"\x94\x01\n\x10ListRolesRequest\x12\x16\n\x06parent\x18\x01 \x01(\tB\x06\xfa\x41\x03\n\x01*\x12\x11\n\tpage_size\x18\x02 \x01(\x05\x12\x12\n\npage_token\x18\x03 \x01(\t\x12+\n\x04view\x18\x04 \x01(\x0e\x32\x1d.google.iam.admin.v1.RoleView\x12\x14\n\x0cshow_deleted\x18\x06 \x01(\x08\"V\n\x11ListRolesResponse\x12(\n\x05roles\x18\x01 \x03(\x0b\x32\x19.google.iam.admin.v1.Role\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t\"&\n\x0eGetRoleRequest\x12\x14\n\x04name\x18\x01 \x01(\tB\x06\xfa\x41\x03\n\x01*\"e\n\x11\x43reateRoleRequest\x12\x16\n\x06parent\x18\x01 \x01(\tB\x06\xfa\x41\x03\n\x01*\x12\x0f\n\x07role_id\x18\x02 \x01(\t\x12\'\n\x04role\x18\x03 \x01(\x0b\x32\x19.google.iam.admin.v1.Role\"\x83\x01\n\x11UpdateRoleRequest\x12\x14\n\x04name\x18\x01 \x01(\tB\x06\xfa\x41\x03\n\x01*\x12\'\n\x04role\x18\x02 \x01(\x0b\x32\x19.google.iam.admin.v1.Role\x12/\n\x0bupdate_mask\x18\x03 \x01(\x0b\x32\x1a.google.protobuf.FieldMask\"7\n\x11\x44\x65leteRoleRequest\x12\x14\n\x04name\x18\x01 \x01(\tB\x06\xfa\x41\x03\n\x01*\x12\x0c\n\x04\x65tag\x18\x02 \x01(\x0c\"9\n\x13UndeleteRoleRequest\x12\x14\n\x04name\x18\x01 \x01(\tB\x06\xfa\x41\x03\n\x01*\x12\x0c\n\x04\x65tag\x18\x02 \x01(\x0c\"\x93\x03\n\nPermission\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\r\n\x05title\x18\x02 \x01(\t\x12\x13\n\x0b\x64\x65scription\x18\x03 \x01(\t\x12 \n\x18only_in_predefined_roles\x18\x04 \x01(\x08\x12\x44\n\x05stage\x18\x05 \x01(\x0e\x32\x35.google.iam.admin.v1.Permission.PermissionLaunchStage\x12[\n\x1a\x63ustom_roles_support_level\x18\x06 \x01(\x0e\x32\x37.google.iam.admin.v1.Permission.CustomRolesSupportLevel\"D\n\x15PermissionLaunchStage\x12\t\n\x05\x41LPHA\x10\x00\x12\x08\n\x04\x42\x45TA\x10\x01\x12\x06\n\x02GA\x10\x02\x12\x0e\n\nDEPRECATED\x10\x03\"H\n\x17\x43ustomRolesSupportLevel\x12\r\n\tSUPPORTED\x10\x00\x12\x0b\n\x07TESTING\x10\x01\x12\x11\n\rNOT_SUPPORTED\x10\x02\"d\n\x1fQueryTestablePermissionsRequest\x12\x1a\n\x12\x66ull_resource_name\x18\x01 \x01(\t\x12\x11\n\tpage_size\x18\x02 \x01(\x05\x12\x12\n\npage_token\x18\x03 \x01(\t\"q\n QueryTestablePermissionsResponse\x12\x34\n\x0bpermissions\x18\x01 \x03(\x0b\x32\x1f.google.iam.admin.v1.Permission\x12\x17\n\x0fnext_page_token\x18\x02 \x01(\t*a\n\x1aServiceAccountKeyAlgorithm\x12\x17\n\x13KEY_ALG_UNSPECIFIED\x10\x00\x12\x14\n\x10KEY_ALG_RSA_1024\x10\x01\x12\x14\n\x10KEY_ALG_RSA_2048\x10\x02*l\n\x1cServiceAccountPrivateKeyType\x12\x14\n\x10TYPE_UNSPECIFIED\x10\x00\x12\x14\n\x10TYPE_PKCS12_FILE\x10\x01\x12 \n\x1cTYPE_GOOGLE_CREDENTIALS_FILE\x10\x02*]\n\x1bServiceAccountPublicKeyType\x12\r\n\tTYPE_NONE\x10\x00\x12\x16\n\x12TYPE_X509_PEM_FILE\x10\x01\x12\x17\n\x13TYPE_RAW_PUBLIC_KEY\x10\x02*\x1f\n\x08RoleView\x12\t\n\x05\x42\x41SIC\x10\x00\x12\x08\n\x04\x46ULL\x10\x01\x32\x84\x1f\n\x03IAM\x12\xae\x01\n\x13ListServiceAccounts\x12/.google.iam.admin.v1.ListServiceAccountsRequest\x1a\x30.google.iam.admin.v1.ListServiceAccountsResponse\"4\x82\xd3\xe4\x93\x02\'\x12%/v1/{name=projects/*}/serviceAccounts\xda\x41\x04name\x12\x9f\x01\n\x11GetServiceAccount\x12-.google.iam.admin.v1.GetServiceAccountRequest\x1a#.google.iam.admin.v1.ServiceAccount\"6\x82\xd3\xe4\x93\x02)\x12\'/v1/{name=projects/*/serviceAccounts/*}\xda\x41\x04name\x12\xc1\x01\n\x14\x43reateServiceAccount\x12\x30.google.iam.admin.v1.CreateServiceAccountRequest\x1a#.google.iam.admin.v1.ServiceAccount\"R\x82\xd3\xe4\x93\x02*\"%/v1/{name=projects/*}/serviceAccounts:\x01*\xda\x41\x1fname,account_id,service_account\x12\x94\x01\n\x14UpdateServiceAccount\x12#.google.iam.admin.v1.ServiceAccount\x1a#.google.iam.admin.v1.ServiceAccount\"2\x82\xd3\xe4\x93\x02,\x1a\'/v1/{name=projects/*/serviceAccounts/*}:\x01*\x12\x98\x01\n\x14\x44\x65leteServiceAccount\x12\x30.google.iam.admin.v1.DeleteServiceAccountRequest\x1a\x16.google.protobuf.Empty\"6\x82\xd3\xe4\x93\x02)*\'/v1/{name=projects/*/serviceAccounts/*}\xda\x41\x04name\x12\xc8\x01\n\x16ListServiceAccountKeys\x12\x32.google.iam.admin.v1.ListServiceAccountKeysRequest\x1a\x33.google.iam.admin.v1.ListServiceAccountKeysResponse\"E\x82\xd3\xe4\x93\x02.\x12,/v1/{name=projects/*/serviceAccounts/*}/keys\xda\x41\x0ename,key_types\x12\xbf\x01\n\x14GetServiceAccountKey\x12\x30.google.iam.admin.v1.GetServiceAccountKeyRequest\x1a&.google.iam.admin.v1.ServiceAccountKey\"M\x82\xd3\xe4\x93\x02\x30\x12./v1/{name=projects/*/serviceAccounts/*/keys/*}\xda\x41\x14name,public_key_type\x12\xd5\x01\n\x17\x43reateServiceAccountKey\x12\x33.google.iam.admin.v1.CreateServiceAccountKeyRequest\x1a&.google.iam.admin.v1.ServiceAccountKey\"]\x82\xd3\xe4\x93\x02\x31\",/v1/{name=projects/*/serviceAccounts/*}/keys:\x01*\xda\x41#name,private_key_type,key_algorithm\x12\xa5\x01\n\x17\x44\x65leteServiceAccountKey\x12\x33.google.iam.admin.v1.DeleteServiceAccountKeyRequest\x1a\x16.google.protobuf.Empty\"=\x82\xd3\xe4\x93\x02\x30*./v1/{name=projects/*/serviceAccounts/*/keys/*}\xda\x41\x04name\x12\xa9\x01\n\x08SignBlob\x12$.google.iam.admin.v1.SignBlobRequest\x1a%.google.iam.admin.v1.SignBlobResponse\"P\x82\xd3\xe4\x93\x02\x35\"0/v1/{name=projects/*/serviceAccounts/*}:signBlob:\x01*\xda\x41\x12name,bytes_to_sign\x12\x9f\x01\n\x07SignJwt\x12#.google.iam.admin.v1.SignJwtRequest\x1a$.google.iam.admin.v1.SignJwtResponse\"I\x82\xd3\xe4\x93\x02\x34\"//v1/{name=projects/*/serviceAccounts/*}:signJwt:\x01*\xda\x41\x0cname,payload\x12\x96\x01\n\x0cGetIamPolicy\x12\".google.iam.v1.GetIamPolicyRequest\x1a\x15.google.iam.v1.Policy\"K\x82\xd3\xe4\x93\x02:\"8/v1/{resource=projects/*/serviceAccounts/*}:getIamPolicy\xda\x41\x08resource\x12\xa0\x01\n\x0cSetIamPolicy\x12\".google.iam.v1.SetIamPolicyRequest\x1a\x15.google.iam.v1.Policy\"U\x82\xd3\xe4\x93\x02=\"8/v1/{resource=projects/*/serviceAccounts/*}:setIamPolicy:\x01*\xda\x41\x0fresource,policy\x12\xcb\x01\n\x12TestIamPermissions\x12(.google.iam.v1.TestIamPermissionsRequest\x1a).google.iam.v1.TestIamPermissionsResponse\"`\x82\xd3\xe4\x93\x02\x43\">/v1/{resource=projects/*/serviceAccounts/*}:testIamPermissions:\x01*\xda\x41\x14resource,permissions\x12\xb7\x01\n\x13QueryGrantableRoles\x12/.google.iam.admin.v1.QueryGrantableRolesRequest\x1a\x30.google.iam.admin.v1.QueryGrantableRolesResponse\"=\x82\xd3\xe4\x93\x02\"\"\x1d/v1/roles:queryGrantableRoles:\x01*\xda\x41\x12\x66ull_resource_name\x12\xb4\x01\n\tListRoles\x12%.google.iam.admin.v1.ListRolesRequest\x1a&.google.iam.admin.v1.ListRolesResponse\"X\x82\xd3\xe4\x93\x02R\x12\t/v1/rolesZ$\x12\"/v1/{parent=organizations/*}/rolesZ\x1f\x12\x1d/v1/{parent=projects/*}/roles\x12\xac\x01\n\x07GetRole\x12#.google.iam.admin.v1.GetRoleRequest\x1a\x19.google.iam.admin.v1.Role\"a\x82\xd3\xe4\x93\x02[\x12\x12/v1/{name=roles/*}Z$\x12\"/v1/{name=organizations/*/roles/*}Z\x1f\x12\x1d/v1/{name=projects/*/roles/*}\x12\xa2\x01\n\nCreateRole\x12&.google.iam.admin.v1.CreateRoleRequest\x1a\x19.google.iam.admin.v1.Role\"Q\x82\xd3\xe4\x93\x02K\"\"/v1/{parent=organizations/*}/roles:\x01*Z\"\"\x1d/v1/{parent=projects/*}/roles:\x01*\x12\xa8\x01\n\nUpdateRole\x12&.google.iam.admin.v1.UpdateRoleRequest\x1a\x19.google.iam.admin.v1.Role\"W\x82\xd3\xe4\x93\x02Q2\"/v1/{name=organizations/*/roles/*}:\x04roleZ%2\x1d/v1/{name=projects/*/roles/*}:\x04role\x12\x9c\x01\n\nDeleteRole\x12&.google.iam.admin.v1.DeleteRoleRequest\x1a\x19.google.iam.admin.v1.Role\"K\x82\xd3\xe4\x93\x02\x45*\"/v1/{name=organizations/*/roles/*}Z\x1f*\x1d/v1/{name=projects/*/roles/*}\x12\xb8\x01\n\x0cUndeleteRole\x12(.google.iam.admin.v1.UndeleteRoleRequest\x1a\x19.google.iam.admin.v1.Role\"c\x82\xd3\xe4\x93\x02]\"+/v1/{name=organizations/*/roles/*}:undelete:\x01*Z+\"&/v1/{name=projects/*/roles/*}:undelete:\x01*\x12\xbc\x01\n\x18QueryTestablePermissions\x12\x34.google.iam.admin.v1.QueryTestablePermissionsRequest\x1a\x35.google.iam.admin.v1.QueryTestablePermissionsResponse\"3\x82\xd3\xe4\x93\x02-\"(/v1/permissions:queryTestablePermissions:\x01*\x1a\x46\xca\x41\x12iam.googleapis.com\xd2\x41.https://www.googleapis.com/auth/cloud-platformBb\n\x17\x63om.google.iam.admin.v1B\x08IamProtoP\x01Z8google.golang.org/genproto/googleapis/iam/admin/v1;admin\xf8\x01\x01\x62\x06proto3' 33 , 34 dependencies=[google_dot_api_dot_annotations__pb2.DESCRIPTOR,google_dot_api_dot_client__pb2.DESCRIPTOR,google_dot_api_dot_field__behavior__pb2.DESCRIPTOR,google_dot_api_dot_resource__pb2.DESCRIPTOR,google_dot_iam_dot_v1_dot_iam__policy__pb2.DESCRIPTOR,google_dot_iam_dot_v1_dot_policy__pb2.DESCRIPTOR,google_dot_protobuf_dot_empty__pb2.DESCRIPTOR,google_dot_protobuf_dot_field__mask__pb2.DESCRIPTOR,google_dot_protobuf_dot_timestamp__pb2.DESCRIPTOR,]) 35 36_SERVICEACCOUNTKEYALGORITHM = _descriptor.EnumDescriptor( 37 name='ServiceAccountKeyAlgorithm', 38 full_name='google.iam.admin.v1.ServiceAccountKeyAlgorithm', 39 filename=None, 40 file=DESCRIPTOR, 41 create_key=_descriptor._internal_create_key, 42 values=[ 43 _descriptor.EnumValueDescriptor( 44 name='KEY_ALG_UNSPECIFIED', index=0, number=0, 45 serialized_options=None, 46 type=None, 47 create_key=_descriptor._internal_create_key), 48 _descriptor.EnumValueDescriptor( 49 name='KEY_ALG_RSA_1024', index=1, number=1, 50 serialized_options=None, 51 type=None, 52 create_key=_descriptor._internal_create_key), 53 _descriptor.EnumValueDescriptor( 54 name='KEY_ALG_RSA_2048', index=2, number=2, 55 serialized_options=None, 56 type=None, 57 create_key=_descriptor._internal_create_key), 58 ], 59 containing_type=None, 60 serialized_options=None, 61 serialized_start=4510, 62 serialized_end=4607, 63) 64_sym_db.RegisterEnumDescriptor(_SERVICEACCOUNTKEYALGORITHM) 65 66ServiceAccountKeyAlgorithm = enum_type_wrapper.EnumTypeWrapper(_SERVICEACCOUNTKEYALGORITHM) 67_SERVICEACCOUNTPRIVATEKEYTYPE = _descriptor.EnumDescriptor( 68 name='ServiceAccountPrivateKeyType', 69 full_name='google.iam.admin.v1.ServiceAccountPrivateKeyType', 70 filename=None, 71 file=DESCRIPTOR, 72 create_key=_descriptor._internal_create_key, 73 values=[ 74 _descriptor.EnumValueDescriptor( 75 name='TYPE_UNSPECIFIED', index=0, number=0, 76 serialized_options=None, 77 type=None, 78 create_key=_descriptor._internal_create_key), 79 _descriptor.EnumValueDescriptor( 80 name='TYPE_PKCS12_FILE', index=1, number=1, 81 serialized_options=None, 82 type=None, 83 create_key=_descriptor._internal_create_key), 84 _descriptor.EnumValueDescriptor( 85 name='TYPE_GOOGLE_CREDENTIALS_FILE', index=2, number=2, 86 serialized_options=None, 87 type=None, 88 create_key=_descriptor._internal_create_key), 89 ], 90 containing_type=None, 91 serialized_options=None, 92 serialized_start=4609, 93 serialized_end=4717, 94) 95_sym_db.RegisterEnumDescriptor(_SERVICEACCOUNTPRIVATEKEYTYPE) 96 97ServiceAccountPrivateKeyType = enum_type_wrapper.EnumTypeWrapper(_SERVICEACCOUNTPRIVATEKEYTYPE) 98_SERVICEACCOUNTPUBLICKEYTYPE = _descriptor.EnumDescriptor( 99 name='ServiceAccountPublicKeyType', 100 full_name='google.iam.admin.v1.ServiceAccountPublicKeyType', 101 filename=None, 102 file=DESCRIPTOR, 103 create_key=_descriptor._internal_create_key, 104 values=[ 105 _descriptor.EnumValueDescriptor( 106 name='TYPE_NONE', index=0, number=0, 107 serialized_options=None, 108 type=None, 109 create_key=_descriptor._internal_create_key), 110 _descriptor.EnumValueDescriptor( 111 name='TYPE_X509_PEM_FILE', index=1, number=1, 112 serialized_options=None, 113 type=None, 114 create_key=_descriptor._internal_create_key), 115 _descriptor.EnumValueDescriptor( 116 name='TYPE_RAW_PUBLIC_KEY', index=2, number=2, 117 serialized_options=None, 118 type=None, 119 create_key=_descriptor._internal_create_key), 120 ], 121 containing_type=None, 122 serialized_options=None, 123 serialized_start=4719, 124 serialized_end=4812, 125) 126_sym_db.RegisterEnumDescriptor(_SERVICEACCOUNTPUBLICKEYTYPE) 127 128ServiceAccountPublicKeyType = enum_type_wrapper.EnumTypeWrapper(_SERVICEACCOUNTPUBLICKEYTYPE) 129_ROLEVIEW = _descriptor.EnumDescriptor( 130 name='RoleView', 131 full_name='google.iam.admin.v1.RoleView', 132 filename=None, 133 file=DESCRIPTOR, 134 create_key=_descriptor._internal_create_key, 135 values=[ 136 _descriptor.EnumValueDescriptor( 137 name='BASIC', index=0, number=0, 138 serialized_options=None, 139 type=None, 140 create_key=_descriptor._internal_create_key), 141 _descriptor.EnumValueDescriptor( 142 name='FULL', index=1, number=1, 143 serialized_options=None, 144 type=None, 145 create_key=_descriptor._internal_create_key), 146 ], 147 containing_type=None, 148 serialized_options=None, 149 serialized_start=4814, 150 serialized_end=4845, 151) 152_sym_db.RegisterEnumDescriptor(_ROLEVIEW) 153 154RoleView = enum_type_wrapper.EnumTypeWrapper(_ROLEVIEW) 155KEY_ALG_UNSPECIFIED = 0 156KEY_ALG_RSA_1024 = 1 157KEY_ALG_RSA_2048 = 2 158TYPE_UNSPECIFIED = 0 159TYPE_PKCS12_FILE = 1 160TYPE_GOOGLE_CREDENTIALS_FILE = 2 161TYPE_NONE = 0 162TYPE_X509_PEM_FILE = 1 163TYPE_RAW_PUBLIC_KEY = 2 164BASIC = 0 165FULL = 1 166 167 168_LISTSERVICEACCOUNTKEYSREQUEST_KEYTYPE = _descriptor.EnumDescriptor( 169 name='KeyType', 170 full_name='google.iam.admin.v1.ListServiceAccountKeysRequest.KeyType', 171 filename=None, 172 file=DESCRIPTOR, 173 create_key=_descriptor._internal_create_key, 174 values=[ 175 _descriptor.EnumValueDescriptor( 176 name='KEY_TYPE_UNSPECIFIED', index=0, number=0, 177 serialized_options=None, 178 type=None, 179 create_key=_descriptor._internal_create_key), 180 _descriptor.EnumValueDescriptor( 181 name='USER_MANAGED', index=1, number=1, 182 serialized_options=None, 183 type=None, 184 create_key=_descriptor._internal_create_key), 185 _descriptor.EnumValueDescriptor( 186 name='SYSTEM_MANAGED', index=2, number=2, 187 serialized_options=None, 188 type=None, 189 create_key=_descriptor._internal_create_key), 190 ], 191 containing_type=None, 192 serialized_options=None, 193 serialized_start=1357, 194 serialized_end=1430, 195) 196_sym_db.RegisterEnumDescriptor(_LISTSERVICEACCOUNTKEYSREQUEST_KEYTYPE) 197 198_ROLE_ROLELAUNCHSTAGE = _descriptor.EnumDescriptor( 199 name='RoleLaunchStage', 200 full_name='google.iam.admin.v1.Role.RoleLaunchStage', 201 filename=None, 202 file=DESCRIPTOR, 203 create_key=_descriptor._internal_create_key, 204 values=[ 205 _descriptor.EnumValueDescriptor( 206 name='ALPHA', index=0, number=0, 207 serialized_options=None, 208 type=None, 209 create_key=_descriptor._internal_create_key), 210 _descriptor.EnumValueDescriptor( 211 name='BETA', index=1, number=1, 212 serialized_options=None, 213 type=None, 214 create_key=_descriptor._internal_create_key), 215 _descriptor.EnumValueDescriptor( 216 name='GA', index=2, number=2, 217 serialized_options=None, 218 type=None, 219 create_key=_descriptor._internal_create_key), 220 _descriptor.EnumValueDescriptor( 221 name='DEPRECATED', index=3, number=4, 222 serialized_options=None, 223 type=None, 224 create_key=_descriptor._internal_create_key), 225 _descriptor.EnumValueDescriptor( 226 name='DISABLED', index=4, number=5, 227 serialized_options=None, 228 type=None, 229 create_key=_descriptor._internal_create_key), 230 _descriptor.EnumValueDescriptor( 231 name='EAP', index=5, number=6, 232 serialized_options=None, 233 type=None, 234 create_key=_descriptor._internal_create_key), 235 ], 236 containing_type=None, 237 serialized_options=None, 238 serialized_start=2922, 239 serialized_end=3007, 240) 241_sym_db.RegisterEnumDescriptor(_ROLE_ROLELAUNCHSTAGE) 242 243_PERMISSION_PERMISSIONLAUNCHSTAGE = _descriptor.EnumDescriptor( 244 name='PermissionLaunchStage', 245 full_name='google.iam.admin.v1.Permission.PermissionLaunchStage', 246 filename=None, 247 file=DESCRIPTOR, 248 create_key=_descriptor._internal_create_key, 249 values=[ 250 _descriptor.EnumValueDescriptor( 251 name='ALPHA', index=0, number=0, 252 serialized_options=None, 253 type=None, 254 create_key=_descriptor._internal_create_key), 255 _descriptor.EnumValueDescriptor( 256 name='BETA', index=1, number=1, 257 serialized_options=None, 258 type=None, 259 create_key=_descriptor._internal_create_key), 260 _descriptor.EnumValueDescriptor( 261 name='GA', index=2, number=2, 262 serialized_options=None, 263 type=None, 264 create_key=_descriptor._internal_create_key), 265 _descriptor.EnumValueDescriptor( 266 name='DEPRECATED', index=3, number=3, 267 serialized_options=None, 268 type=None, 269 create_key=_descriptor._internal_create_key), 270 ], 271 containing_type=None, 272 serialized_options=None, 273 serialized_start=4149, 274 serialized_end=4217, 275) 276_sym_db.RegisterEnumDescriptor(_PERMISSION_PERMISSIONLAUNCHSTAGE) 277 278_PERMISSION_CUSTOMROLESSUPPORTLEVEL = _descriptor.EnumDescriptor( 279 name='CustomRolesSupportLevel', 280 full_name='google.iam.admin.v1.Permission.CustomRolesSupportLevel', 281 filename=None, 282 file=DESCRIPTOR, 283 create_key=_descriptor._internal_create_key, 284 values=[ 285 _descriptor.EnumValueDescriptor( 286 name='SUPPORTED', index=0, number=0, 287 serialized_options=None, 288 type=None, 289 create_key=_descriptor._internal_create_key), 290 _descriptor.EnumValueDescriptor( 291 name='TESTING', index=1, number=1, 292 serialized_options=None, 293 type=None, 294 create_key=_descriptor._internal_create_key), 295 _descriptor.EnumValueDescriptor( 296 name='NOT_SUPPORTED', index=2, number=2, 297 serialized_options=None, 298 type=None, 299 create_key=_descriptor._internal_create_key), 300 ], 301 containing_type=None, 302 serialized_options=None, 303 serialized_start=4219, 304 serialized_end=4291, 305) 306_sym_db.RegisterEnumDescriptor(_PERMISSION_CUSTOMROLESSUPPORTLEVEL) 307 308 309_SERVICEACCOUNT = _descriptor.Descriptor( 310 name='ServiceAccount', 311 full_name='google.iam.admin.v1.ServiceAccount', 312 filename=None, 313 file=DESCRIPTOR, 314 containing_type=None, 315 create_key=_descriptor._internal_create_key, 316 fields=[ 317 _descriptor.FieldDescriptor( 318 name='name', full_name='google.iam.admin.v1.ServiceAccount.name', index=0, 319 number=1, type=9, cpp_type=9, label=1, 320 has_default_value=False, default_value=b"".decode('utf-8'), 321 message_type=None, enum_type=None, containing_type=None, 322 is_extension=False, extension_scope=None, 323 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 324 _descriptor.FieldDescriptor( 325 name='project_id', full_name='google.iam.admin.v1.ServiceAccount.project_id', index=1, 326 number=2, type=9, cpp_type=9, label=1, 327 has_default_value=False, default_value=b"".decode('utf-8'), 328 message_type=None, enum_type=None, containing_type=None, 329 is_extension=False, extension_scope=None, 330 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 331 _descriptor.FieldDescriptor( 332 name='unique_id', full_name='google.iam.admin.v1.ServiceAccount.unique_id', index=2, 333 number=4, type=9, cpp_type=9, label=1, 334 has_default_value=False, default_value=b"".decode('utf-8'), 335 message_type=None, enum_type=None, containing_type=None, 336 is_extension=False, extension_scope=None, 337 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 338 _descriptor.FieldDescriptor( 339 name='email', full_name='google.iam.admin.v1.ServiceAccount.email', index=3, 340 number=5, type=9, cpp_type=9, label=1, 341 has_default_value=False, default_value=b"".decode('utf-8'), 342 message_type=None, enum_type=None, containing_type=None, 343 is_extension=False, extension_scope=None, 344 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 345 _descriptor.FieldDescriptor( 346 name='display_name', full_name='google.iam.admin.v1.ServiceAccount.display_name', index=4, 347 number=6, type=9, cpp_type=9, label=1, 348 has_default_value=False, default_value=b"".decode('utf-8'), 349 message_type=None, enum_type=None, containing_type=None, 350 is_extension=False, extension_scope=None, 351 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 352 _descriptor.FieldDescriptor( 353 name='etag', full_name='google.iam.admin.v1.ServiceAccount.etag', index=5, 354 number=7, type=12, cpp_type=9, label=1, 355 has_default_value=False, default_value=b"", 356 message_type=None, enum_type=None, containing_type=None, 357 is_extension=False, extension_scope=None, 358 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 359 _descriptor.FieldDescriptor( 360 name='oauth2_client_id', full_name='google.iam.admin.v1.ServiceAccount.oauth2_client_id', index=6, 361 number=9, type=9, cpp_type=9, label=1, 362 has_default_value=False, default_value=b"".decode('utf-8'), 363 message_type=None, enum_type=None, containing_type=None, 364 is_extension=False, extension_scope=None, 365 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 366 ], 367 extensions=[ 368 ], 369 nested_types=[], 370 enum_types=[ 371 ], 372 serialized_options=b'\352AY\n!iam.googleapis.com/ServiceAccount\0224projects/{project}/serviceAccounts/{service_account}', 373 is_extendable=False, 374 syntax='proto3', 375 extension_ranges=[], 376 oneofs=[ 377 ], 378 serialized_start=338, 379 serialized_end=578, 380) 381 382 383_CREATESERVICEACCOUNTREQUEST = _descriptor.Descriptor( 384 name='CreateServiceAccountRequest', 385 full_name='google.iam.admin.v1.CreateServiceAccountRequest', 386 filename=None, 387 file=DESCRIPTOR, 388 containing_type=None, 389 create_key=_descriptor._internal_create_key, 390 fields=[ 391 _descriptor.FieldDescriptor( 392 name='name', full_name='google.iam.admin.v1.CreateServiceAccountRequest.name', index=0, 393 number=1, type=9, cpp_type=9, label=1, 394 has_default_value=False, default_value=b"".decode('utf-8'), 395 message_type=None, enum_type=None, containing_type=None, 396 is_extension=False, extension_scope=None, 397 serialized_options=b'\340A\002\372A-\n+cloudresourcemanager.googleapis.com/Project', file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 398 _descriptor.FieldDescriptor( 399 name='account_id', full_name='google.iam.admin.v1.CreateServiceAccountRequest.account_id', index=1, 400 number=2, type=9, cpp_type=9, label=1, 401 has_default_value=False, default_value=b"".decode('utf-8'), 402 message_type=None, enum_type=None, containing_type=None, 403 is_extension=False, extension_scope=None, 404 serialized_options=b'\340A\002', file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 405 _descriptor.FieldDescriptor( 406 name='service_account', full_name='google.iam.admin.v1.CreateServiceAccountRequest.service_account', index=2, 407 number=3, type=11, cpp_type=10, label=1, 408 has_default_value=False, default_value=None, 409 message_type=None, enum_type=None, containing_type=None, 410 is_extension=False, extension_scope=None, 411 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 412 ], 413 extensions=[ 414 ], 415 nested_types=[], 416 enum_types=[ 417 ], 418 serialized_options=None, 419 is_extendable=False, 420 syntax='proto3', 421 extension_ranges=[], 422 oneofs=[ 423 ], 424 serialized_start=581, 425 serialized_end=764, 426) 427 428 429_LISTSERVICEACCOUNTSREQUEST = _descriptor.Descriptor( 430 name='ListServiceAccountsRequest', 431 full_name='google.iam.admin.v1.ListServiceAccountsRequest', 432 filename=None, 433 file=DESCRIPTOR, 434 containing_type=None, 435 create_key=_descriptor._internal_create_key, 436 fields=[ 437 _descriptor.FieldDescriptor( 438 name='name', full_name='google.iam.admin.v1.ListServiceAccountsRequest.name', index=0, 439 number=1, type=9, cpp_type=9, label=1, 440 has_default_value=False, default_value=b"".decode('utf-8'), 441 message_type=None, enum_type=None, containing_type=None, 442 is_extension=False, extension_scope=None, 443 serialized_options=b'\340A\002\372A-\n+cloudresourcemanager.googleapis.com/Project', file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 444 _descriptor.FieldDescriptor( 445 name='page_size', full_name='google.iam.admin.v1.ListServiceAccountsRequest.page_size', index=1, 446 number=2, type=5, cpp_type=1, label=1, 447 has_default_value=False, default_value=0, 448 message_type=None, enum_type=None, containing_type=None, 449 is_extension=False, extension_scope=None, 450 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 451 _descriptor.FieldDescriptor( 452 name='page_token', full_name='google.iam.admin.v1.ListServiceAccountsRequest.page_token', index=2, 453 number=3, type=9, cpp_type=9, label=1, 454 has_default_value=False, default_value=b"".decode('utf-8'), 455 message_type=None, enum_type=None, containing_type=None, 456 is_extension=False, extension_scope=None, 457 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 458 ], 459 extensions=[ 460 ], 461 nested_types=[], 462 enum_types=[ 463 ], 464 serialized_options=None, 465 is_extendable=False, 466 syntax='proto3', 467 extension_ranges=[], 468 oneofs=[ 469 ], 470 serialized_start=767, 471 serialized_end=901, 472) 473 474 475_LISTSERVICEACCOUNTSRESPONSE = _descriptor.Descriptor( 476 name='ListServiceAccountsResponse', 477 full_name='google.iam.admin.v1.ListServiceAccountsResponse', 478 filename=None, 479 file=DESCRIPTOR, 480 containing_type=None, 481 create_key=_descriptor._internal_create_key, 482 fields=[ 483 _descriptor.FieldDescriptor( 484 name='accounts', full_name='google.iam.admin.v1.ListServiceAccountsResponse.accounts', index=0, 485 number=1, type=11, cpp_type=10, label=3, 486 has_default_value=False, default_value=[], 487 message_type=None, enum_type=None, containing_type=None, 488 is_extension=False, extension_scope=None, 489 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 490 _descriptor.FieldDescriptor( 491 name='next_page_token', full_name='google.iam.admin.v1.ListServiceAccountsResponse.next_page_token', index=1, 492 number=2, type=9, cpp_type=9, label=1, 493 has_default_value=False, default_value=b"".decode('utf-8'), 494 message_type=None, enum_type=None, containing_type=None, 495 is_extension=False, extension_scope=None, 496 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 497 ], 498 extensions=[ 499 ], 500 nested_types=[], 501 enum_types=[ 502 ], 503 serialized_options=None, 504 is_extendable=False, 505 syntax='proto3', 506 extension_ranges=[], 507 oneofs=[ 508 ], 509 serialized_start=903, 510 serialized_end=1012, 511) 512 513 514_GETSERVICEACCOUNTREQUEST = _descriptor.Descriptor( 515 name='GetServiceAccountRequest', 516 full_name='google.iam.admin.v1.GetServiceAccountRequest', 517 filename=None, 518 file=DESCRIPTOR, 519 containing_type=None, 520 create_key=_descriptor._internal_create_key, 521 fields=[ 522 _descriptor.FieldDescriptor( 523 name='name', full_name='google.iam.admin.v1.GetServiceAccountRequest.name', index=0, 524 number=1, type=9, cpp_type=9, label=1, 525 has_default_value=False, default_value=b"".decode('utf-8'), 526 message_type=None, enum_type=None, containing_type=None, 527 is_extension=False, extension_scope=None, 528 serialized_options=b'\340A\002\372A#\n!iam.googleapis.com/ServiceAccount', file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 529 ], 530 extensions=[ 531 ], 532 nested_types=[], 533 enum_types=[ 534 ], 535 serialized_options=None, 536 is_extendable=False, 537 syntax='proto3', 538 extension_ranges=[], 539 oneofs=[ 540 ], 541 serialized_start=1014, 542 serialized_end=1097, 543) 544 545 546_DELETESERVICEACCOUNTREQUEST = _descriptor.Descriptor( 547 name='DeleteServiceAccountRequest', 548 full_name='google.iam.admin.v1.DeleteServiceAccountRequest', 549 filename=None, 550 file=DESCRIPTOR, 551 containing_type=None, 552 create_key=_descriptor._internal_create_key, 553 fields=[ 554 _descriptor.FieldDescriptor( 555 name='name', full_name='google.iam.admin.v1.DeleteServiceAccountRequest.name', index=0, 556 number=1, type=9, cpp_type=9, label=1, 557 has_default_value=False, default_value=b"".decode('utf-8'), 558 message_type=None, enum_type=None, containing_type=None, 559 is_extension=False, extension_scope=None, 560 serialized_options=b'\340A\002\372A#\n!iam.googleapis.com/ServiceAccount', file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 561 ], 562 extensions=[ 563 ], 564 nested_types=[], 565 enum_types=[ 566 ], 567 serialized_options=None, 568 is_extendable=False, 569 syntax='proto3', 570 extension_ranges=[], 571 oneofs=[ 572 ], 573 serialized_start=1099, 574 serialized_end=1185, 575) 576 577 578_LISTSERVICEACCOUNTKEYSREQUEST = _descriptor.Descriptor( 579 name='ListServiceAccountKeysRequest', 580 full_name='google.iam.admin.v1.ListServiceAccountKeysRequest', 581 filename=None, 582 file=DESCRIPTOR, 583 containing_type=None, 584 create_key=_descriptor._internal_create_key, 585 fields=[ 586 _descriptor.FieldDescriptor( 587 name='name', full_name='google.iam.admin.v1.ListServiceAccountKeysRequest.name', index=0, 588 number=1, type=9, cpp_type=9, label=1, 589 has_default_value=False, default_value=b"".decode('utf-8'), 590 message_type=None, enum_type=None, containing_type=None, 591 is_extension=False, extension_scope=None, 592 serialized_options=b'\340A\002\372A#\n!iam.googleapis.com/ServiceAccount', file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 593 _descriptor.FieldDescriptor( 594 name='key_types', full_name='google.iam.admin.v1.ListServiceAccountKeysRequest.key_types', index=1, 595 number=2, type=14, cpp_type=8, label=3, 596 has_default_value=False, default_value=[], 597 message_type=None, enum_type=None, containing_type=None, 598 is_extension=False, extension_scope=None, 599 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 600 ], 601 extensions=[ 602 ], 603 nested_types=[], 604 enum_types=[ 605 _LISTSERVICEACCOUNTKEYSREQUEST_KEYTYPE, 606 ], 607 serialized_options=None, 608 is_extendable=False, 609 syntax='proto3', 610 extension_ranges=[], 611 oneofs=[ 612 ], 613 serialized_start=1188, 614 serialized_end=1430, 615) 616 617 618_LISTSERVICEACCOUNTKEYSRESPONSE = _descriptor.Descriptor( 619 name='ListServiceAccountKeysResponse', 620 full_name='google.iam.admin.v1.ListServiceAccountKeysResponse', 621 filename=None, 622 file=DESCRIPTOR, 623 containing_type=None, 624 create_key=_descriptor._internal_create_key, 625 fields=[ 626 _descriptor.FieldDescriptor( 627 name='keys', full_name='google.iam.admin.v1.ListServiceAccountKeysResponse.keys', index=0, 628 number=1, type=11, cpp_type=10, label=3, 629 has_default_value=False, default_value=[], 630 message_type=None, enum_type=None, containing_type=None, 631 is_extension=False, extension_scope=None, 632 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 633 ], 634 extensions=[ 635 ], 636 nested_types=[], 637 enum_types=[ 638 ], 639 serialized_options=None, 640 is_extendable=False, 641 syntax='proto3', 642 extension_ranges=[], 643 oneofs=[ 644 ], 645 serialized_start=1432, 646 serialized_end=1518, 647) 648 649 650_GETSERVICEACCOUNTKEYREQUEST = _descriptor.Descriptor( 651 name='GetServiceAccountKeyRequest', 652 full_name='google.iam.admin.v1.GetServiceAccountKeyRequest', 653 filename=None, 654 file=DESCRIPTOR, 655 containing_type=None, 656 create_key=_descriptor._internal_create_key, 657 fields=[ 658 _descriptor.FieldDescriptor( 659 name='name', full_name='google.iam.admin.v1.GetServiceAccountKeyRequest.name', index=0, 660 number=1, type=9, cpp_type=9, label=1, 661 has_default_value=False, default_value=b"".decode('utf-8'), 662 message_type=None, enum_type=None, containing_type=None, 663 is_extension=False, extension_scope=None, 664 serialized_options=b'\340A\002\372A\030\n\026iam.googleapis.com/Key', file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 665 _descriptor.FieldDescriptor( 666 name='public_key_type', full_name='google.iam.admin.v1.GetServiceAccountKeyRequest.public_key_type', index=1, 667 number=2, type=14, cpp_type=8, label=1, 668 has_default_value=False, default_value=0, 669 message_type=None, enum_type=None, containing_type=None, 670 is_extension=False, extension_scope=None, 671 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 672 ], 673 extensions=[ 674 ], 675 nested_types=[], 676 enum_types=[ 677 ], 678 serialized_options=None, 679 is_extendable=False, 680 syntax='proto3', 681 extension_ranges=[], 682 oneofs=[ 683 ], 684 serialized_start=1521, 685 serialized_end=1671, 686) 687 688 689_SERVICEACCOUNTKEY = _descriptor.Descriptor( 690 name='ServiceAccountKey', 691 full_name='google.iam.admin.v1.ServiceAccountKey', 692 filename=None, 693 file=DESCRIPTOR, 694 containing_type=None, 695 create_key=_descriptor._internal_create_key, 696 fields=[ 697 _descriptor.FieldDescriptor( 698 name='name', full_name='google.iam.admin.v1.ServiceAccountKey.name', index=0, 699 number=1, type=9, cpp_type=9, label=1, 700 has_default_value=False, default_value=b"".decode('utf-8'), 701 message_type=None, enum_type=None, containing_type=None, 702 is_extension=False, extension_scope=None, 703 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 704 _descriptor.FieldDescriptor( 705 name='private_key_type', full_name='google.iam.admin.v1.ServiceAccountKey.private_key_type', index=1, 706 number=2, type=14, cpp_type=8, label=1, 707 has_default_value=False, default_value=0, 708 message_type=None, enum_type=None, containing_type=None, 709 is_extension=False, extension_scope=None, 710 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 711 _descriptor.FieldDescriptor( 712 name='key_algorithm', full_name='google.iam.admin.v1.ServiceAccountKey.key_algorithm', index=2, 713 number=8, type=14, cpp_type=8, label=1, 714 has_default_value=False, default_value=0, 715 message_type=None, enum_type=None, containing_type=None, 716 is_extension=False, extension_scope=None, 717 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 718 _descriptor.FieldDescriptor( 719 name='private_key_data', full_name='google.iam.admin.v1.ServiceAccountKey.private_key_data', index=3, 720 number=3, type=12, cpp_type=9, label=1, 721 has_default_value=False, default_value=b"", 722 message_type=None, enum_type=None, containing_type=None, 723 is_extension=False, extension_scope=None, 724 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 725 _descriptor.FieldDescriptor( 726 name='public_key_data', full_name='google.iam.admin.v1.ServiceAccountKey.public_key_data', index=4, 727 number=7, type=12, cpp_type=9, label=1, 728 has_default_value=False, default_value=b"", 729 message_type=None, enum_type=None, containing_type=None, 730 is_extension=False, extension_scope=None, 731 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 732 _descriptor.FieldDescriptor( 733 name='valid_after_time', full_name='google.iam.admin.v1.ServiceAccountKey.valid_after_time', index=5, 734 number=4, type=11, cpp_type=10, label=1, 735 has_default_value=False, default_value=None, 736 message_type=None, enum_type=None, containing_type=None, 737 is_extension=False, extension_scope=None, 738 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 739 _descriptor.FieldDescriptor( 740 name='valid_before_time', full_name='google.iam.admin.v1.ServiceAccountKey.valid_before_time', index=6, 741 number=5, type=11, cpp_type=10, label=1, 742 has_default_value=False, default_value=None, 743 message_type=None, enum_type=None, containing_type=None, 744 is_extension=False, extension_scope=None, 745 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 746 ], 747 extensions=[ 748 ], 749 nested_types=[], 750 enum_types=[ 751 ], 752 serialized_options=b'\352AY\n\026iam.googleapis.com/Key\022?projects/{project}/serviceAccounts/{service_account}/keys/{key}', 753 is_extendable=False, 754 syntax='proto3', 755 extension_ranges=[], 756 oneofs=[ 757 ], 758 serialized_start=1674, 759 serialized_end=2110, 760) 761 762 763_CREATESERVICEACCOUNTKEYREQUEST = _descriptor.Descriptor( 764 name='CreateServiceAccountKeyRequest', 765 full_name='google.iam.admin.v1.CreateServiceAccountKeyRequest', 766 filename=None, 767 file=DESCRIPTOR, 768 containing_type=None, 769 create_key=_descriptor._internal_create_key, 770 fields=[ 771 _descriptor.FieldDescriptor( 772 name='name', full_name='google.iam.admin.v1.CreateServiceAccountKeyRequest.name', index=0, 773 number=1, type=9, cpp_type=9, label=1, 774 has_default_value=False, default_value=b"".decode('utf-8'), 775 message_type=None, enum_type=None, containing_type=None, 776 is_extension=False, extension_scope=None, 777 serialized_options=b'\340A\002\372A#\n!iam.googleapis.com/ServiceAccount', file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 778 _descriptor.FieldDescriptor( 779 name='private_key_type', full_name='google.iam.admin.v1.CreateServiceAccountKeyRequest.private_key_type', index=1, 780 number=2, type=14, cpp_type=8, label=1, 781 has_default_value=False, default_value=0, 782 message_type=None, enum_type=None, containing_type=None, 783 is_extension=False, extension_scope=None, 784 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 785 _descriptor.FieldDescriptor( 786 name='key_algorithm', full_name='google.iam.admin.v1.CreateServiceAccountKeyRequest.key_algorithm', index=2, 787 number=3, type=14, cpp_type=8, label=1, 788 has_default_value=False, default_value=0, 789 message_type=None, enum_type=None, containing_type=None, 790 is_extension=False, extension_scope=None, 791 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 792 ], 793 extensions=[ 794 ], 795 nested_types=[], 796 enum_types=[ 797 ], 798 serialized_options=None, 799 is_extendable=False, 800 syntax='proto3', 801 extension_ranges=[], 802 oneofs=[ 803 ], 804 serialized_start=2113, 805 serialized_end=2351, 806) 807 808 809_DELETESERVICEACCOUNTKEYREQUEST = _descriptor.Descriptor( 810 name='DeleteServiceAccountKeyRequest', 811 full_name='google.iam.admin.v1.DeleteServiceAccountKeyRequest', 812 filename=None, 813 file=DESCRIPTOR, 814 containing_type=None, 815 create_key=_descriptor._internal_create_key, 816 fields=[ 817 _descriptor.FieldDescriptor( 818 name='name', full_name='google.iam.admin.v1.DeleteServiceAccountKeyRequest.name', index=0, 819 number=1, type=9, cpp_type=9, label=1, 820 has_default_value=False, default_value=b"".decode('utf-8'), 821 message_type=None, enum_type=None, containing_type=None, 822 is_extension=False, extension_scope=None, 823 serialized_options=b'\340A\002\372A\030\n\026iam.googleapis.com/Key', file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 824 ], 825 extensions=[ 826 ], 827 nested_types=[], 828 enum_types=[ 829 ], 830 serialized_options=None, 831 is_extendable=False, 832 syntax='proto3', 833 extension_ranges=[], 834 oneofs=[ 835 ], 836 serialized_start=2353, 837 serialized_end=2431, 838) 839 840 841_SIGNBLOBREQUEST = _descriptor.Descriptor( 842 name='SignBlobRequest', 843 full_name='google.iam.admin.v1.SignBlobRequest', 844 filename=None, 845 file=DESCRIPTOR, 846 containing_type=None, 847 create_key=_descriptor._internal_create_key, 848 fields=[ 849 _descriptor.FieldDescriptor( 850 name='name', full_name='google.iam.admin.v1.SignBlobRequest.name', index=0, 851 number=1, type=9, cpp_type=9, label=1, 852 has_default_value=False, default_value=b"".decode('utf-8'), 853 message_type=None, enum_type=None, containing_type=None, 854 is_extension=False, extension_scope=None, 855 serialized_options=b'\340A\002\372A#\n!iam.googleapis.com/ServiceAccount', file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 856 _descriptor.FieldDescriptor( 857 name='bytes_to_sign', full_name='google.iam.admin.v1.SignBlobRequest.bytes_to_sign', index=1, 858 number=2, type=12, cpp_type=9, label=1, 859 has_default_value=False, default_value=b"", 860 message_type=None, enum_type=None, containing_type=None, 861 is_extension=False, extension_scope=None, 862 serialized_options=b'\340A\002', file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 863 ], 864 extensions=[ 865 ], 866 nested_types=[], 867 enum_types=[ 868 ], 869 serialized_options=None, 870 is_extendable=False, 871 syntax='proto3', 872 extension_ranges=[], 873 oneofs=[ 874 ], 875 serialized_start=2433, 876 serialized_end=2535, 877) 878 879 880_SIGNBLOBRESPONSE = _descriptor.Descriptor( 881 name='SignBlobResponse', 882 full_name='google.iam.admin.v1.SignBlobResponse', 883 filename=None, 884 file=DESCRIPTOR, 885 containing_type=None, 886 create_key=_descriptor._internal_create_key, 887 fields=[ 888 _descriptor.FieldDescriptor( 889 name='key_id', full_name='google.iam.admin.v1.SignBlobResponse.key_id', index=0, 890 number=1, type=9, cpp_type=9, label=1, 891 has_default_value=False, default_value=b"".decode('utf-8'), 892 message_type=None, enum_type=None, containing_type=None, 893 is_extension=False, extension_scope=None, 894 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 895 _descriptor.FieldDescriptor( 896 name='signature', full_name='google.iam.admin.v1.SignBlobResponse.signature', index=1, 897 number=2, type=12, cpp_type=9, label=1, 898 has_default_value=False, default_value=b"", 899 message_type=None, enum_type=None, containing_type=None, 900 is_extension=False, extension_scope=None, 901 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 902 ], 903 extensions=[ 904 ], 905 nested_types=[], 906 enum_types=[ 907 ], 908 serialized_options=None, 909 is_extendable=False, 910 syntax='proto3', 911 extension_ranges=[], 912 oneofs=[ 913 ], 914 serialized_start=2537, 915 serialized_end=2590, 916) 917 918 919_SIGNJWTREQUEST = _descriptor.Descriptor( 920 name='SignJwtRequest', 921 full_name='google.iam.admin.v1.SignJwtRequest', 922 filename=None, 923 file=DESCRIPTOR, 924 containing_type=None, 925 create_key=_descriptor._internal_create_key, 926 fields=[ 927 _descriptor.FieldDescriptor( 928 name='name', full_name='google.iam.admin.v1.SignJwtRequest.name', index=0, 929 number=1, type=9, cpp_type=9, label=1, 930 has_default_value=False, default_value=b"".decode('utf-8'), 931 message_type=None, enum_type=None, containing_type=None, 932 is_extension=False, extension_scope=None, 933 serialized_options=b'\340A\002\372A#\n!iam.googleapis.com/ServiceAccount', file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 934 _descriptor.FieldDescriptor( 935 name='payload', full_name='google.iam.admin.v1.SignJwtRequest.payload', index=1, 936 number=2, type=9, cpp_type=9, label=1, 937 has_default_value=False, default_value=b"".decode('utf-8'), 938 message_type=None, enum_type=None, containing_type=None, 939 is_extension=False, extension_scope=None, 940 serialized_options=b'\340A\002', file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 941 ], 942 extensions=[ 943 ], 944 nested_types=[], 945 enum_types=[ 946 ], 947 serialized_options=None, 948 is_extendable=False, 949 syntax='proto3', 950 extension_ranges=[], 951 oneofs=[ 952 ], 953 serialized_start=2592, 954 serialized_end=2687, 955) 956 957 958_SIGNJWTRESPONSE = _descriptor.Descriptor( 959 name='SignJwtResponse', 960 full_name='google.iam.admin.v1.SignJwtResponse', 961 filename=None, 962 file=DESCRIPTOR, 963 containing_type=None, 964 create_key=_descriptor._internal_create_key, 965 fields=[ 966 _descriptor.FieldDescriptor( 967 name='key_id', full_name='google.iam.admin.v1.SignJwtResponse.key_id', index=0, 968 number=1, type=9, cpp_type=9, label=1, 969 has_default_value=False, default_value=b"".decode('utf-8'), 970 message_type=None, enum_type=None, containing_type=None, 971 is_extension=False, extension_scope=None, 972 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 973 _descriptor.FieldDescriptor( 974 name='signed_jwt', full_name='google.iam.admin.v1.SignJwtResponse.signed_jwt', index=1, 975 number=2, type=9, cpp_type=9, label=1, 976 has_default_value=False, default_value=b"".decode('utf-8'), 977 message_type=None, enum_type=None, containing_type=None, 978 is_extension=False, extension_scope=None, 979 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 980 ], 981 extensions=[ 982 ], 983 nested_types=[], 984 enum_types=[ 985 ], 986 serialized_options=None, 987 is_extendable=False, 988 syntax='proto3', 989 extension_ranges=[], 990 oneofs=[ 991 ], 992 serialized_start=2689, 993 serialized_end=2742, 994) 995 996 997_ROLE = _descriptor.Descriptor( 998 name='Role', 999 full_name='google.iam.admin.v1.Role', 1000 filename=None, 1001 file=DESCRIPTOR, 1002 containing_type=None, 1003 create_key=_descriptor._internal_create_key, 1004 fields=[ 1005 _descriptor.FieldDescriptor( 1006 name='name', full_name='google.iam.admin.v1.Role.name', index=0, 1007 number=1, type=9, cpp_type=9, label=1, 1008 has_default_value=False, default_value=b"".decode('utf-8'), 1009 message_type=None, enum_type=None, containing_type=None, 1010 is_extension=False, extension_scope=None, 1011 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1012 _descriptor.FieldDescriptor( 1013 name='title', full_name='google.iam.admin.v1.Role.title', index=1, 1014 number=2, type=9, cpp_type=9, label=1, 1015 has_default_value=False, default_value=b"".decode('utf-8'), 1016 message_type=None, enum_type=None, containing_type=None, 1017 is_extension=False, extension_scope=None, 1018 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1019 _descriptor.FieldDescriptor( 1020 name='description', full_name='google.iam.admin.v1.Role.description', index=2, 1021 number=3, type=9, cpp_type=9, label=1, 1022 has_default_value=False, default_value=b"".decode('utf-8'), 1023 message_type=None, enum_type=None, containing_type=None, 1024 is_extension=False, extension_scope=None, 1025 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1026 _descriptor.FieldDescriptor( 1027 name='included_permissions', full_name='google.iam.admin.v1.Role.included_permissions', index=3, 1028 number=7, type=9, cpp_type=9, label=3, 1029 has_default_value=False, default_value=[], 1030 message_type=None, enum_type=None, containing_type=None, 1031 is_extension=False, extension_scope=None, 1032 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1033 _descriptor.FieldDescriptor( 1034 name='stage', full_name='google.iam.admin.v1.Role.stage', index=4, 1035 number=8, type=14, cpp_type=8, label=1, 1036 has_default_value=False, default_value=0, 1037 message_type=None, enum_type=None, containing_type=None, 1038 is_extension=False, extension_scope=None, 1039 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1040 _descriptor.FieldDescriptor( 1041 name='etag', full_name='google.iam.admin.v1.Role.etag', index=5, 1042 number=9, type=12, cpp_type=9, label=1, 1043 has_default_value=False, default_value=b"", 1044 message_type=None, enum_type=None, containing_type=None, 1045 is_extension=False, extension_scope=None, 1046 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1047 _descriptor.FieldDescriptor( 1048 name='deleted', full_name='google.iam.admin.v1.Role.deleted', index=6, 1049 number=11, type=8, cpp_type=7, label=1, 1050 has_default_value=False, default_value=False, 1051 message_type=None, enum_type=None, containing_type=None, 1052 is_extension=False, extension_scope=None, 1053 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1054 ], 1055 extensions=[ 1056 ], 1057 nested_types=[], 1058 enum_types=[ 1059 _ROLE_ROLELAUNCHSTAGE, 1060 ], 1061 serialized_options=None, 1062 is_extendable=False, 1063 syntax='proto3', 1064 extension_ranges=[], 1065 oneofs=[ 1066 ], 1067 serialized_start=2745, 1068 serialized_end=3007, 1069) 1070 1071 1072_QUERYGRANTABLEROLESREQUEST = _descriptor.Descriptor( 1073 name='QueryGrantableRolesRequest', 1074 full_name='google.iam.admin.v1.QueryGrantableRolesRequest', 1075 filename=None, 1076 file=DESCRIPTOR, 1077 containing_type=None, 1078 create_key=_descriptor._internal_create_key, 1079 fields=[ 1080 _descriptor.FieldDescriptor( 1081 name='full_resource_name', full_name='google.iam.admin.v1.QueryGrantableRolesRequest.full_resource_name', index=0, 1082 number=1, type=9, cpp_type=9, label=1, 1083 has_default_value=False, default_value=b"".decode('utf-8'), 1084 message_type=None, enum_type=None, containing_type=None, 1085 is_extension=False, extension_scope=None, 1086 serialized_options=b'\340A\002', file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1087 _descriptor.FieldDescriptor( 1088 name='view', full_name='google.iam.admin.v1.QueryGrantableRolesRequest.view', index=1, 1089 number=2, type=14, cpp_type=8, label=1, 1090 has_default_value=False, default_value=0, 1091 message_type=None, enum_type=None, containing_type=None, 1092 is_extension=False, extension_scope=None, 1093 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1094 _descriptor.FieldDescriptor( 1095 name='page_size', full_name='google.iam.admin.v1.QueryGrantableRolesRequest.page_size', index=2, 1096 number=3, type=5, cpp_type=1, label=1, 1097 has_default_value=False, default_value=0, 1098 message_type=None, enum_type=None, containing_type=None, 1099 is_extension=False, extension_scope=None, 1100 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1101 _descriptor.FieldDescriptor( 1102 name='page_token', full_name='google.iam.admin.v1.QueryGrantableRolesRequest.page_token', index=3, 1103 number=4, type=9, cpp_type=9, label=1, 1104 has_default_value=False, default_value=b"".decode('utf-8'), 1105 message_type=None, enum_type=None, containing_type=None, 1106 is_extension=False, extension_scope=None, 1107 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1108 ], 1109 extensions=[ 1110 ], 1111 nested_types=[], 1112 enum_types=[ 1113 ], 1114 serialized_options=None, 1115 is_extendable=False, 1116 syntax='proto3', 1117 extension_ranges=[], 1118 oneofs=[ 1119 ], 1120 serialized_start=3010, 1121 serialized_end=3155, 1122) 1123 1124 1125_QUERYGRANTABLEROLESRESPONSE = _descriptor.Descriptor( 1126 name='QueryGrantableRolesResponse', 1127 full_name='google.iam.admin.v1.QueryGrantableRolesResponse', 1128 filename=None, 1129 file=DESCRIPTOR, 1130 containing_type=None, 1131 create_key=_descriptor._internal_create_key, 1132 fields=[ 1133 _descriptor.FieldDescriptor( 1134 name='roles', full_name='google.iam.admin.v1.QueryGrantableRolesResponse.roles', index=0, 1135 number=1, type=11, cpp_type=10, label=3, 1136 has_default_value=False, default_value=[], 1137 message_type=None, enum_type=None, containing_type=None, 1138 is_extension=False, extension_scope=None, 1139 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1140 _descriptor.FieldDescriptor( 1141 name='next_page_token', full_name='google.iam.admin.v1.QueryGrantableRolesResponse.next_page_token', index=1, 1142 number=2, type=9, cpp_type=9, label=1, 1143 has_default_value=False, default_value=b"".decode('utf-8'), 1144 message_type=None, enum_type=None, containing_type=None, 1145 is_extension=False, extension_scope=None, 1146 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1147 ], 1148 extensions=[ 1149 ], 1150 nested_types=[], 1151 enum_types=[ 1152 ], 1153 serialized_options=None, 1154 is_extendable=False, 1155 syntax='proto3', 1156 extension_ranges=[], 1157 oneofs=[ 1158 ], 1159 serialized_start=3157, 1160 serialized_end=3253, 1161) 1162 1163 1164_LISTROLESREQUEST = _descriptor.Descriptor( 1165 name='ListRolesRequest', 1166 full_name='google.iam.admin.v1.ListRolesRequest', 1167 filename=None, 1168 file=DESCRIPTOR, 1169 containing_type=None, 1170 create_key=_descriptor._internal_create_key, 1171 fields=[ 1172 _descriptor.FieldDescriptor( 1173 name='parent', full_name='google.iam.admin.v1.ListRolesRequest.parent', index=0, 1174 number=1, type=9, cpp_type=9, label=1, 1175 has_default_value=False, default_value=b"".decode('utf-8'), 1176 message_type=None, enum_type=None, containing_type=None, 1177 is_extension=False, extension_scope=None, 1178 serialized_options=b'\372A\003\n\001*', file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1179 _descriptor.FieldDescriptor( 1180 name='page_size', full_name='google.iam.admin.v1.ListRolesRequest.page_size', index=1, 1181 number=2, type=5, cpp_type=1, label=1, 1182 has_default_value=False, default_value=0, 1183 message_type=None, enum_type=None, containing_type=None, 1184 is_extension=False, extension_scope=None, 1185 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1186 _descriptor.FieldDescriptor( 1187 name='page_token', full_name='google.iam.admin.v1.ListRolesRequest.page_token', index=2, 1188 number=3, type=9, cpp_type=9, label=1, 1189 has_default_value=False, default_value=b"".decode('utf-8'), 1190 message_type=None, enum_type=None, containing_type=None, 1191 is_extension=False, extension_scope=None, 1192 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1193 _descriptor.FieldDescriptor( 1194 name='view', full_name='google.iam.admin.v1.ListRolesRequest.view', index=3, 1195 number=4, type=14, cpp_type=8, label=1, 1196 has_default_value=False, default_value=0, 1197 message_type=None, enum_type=None, containing_type=None, 1198 is_extension=False, extension_scope=None, 1199 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1200 _descriptor.FieldDescriptor( 1201 name='show_deleted', full_name='google.iam.admin.v1.ListRolesRequest.show_deleted', index=4, 1202 number=6, type=8, cpp_type=7, label=1, 1203 has_default_value=False, default_value=False, 1204 message_type=None, enum_type=None, containing_type=None, 1205 is_extension=False, extension_scope=None, 1206 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1207 ], 1208 extensions=[ 1209 ], 1210 nested_types=[], 1211 enum_types=[ 1212 ], 1213 serialized_options=None, 1214 is_extendable=False, 1215 syntax='proto3', 1216 extension_ranges=[], 1217 oneofs=[ 1218 ], 1219 serialized_start=3256, 1220 serialized_end=3404, 1221) 1222 1223 1224_LISTROLESRESPONSE = _descriptor.Descriptor( 1225 name='ListRolesResponse', 1226 full_name='google.iam.admin.v1.ListRolesResponse', 1227 filename=None, 1228 file=DESCRIPTOR, 1229 containing_type=None, 1230 create_key=_descriptor._internal_create_key, 1231 fields=[ 1232 _descriptor.FieldDescriptor( 1233 name='roles', full_name='google.iam.admin.v1.ListRolesResponse.roles', index=0, 1234 number=1, type=11, cpp_type=10, label=3, 1235 has_default_value=False, default_value=[], 1236 message_type=None, enum_type=None, containing_type=None, 1237 is_extension=False, extension_scope=None, 1238 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1239 _descriptor.FieldDescriptor( 1240 name='next_page_token', full_name='google.iam.admin.v1.ListRolesResponse.next_page_token', index=1, 1241 number=2, type=9, cpp_type=9, label=1, 1242 has_default_value=False, default_value=b"".decode('utf-8'), 1243 message_type=None, enum_type=None, containing_type=None, 1244 is_extension=False, extension_scope=None, 1245 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1246 ], 1247 extensions=[ 1248 ], 1249 nested_types=[], 1250 enum_types=[ 1251 ], 1252 serialized_options=None, 1253 is_extendable=False, 1254 syntax='proto3', 1255 extension_ranges=[], 1256 oneofs=[ 1257 ], 1258 serialized_start=3406, 1259 serialized_end=3492, 1260) 1261 1262 1263_GETROLEREQUEST = _descriptor.Descriptor( 1264 name='GetRoleRequest', 1265 full_name='google.iam.admin.v1.GetRoleRequest', 1266 filename=None, 1267 file=DESCRIPTOR, 1268 containing_type=None, 1269 create_key=_descriptor._internal_create_key, 1270 fields=[ 1271 _descriptor.FieldDescriptor( 1272 name='name', full_name='google.iam.admin.v1.GetRoleRequest.name', index=0, 1273 number=1, type=9, cpp_type=9, label=1, 1274 has_default_value=False, default_value=b"".decode('utf-8'), 1275 message_type=None, enum_type=None, containing_type=None, 1276 is_extension=False, extension_scope=None, 1277 serialized_options=b'\372A\003\n\001*', file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1278 ], 1279 extensions=[ 1280 ], 1281 nested_types=[], 1282 enum_types=[ 1283 ], 1284 serialized_options=None, 1285 is_extendable=False, 1286 syntax='proto3', 1287 extension_ranges=[], 1288 oneofs=[ 1289 ], 1290 serialized_start=3494, 1291 serialized_end=3532, 1292) 1293 1294 1295_CREATEROLEREQUEST = _descriptor.Descriptor( 1296 name='CreateRoleRequest', 1297 full_name='google.iam.admin.v1.CreateRoleRequest', 1298 filename=None, 1299 file=DESCRIPTOR, 1300 containing_type=None, 1301 create_key=_descriptor._internal_create_key, 1302 fields=[ 1303 _descriptor.FieldDescriptor( 1304 name='parent', full_name='google.iam.admin.v1.CreateRoleRequest.parent', index=0, 1305 number=1, type=9, cpp_type=9, label=1, 1306 has_default_value=False, default_value=b"".decode('utf-8'), 1307 message_type=None, enum_type=None, containing_type=None, 1308 is_extension=False, extension_scope=None, 1309 serialized_options=b'\372A\003\n\001*', file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1310 _descriptor.FieldDescriptor( 1311 name='role_id', full_name='google.iam.admin.v1.CreateRoleRequest.role_id', index=1, 1312 number=2, type=9, cpp_type=9, label=1, 1313 has_default_value=False, default_value=b"".decode('utf-8'), 1314 message_type=None, enum_type=None, containing_type=None, 1315 is_extension=False, extension_scope=None, 1316 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1317 _descriptor.FieldDescriptor( 1318 name='role', full_name='google.iam.admin.v1.CreateRoleRequest.role', index=2, 1319 number=3, type=11, cpp_type=10, label=1, 1320 has_default_value=False, default_value=None, 1321 message_type=None, enum_type=None, containing_type=None, 1322 is_extension=False, extension_scope=None, 1323 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1324 ], 1325 extensions=[ 1326 ], 1327 nested_types=[], 1328 enum_types=[ 1329 ], 1330 serialized_options=None, 1331 is_extendable=False, 1332 syntax='proto3', 1333 extension_ranges=[], 1334 oneofs=[ 1335 ], 1336 serialized_start=3534, 1337 serialized_end=3635, 1338) 1339 1340 1341_UPDATEROLEREQUEST = _descriptor.Descriptor( 1342 name='UpdateRoleRequest', 1343 full_name='google.iam.admin.v1.UpdateRoleRequest', 1344 filename=None, 1345 file=DESCRIPTOR, 1346 containing_type=None, 1347 create_key=_descriptor._internal_create_key, 1348 fields=[ 1349 _descriptor.FieldDescriptor( 1350 name='name', full_name='google.iam.admin.v1.UpdateRoleRequest.name', index=0, 1351 number=1, type=9, cpp_type=9, label=1, 1352 has_default_value=False, default_value=b"".decode('utf-8'), 1353 message_type=None, enum_type=None, containing_type=None, 1354 is_extension=False, extension_scope=None, 1355 serialized_options=b'\372A\003\n\001*', file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1356 _descriptor.FieldDescriptor( 1357 name='role', full_name='google.iam.admin.v1.UpdateRoleRequest.role', index=1, 1358 number=2, type=11, cpp_type=10, label=1, 1359 has_default_value=False, default_value=None, 1360 message_type=None, enum_type=None, containing_type=None, 1361 is_extension=False, extension_scope=None, 1362 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1363 _descriptor.FieldDescriptor( 1364 name='update_mask', full_name='google.iam.admin.v1.UpdateRoleRequest.update_mask', index=2, 1365 number=3, type=11, cpp_type=10, label=1, 1366 has_default_value=False, default_value=None, 1367 message_type=None, enum_type=None, containing_type=None, 1368 is_extension=False, extension_scope=None, 1369 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1370 ], 1371 extensions=[ 1372 ], 1373 nested_types=[], 1374 enum_types=[ 1375 ], 1376 serialized_options=None, 1377 is_extendable=False, 1378 syntax='proto3', 1379 extension_ranges=[], 1380 oneofs=[ 1381 ], 1382 serialized_start=3638, 1383 serialized_end=3769, 1384) 1385 1386 1387_DELETEROLEREQUEST = _descriptor.Descriptor( 1388 name='DeleteRoleRequest', 1389 full_name='google.iam.admin.v1.DeleteRoleRequest', 1390 filename=None, 1391 file=DESCRIPTOR, 1392 containing_type=None, 1393 create_key=_descriptor._internal_create_key, 1394 fields=[ 1395 _descriptor.FieldDescriptor( 1396 name='name', full_name='google.iam.admin.v1.DeleteRoleRequest.name', index=0, 1397 number=1, type=9, cpp_type=9, label=1, 1398 has_default_value=False, default_value=b"".decode('utf-8'), 1399 message_type=None, enum_type=None, containing_type=None, 1400 is_extension=False, extension_scope=None, 1401 serialized_options=b'\372A\003\n\001*', file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1402 _descriptor.FieldDescriptor( 1403 name='etag', full_name='google.iam.admin.v1.DeleteRoleRequest.etag', index=1, 1404 number=2, type=12, cpp_type=9, label=1, 1405 has_default_value=False, default_value=b"", 1406 message_type=None, enum_type=None, containing_type=None, 1407 is_extension=False, extension_scope=None, 1408 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1409 ], 1410 extensions=[ 1411 ], 1412 nested_types=[], 1413 enum_types=[ 1414 ], 1415 serialized_options=None, 1416 is_extendable=False, 1417 syntax='proto3', 1418 extension_ranges=[], 1419 oneofs=[ 1420 ], 1421 serialized_start=3771, 1422 serialized_end=3826, 1423) 1424 1425 1426_UNDELETEROLEREQUEST = _descriptor.Descriptor( 1427 name='UndeleteRoleRequest', 1428 full_name='google.iam.admin.v1.UndeleteRoleRequest', 1429 filename=None, 1430 file=DESCRIPTOR, 1431 containing_type=None, 1432 create_key=_descriptor._internal_create_key, 1433 fields=[ 1434 _descriptor.FieldDescriptor( 1435 name='name', full_name='google.iam.admin.v1.UndeleteRoleRequest.name', index=0, 1436 number=1, type=9, cpp_type=9, label=1, 1437 has_default_value=False, default_value=b"".decode('utf-8'), 1438 message_type=None, enum_type=None, containing_type=None, 1439 is_extension=False, extension_scope=None, 1440 serialized_options=b'\372A\003\n\001*', file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1441 _descriptor.FieldDescriptor( 1442 name='etag', full_name='google.iam.admin.v1.UndeleteRoleRequest.etag', index=1, 1443 number=2, type=12, cpp_type=9, label=1, 1444 has_default_value=False, default_value=b"", 1445 message_type=None, enum_type=None, containing_type=None, 1446 is_extension=False, extension_scope=None, 1447 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1448 ], 1449 extensions=[ 1450 ], 1451 nested_types=[], 1452 enum_types=[ 1453 ], 1454 serialized_options=None, 1455 is_extendable=False, 1456 syntax='proto3', 1457 extension_ranges=[], 1458 oneofs=[ 1459 ], 1460 serialized_start=3828, 1461 serialized_end=3885, 1462) 1463 1464 1465_PERMISSION = _descriptor.Descriptor( 1466 name='Permission', 1467 full_name='google.iam.admin.v1.Permission', 1468 filename=None, 1469 file=DESCRIPTOR, 1470 containing_type=None, 1471 create_key=_descriptor._internal_create_key, 1472 fields=[ 1473 _descriptor.FieldDescriptor( 1474 name='name', full_name='google.iam.admin.v1.Permission.name', index=0, 1475 number=1, type=9, cpp_type=9, label=1, 1476 has_default_value=False, default_value=b"".decode('utf-8'), 1477 message_type=None, enum_type=None, containing_type=None, 1478 is_extension=False, extension_scope=None, 1479 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1480 _descriptor.FieldDescriptor( 1481 name='title', full_name='google.iam.admin.v1.Permission.title', index=1, 1482 number=2, type=9, cpp_type=9, label=1, 1483 has_default_value=False, default_value=b"".decode('utf-8'), 1484 message_type=None, enum_type=None, containing_type=None, 1485 is_extension=False, extension_scope=None, 1486 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1487 _descriptor.FieldDescriptor( 1488 name='description', full_name='google.iam.admin.v1.Permission.description', index=2, 1489 number=3, type=9, cpp_type=9, label=1, 1490 has_default_value=False, default_value=b"".decode('utf-8'), 1491 message_type=None, enum_type=None, containing_type=None, 1492 is_extension=False, extension_scope=None, 1493 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1494 _descriptor.FieldDescriptor( 1495 name='only_in_predefined_roles', full_name='google.iam.admin.v1.Permission.only_in_predefined_roles', index=3, 1496 number=4, type=8, cpp_type=7, label=1, 1497 has_default_value=False, default_value=False, 1498 message_type=None, enum_type=None, containing_type=None, 1499 is_extension=False, extension_scope=None, 1500 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1501 _descriptor.FieldDescriptor( 1502 name='stage', full_name='google.iam.admin.v1.Permission.stage', index=4, 1503 number=5, type=14, cpp_type=8, label=1, 1504 has_default_value=False, default_value=0, 1505 message_type=None, enum_type=None, containing_type=None, 1506 is_extension=False, extension_scope=None, 1507 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1508 _descriptor.FieldDescriptor( 1509 name='custom_roles_support_level', full_name='google.iam.admin.v1.Permission.custom_roles_support_level', index=5, 1510 number=6, type=14, cpp_type=8, label=1, 1511 has_default_value=False, default_value=0, 1512 message_type=None, enum_type=None, containing_type=None, 1513 is_extension=False, extension_scope=None, 1514 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1515 ], 1516 extensions=[ 1517 ], 1518 nested_types=[], 1519 enum_types=[ 1520 _PERMISSION_PERMISSIONLAUNCHSTAGE, 1521 _PERMISSION_CUSTOMROLESSUPPORTLEVEL, 1522 ], 1523 serialized_options=None, 1524 is_extendable=False, 1525 syntax='proto3', 1526 extension_ranges=[], 1527 oneofs=[ 1528 ], 1529 serialized_start=3888, 1530 serialized_end=4291, 1531) 1532 1533 1534_QUERYTESTABLEPERMISSIONSREQUEST = _descriptor.Descriptor( 1535 name='QueryTestablePermissionsRequest', 1536 full_name='google.iam.admin.v1.QueryTestablePermissionsRequest', 1537 filename=None, 1538 file=DESCRIPTOR, 1539 containing_type=None, 1540 create_key=_descriptor._internal_create_key, 1541 fields=[ 1542 _descriptor.FieldDescriptor( 1543 name='full_resource_name', full_name='google.iam.admin.v1.QueryTestablePermissionsRequest.full_resource_name', index=0, 1544 number=1, type=9, cpp_type=9, label=1, 1545 has_default_value=False, default_value=b"".decode('utf-8'), 1546 message_type=None, enum_type=None, containing_type=None, 1547 is_extension=False, extension_scope=None, 1548 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1549 _descriptor.FieldDescriptor( 1550 name='page_size', full_name='google.iam.admin.v1.QueryTestablePermissionsRequest.page_size', index=1, 1551 number=2, type=5, cpp_type=1, label=1, 1552 has_default_value=False, default_value=0, 1553 message_type=None, enum_type=None, containing_type=None, 1554 is_extension=False, extension_scope=None, 1555 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1556 _descriptor.FieldDescriptor( 1557 name='page_token', full_name='google.iam.admin.v1.QueryTestablePermissionsRequest.page_token', index=2, 1558 number=3, type=9, cpp_type=9, label=1, 1559 has_default_value=False, default_value=b"".decode('utf-8'), 1560 message_type=None, enum_type=None, containing_type=None, 1561 is_extension=False, extension_scope=None, 1562 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1563 ], 1564 extensions=[ 1565 ], 1566 nested_types=[], 1567 enum_types=[ 1568 ], 1569 serialized_options=None, 1570 is_extendable=False, 1571 syntax='proto3', 1572 extension_ranges=[], 1573 oneofs=[ 1574 ], 1575 serialized_start=4293, 1576 serialized_end=4393, 1577) 1578 1579 1580_QUERYTESTABLEPERMISSIONSRESPONSE = _descriptor.Descriptor( 1581 name='QueryTestablePermissionsResponse', 1582 full_name='google.iam.admin.v1.QueryTestablePermissionsResponse', 1583 filename=None, 1584 file=DESCRIPTOR, 1585 containing_type=None, 1586 create_key=_descriptor._internal_create_key, 1587 fields=[ 1588 _descriptor.FieldDescriptor( 1589 name='permissions', full_name='google.iam.admin.v1.QueryTestablePermissionsResponse.permissions', index=0, 1590 number=1, type=11, cpp_type=10, label=3, 1591 has_default_value=False, default_value=[], 1592 message_type=None, enum_type=None, containing_type=None, 1593 is_extension=False, extension_scope=None, 1594 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1595 _descriptor.FieldDescriptor( 1596 name='next_page_token', full_name='google.iam.admin.v1.QueryTestablePermissionsResponse.next_page_token', index=1, 1597 number=2, type=9, cpp_type=9, label=1, 1598 has_default_value=False, default_value=b"".decode('utf-8'), 1599 message_type=None, enum_type=None, containing_type=None, 1600 is_extension=False, extension_scope=None, 1601 serialized_options=None, file=DESCRIPTOR, create_key=_descriptor._internal_create_key), 1602 ], 1603 extensions=[ 1604 ], 1605 nested_types=[], 1606 enum_types=[ 1607 ], 1608 serialized_options=None, 1609 is_extendable=False, 1610 syntax='proto3', 1611 extension_ranges=[], 1612 oneofs=[ 1613 ], 1614 serialized_start=4395, 1615 serialized_end=4508, 1616) 1617 1618_CREATESERVICEACCOUNTREQUEST.fields_by_name['service_account'].message_type = _SERVICEACCOUNT 1619_LISTSERVICEACCOUNTSRESPONSE.fields_by_name['accounts'].message_type = _SERVICEACCOUNT 1620_LISTSERVICEACCOUNTKEYSREQUEST.fields_by_name['key_types'].enum_type = _LISTSERVICEACCOUNTKEYSREQUEST_KEYTYPE 1621_LISTSERVICEACCOUNTKEYSREQUEST_KEYTYPE.containing_type = _LISTSERVICEACCOUNTKEYSREQUEST 1622_LISTSERVICEACCOUNTKEYSRESPONSE.fields_by_name['keys'].message_type = _SERVICEACCOUNTKEY 1623_GETSERVICEACCOUNTKEYREQUEST.fields_by_name['public_key_type'].enum_type = _SERVICEACCOUNTPUBLICKEYTYPE 1624_SERVICEACCOUNTKEY.fields_by_name['private_key_type'].enum_type = _SERVICEACCOUNTPRIVATEKEYTYPE 1625_SERVICEACCOUNTKEY.fields_by_name['key_algorithm'].enum_type = _SERVICEACCOUNTKEYALGORITHM 1626_SERVICEACCOUNTKEY.fields_by_name['valid_after_time'].message_type = google_dot_protobuf_dot_timestamp__pb2._TIMESTAMP 1627_SERVICEACCOUNTKEY.fields_by_name['valid_before_time'].message_type = google_dot_protobuf_dot_timestamp__pb2._TIMESTAMP 1628_CREATESERVICEACCOUNTKEYREQUEST.fields_by_name['private_key_type'].enum_type = _SERVICEACCOUNTPRIVATEKEYTYPE 1629_CREATESERVICEACCOUNTKEYREQUEST.fields_by_name['key_algorithm'].enum_type = _SERVICEACCOUNTKEYALGORITHM 1630_ROLE.fields_by_name['stage'].enum_type = _ROLE_ROLELAUNCHSTAGE 1631_ROLE_ROLELAUNCHSTAGE.containing_type = _ROLE 1632_QUERYGRANTABLEROLESREQUEST.fields_by_name['view'].enum_type = _ROLEVIEW 1633_QUERYGRANTABLEROLESRESPONSE.fields_by_name['roles'].message_type = _ROLE 1634_LISTROLESREQUEST.fields_by_name['view'].enum_type = _ROLEVIEW 1635_LISTROLESRESPONSE.fields_by_name['roles'].message_type = _ROLE 1636_CREATEROLEREQUEST.fields_by_name['role'].message_type = _ROLE 1637_UPDATEROLEREQUEST.fields_by_name['role'].message_type = _ROLE 1638_UPDATEROLEREQUEST.fields_by_name['update_mask'].message_type = google_dot_protobuf_dot_field__mask__pb2._FIELDMASK 1639_PERMISSION.fields_by_name['stage'].enum_type = _PERMISSION_PERMISSIONLAUNCHSTAGE 1640_PERMISSION.fields_by_name['custom_roles_support_level'].enum_type = _PERMISSION_CUSTOMROLESSUPPORTLEVEL 1641_PERMISSION_PERMISSIONLAUNCHSTAGE.containing_type = _PERMISSION 1642_PERMISSION_CUSTOMROLESSUPPORTLEVEL.containing_type = _PERMISSION 1643_QUERYTESTABLEPERMISSIONSRESPONSE.fields_by_name['permissions'].message_type = _PERMISSION 1644DESCRIPTOR.message_types_by_name['ServiceAccount'] = _SERVICEACCOUNT 1645DESCRIPTOR.message_types_by_name['CreateServiceAccountRequest'] = _CREATESERVICEACCOUNTREQUEST 1646DESCRIPTOR.message_types_by_name['ListServiceAccountsRequest'] = _LISTSERVICEACCOUNTSREQUEST 1647DESCRIPTOR.message_types_by_name['ListServiceAccountsResponse'] = _LISTSERVICEACCOUNTSRESPONSE 1648DESCRIPTOR.message_types_by_name['GetServiceAccountRequest'] = _GETSERVICEACCOUNTREQUEST 1649DESCRIPTOR.message_types_by_name['DeleteServiceAccountRequest'] = _DELETESERVICEACCOUNTREQUEST 1650DESCRIPTOR.message_types_by_name['ListServiceAccountKeysRequest'] = _LISTSERVICEACCOUNTKEYSREQUEST 1651DESCRIPTOR.message_types_by_name['ListServiceAccountKeysResponse'] = _LISTSERVICEACCOUNTKEYSRESPONSE 1652DESCRIPTOR.message_types_by_name['GetServiceAccountKeyRequest'] = _GETSERVICEACCOUNTKEYREQUEST 1653DESCRIPTOR.message_types_by_name['ServiceAccountKey'] = _SERVICEACCOUNTKEY 1654DESCRIPTOR.message_types_by_name['CreateServiceAccountKeyRequest'] = _CREATESERVICEACCOUNTKEYREQUEST 1655DESCRIPTOR.message_types_by_name['DeleteServiceAccountKeyRequest'] = _DELETESERVICEACCOUNTKEYREQUEST 1656DESCRIPTOR.message_types_by_name['SignBlobRequest'] = _SIGNBLOBREQUEST 1657DESCRIPTOR.message_types_by_name['SignBlobResponse'] = _SIGNBLOBRESPONSE 1658DESCRIPTOR.message_types_by_name['SignJwtRequest'] = _SIGNJWTREQUEST 1659DESCRIPTOR.message_types_by_name['SignJwtResponse'] = _SIGNJWTRESPONSE 1660DESCRIPTOR.message_types_by_name['Role'] = _ROLE 1661DESCRIPTOR.message_types_by_name['QueryGrantableRolesRequest'] = _QUERYGRANTABLEROLESREQUEST 1662DESCRIPTOR.message_types_by_name['QueryGrantableRolesResponse'] = _QUERYGRANTABLEROLESRESPONSE 1663DESCRIPTOR.message_types_by_name['ListRolesRequest'] = _LISTROLESREQUEST 1664DESCRIPTOR.message_types_by_name['ListRolesResponse'] = _LISTROLESRESPONSE 1665DESCRIPTOR.message_types_by_name['GetRoleRequest'] = _GETROLEREQUEST 1666DESCRIPTOR.message_types_by_name['CreateRoleRequest'] = _CREATEROLEREQUEST 1667DESCRIPTOR.message_types_by_name['UpdateRoleRequest'] = _UPDATEROLEREQUEST 1668DESCRIPTOR.message_types_by_name['DeleteRoleRequest'] = _DELETEROLEREQUEST 1669DESCRIPTOR.message_types_by_name['UndeleteRoleRequest'] = _UNDELETEROLEREQUEST 1670DESCRIPTOR.message_types_by_name['Permission'] = _PERMISSION 1671DESCRIPTOR.message_types_by_name['QueryTestablePermissionsRequest'] = _QUERYTESTABLEPERMISSIONSREQUEST 1672DESCRIPTOR.message_types_by_name['QueryTestablePermissionsResponse'] = _QUERYTESTABLEPERMISSIONSRESPONSE 1673DESCRIPTOR.enum_types_by_name['ServiceAccountKeyAlgorithm'] = _SERVICEACCOUNTKEYALGORITHM 1674DESCRIPTOR.enum_types_by_name['ServiceAccountPrivateKeyType'] = _SERVICEACCOUNTPRIVATEKEYTYPE 1675DESCRIPTOR.enum_types_by_name['ServiceAccountPublicKeyType'] = _SERVICEACCOUNTPUBLICKEYTYPE 1676DESCRIPTOR.enum_types_by_name['RoleView'] = _ROLEVIEW 1677_sym_db.RegisterFileDescriptor(DESCRIPTOR) 1678 1679ServiceAccount = _reflection.GeneratedProtocolMessageType('ServiceAccount', (_message.Message,), { 1680 'DESCRIPTOR' : _SERVICEACCOUNT, 1681 '__module__' : 'google.cloud.iam_admin_v1.proto.iam_pb2' 1682 , 1683 '__doc__': """A service account in the Identity and Access Management API. To 1684 create a service account, specify the ``project_id`` and the 1685 ``account_id`` for the account. The ``account_id`` is unique within 1686 the project, and is used to generate the service account email address 1687 and a stable ``unique_id``. If the account already exists, the 1688 account’s resource name is returned in the format of 1689 projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}. The caller can use 1690 the name in other methods to access the account. All other methods 1691 can identify the service account using the format 1692 ``projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}``. Using ``-`` as a 1693 wildcard for the ``PROJECT_ID`` will infer the project from the 1694 account. The ``ACCOUNT`` value can be the ``email`` address or the 1695 ``unique_id`` of the service account. 1696 1697 Attributes: 1698 name: 1699 The resource name of the service account in the following 1700 format: ``projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}``. 1701 Requests using ``-`` as a wildcard for the ``PROJECT_ID`` will 1702 infer the project from the ``account`` and the ``ACCOUNT`` 1703 value can be the ``email`` address or the ``unique_id`` of the 1704 service account. In responses the resource name will always 1705 be in the format 1706 ``projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}``. 1707 project_id: 1708 @OutputOnly The id of the project that owns the service 1709 account. 1710 unique_id: 1711 @OutputOnly The unique and stable id of the service account. 1712 email: 1713 @OutputOnly The email address of the service account. 1714 display_name: 1715 Optional. A user-specified name for the service account. Must 1716 be less than or equal to 100 UTF-8 bytes. 1717 etag: 1718 Optional. Note: ``etag`` is an inoperable legacy field that is 1719 only returned for backwards compatibility. 1720 oauth2_client_id: 1721 @OutputOnly. The OAuth2 client id for the service account. 1722 This is used in conjunction with the OAuth2 clientconfig API 1723 to make three legged OAuth2 (3LO) flows to access the data of 1724 Google users. 1725 """, 1726 # @@protoc_insertion_point(class_scope:google.iam.admin.v1.ServiceAccount) 1727 }) 1728_sym_db.RegisterMessage(ServiceAccount) 1729 1730CreateServiceAccountRequest = _reflection.GeneratedProtocolMessageType('CreateServiceAccountRequest', (_message.Message,), { 1731 'DESCRIPTOR' : _CREATESERVICEACCOUNTREQUEST, 1732 '__module__' : 'google.cloud.iam_admin_v1.proto.iam_pb2' 1733 , 1734 '__doc__': """The service account create request. 1735 1736 Attributes: 1737 name: 1738 Required. The resource name of the project associated with the 1739 service accounts, such as ``projects/my-project-123``. 1740 account_id: 1741 Required. The account id that is used to generate the service 1742 account email address and a stable unique id. It is unique 1743 within a project, must be 6-30 characters long, and match the 1744 regular expression ``[a-z]([-a-z0-9]*[a-z0-9])`` to comply 1745 with RFC1035. 1746 service_account: 1747 The [ServiceAccount][google.iam.admin.v1.ServiceAccount] 1748 resource to create. Currently, only the following values are 1749 user assignable: ``display_name`` and ``description``. 1750 """, 1751 # @@protoc_insertion_point(class_scope:google.iam.admin.v1.CreateServiceAccountRequest) 1752 }) 1753_sym_db.RegisterMessage(CreateServiceAccountRequest) 1754 1755ListServiceAccountsRequest = _reflection.GeneratedProtocolMessageType('ListServiceAccountsRequest', (_message.Message,), { 1756 'DESCRIPTOR' : _LISTSERVICEACCOUNTSREQUEST, 1757 '__module__' : 'google.cloud.iam_admin_v1.proto.iam_pb2' 1758 , 1759 '__doc__': """The service account list request. 1760 1761 Attributes: 1762 name: 1763 Required. The resource name of the project associated with the 1764 service accounts, such as ``projects/my-project-123``. 1765 page_size: 1766 Optional limit on the number of service accounts to include in 1767 the response. Further accounts can subsequently be obtained by 1768 including the [ListServiceAccountsResponse.next_page_token][go 1769 ogle.iam.admin.v1.ListServiceAccountsResponse.next_page_token] 1770 in a subsequent request. 1771 page_token: 1772 Optional pagination token returned in an earlier [ListServiceA 1773 ccountsResponse.next_page_token][google.iam.admin.v1.ListServi 1774 ceAccountsResponse.next_page_token]. 1775 """, 1776 # @@protoc_insertion_point(class_scope:google.iam.admin.v1.ListServiceAccountsRequest) 1777 }) 1778_sym_db.RegisterMessage(ListServiceAccountsRequest) 1779 1780ListServiceAccountsResponse = _reflection.GeneratedProtocolMessageType('ListServiceAccountsResponse', (_message.Message,), { 1781 'DESCRIPTOR' : _LISTSERVICEACCOUNTSRESPONSE, 1782 '__module__' : 'google.cloud.iam_admin_v1.proto.iam_pb2' 1783 , 1784 '__doc__': """The service account list response. 1785 1786 Attributes: 1787 accounts: 1788 The list of matching service accounts. 1789 next_page_token: 1790 To retrieve the next page of results, set [ListServiceAccounts 1791 Request.page_token][google.iam.admin.v1.ListServiceAccountsReq 1792 uest.page_token] to this value. 1793 """, 1794 # @@protoc_insertion_point(class_scope:google.iam.admin.v1.ListServiceAccountsResponse) 1795 }) 1796_sym_db.RegisterMessage(ListServiceAccountsResponse) 1797 1798GetServiceAccountRequest = _reflection.GeneratedProtocolMessageType('GetServiceAccountRequest', (_message.Message,), { 1799 'DESCRIPTOR' : _GETSERVICEACCOUNTREQUEST, 1800 '__module__' : 'google.cloud.iam_admin_v1.proto.iam_pb2' 1801 , 1802 '__doc__': """The service account get request. 1803 1804 Attributes: 1805 name: 1806 Required. The resource name of the service account in the 1807 following format: 1808 ``projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}``. Using 1809 ``-`` as a wildcard for the ``PROJECT_ID`` will infer the 1810 project from the account. The ``ACCOUNT`` value can be the 1811 ``email`` address or the ``unique_id`` of the service account. 1812 """, 1813 # @@protoc_insertion_point(class_scope:google.iam.admin.v1.GetServiceAccountRequest) 1814 }) 1815_sym_db.RegisterMessage(GetServiceAccountRequest) 1816 1817DeleteServiceAccountRequest = _reflection.GeneratedProtocolMessageType('DeleteServiceAccountRequest', (_message.Message,), { 1818 'DESCRIPTOR' : _DELETESERVICEACCOUNTREQUEST, 1819 '__module__' : 'google.cloud.iam_admin_v1.proto.iam_pb2' 1820 , 1821 '__doc__': """The service account delete request. 1822 1823 Attributes: 1824 name: 1825 Required. The resource name of the service account in the 1826 following format: 1827 ``projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}``. Using 1828 ``-`` as a wildcard for the ``PROJECT_ID`` will infer the 1829 project from the account. The ``ACCOUNT`` value can be the 1830 ``email`` address or the ``unique_id`` of the service account. 1831 """, 1832 # @@protoc_insertion_point(class_scope:google.iam.admin.v1.DeleteServiceAccountRequest) 1833 }) 1834_sym_db.RegisterMessage(DeleteServiceAccountRequest) 1835 1836ListServiceAccountKeysRequest = _reflection.GeneratedProtocolMessageType('ListServiceAccountKeysRequest', (_message.Message,), { 1837 'DESCRIPTOR' : _LISTSERVICEACCOUNTKEYSREQUEST, 1838 '__module__' : 'google.cloud.iam_admin_v1.proto.iam_pb2' 1839 , 1840 '__doc__': """The service account keys list request. 1841 1842 Attributes: 1843 name: 1844 Required. The resource name of the service account in the 1845 following format: 1846 ``projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}``. Using 1847 ``-`` as a wildcard for the ``PROJECT_ID``, will infer the 1848 project from the account. The ``ACCOUNT`` value can be the 1849 ``email`` address or the ``unique_id`` of the service account. 1850 key_types: 1851 Filters the types of keys the user wants to include in the 1852 list response. Duplicate key types are not allowed. If no key 1853 type is provided, all keys are returned. 1854 """, 1855 # @@protoc_insertion_point(class_scope:google.iam.admin.v1.ListServiceAccountKeysRequest) 1856 }) 1857_sym_db.RegisterMessage(ListServiceAccountKeysRequest) 1858 1859ListServiceAccountKeysResponse = _reflection.GeneratedProtocolMessageType('ListServiceAccountKeysResponse', (_message.Message,), { 1860 'DESCRIPTOR' : _LISTSERVICEACCOUNTKEYSRESPONSE, 1861 '__module__' : 'google.cloud.iam_admin_v1.proto.iam_pb2' 1862 , 1863 '__doc__': """The service account keys list response. 1864 1865 Attributes: 1866 keys: 1867 The public keys for the service account. 1868 """, 1869 # @@protoc_insertion_point(class_scope:google.iam.admin.v1.ListServiceAccountKeysResponse) 1870 }) 1871_sym_db.RegisterMessage(ListServiceAccountKeysResponse) 1872 1873GetServiceAccountKeyRequest = _reflection.GeneratedProtocolMessageType('GetServiceAccountKeyRequest', (_message.Message,), { 1874 'DESCRIPTOR' : _GETSERVICEACCOUNTKEYREQUEST, 1875 '__module__' : 'google.cloud.iam_admin_v1.proto.iam_pb2' 1876 , 1877 '__doc__': """The service account key get by id request. 1878 1879 Attributes: 1880 name: 1881 Required. The resource name of the service account key in the 1882 following format: ``projects/{PROJECT_ID}/serviceAccounts/{ACC 1883 OUNT}/keys/{key}``. Using ``-`` as a wildcard for the 1884 ``PROJECT_ID`` will infer the project from the account. The 1885 ``ACCOUNT`` value can be the ``email`` address or the 1886 ``unique_id`` of the service account. 1887 public_key_type: 1888 The output format of the public key requested. X509_PEM is the 1889 default output format. 1890 """, 1891 # @@protoc_insertion_point(class_scope:google.iam.admin.v1.GetServiceAccountKeyRequest) 1892 }) 1893_sym_db.RegisterMessage(GetServiceAccountKeyRequest) 1894 1895ServiceAccountKey = _reflection.GeneratedProtocolMessageType('ServiceAccountKey', (_message.Message,), { 1896 'DESCRIPTOR' : _SERVICEACCOUNTKEY, 1897 '__module__' : 'google.cloud.iam_admin_v1.proto.iam_pb2' 1898 , 1899 '__doc__': """Represents a service account key. A service account has two sets of 1900 key-pairs: user-managed, and system-managed. User-managed key-pairs 1901 can be created and deleted by users. Users are responsible for 1902 rotating these keys periodically to ensure security of their service 1903 accounts. Users retain the private key of these key-pairs, and Google 1904 retains ONLY the public key. System-managed keys are automatically 1905 rotated by Google, and are used for signing for a maximum of two 1906 weeks. The rotation process is probabilistic, and usage of the new key 1907 will gradually ramp up and down over the key’s lifetime. We recommend 1908 caching the public key set for a service account for no more than 24 1909 hours to ensure you have access to the latest keys. Public keys for 1910 all service accounts are also published at the OAuth2 Service Account 1911 API. 1912 1913 Attributes: 1914 name: 1915 The resource name of the service account key in the following 1916 format ``projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}/keys/ 1917 {key}``. 1918 private_key_type: 1919 The output format for the private key. Only provided in 1920 ``CreateServiceAccountKey`` responses, not in 1921 ``GetServiceAccountKey`` or ``ListServiceAccountKey`` 1922 responses. Google never exposes system-managed private keys, 1923 and never retains user-managed private keys. 1924 key_algorithm: 1925 Specifies the algorithm (and possibly key size) for the key. 1926 private_key_data: 1927 The private key data. Only provided in 1928 ``CreateServiceAccountKey`` responses. Make sure to keep the 1929 private key data secure because it allows for the assertion of 1930 the service account identity. When base64 decoded, the private 1931 key data can be used to authenticate with Google API client 1932 libraries and with gcloud auth activate-service-account. 1933 public_key_data: 1934 The public key data. Only provided in ``GetServiceAccountKey`` 1935 responses. 1936 valid_after_time: 1937 The key can be used after this timestamp. 1938 valid_before_time: 1939 The key can be used before this timestamp. For system-managed 1940 key pairs, this timestamp is the end time for the private key 1941 signing operation. The public key could still be used for 1942 verification for a few hours after this time. 1943 """, 1944 # @@protoc_insertion_point(class_scope:google.iam.admin.v1.ServiceAccountKey) 1945 }) 1946_sym_db.RegisterMessage(ServiceAccountKey) 1947 1948CreateServiceAccountKeyRequest = _reflection.GeneratedProtocolMessageType('CreateServiceAccountKeyRequest', (_message.Message,), { 1949 'DESCRIPTOR' : _CREATESERVICEACCOUNTKEYREQUEST, 1950 '__module__' : 'google.cloud.iam_admin_v1.proto.iam_pb2' 1951 , 1952 '__doc__': """The service account key create request. 1953 1954 Attributes: 1955 name: 1956 Required. The resource name of the service account in the 1957 following format: 1958 ``projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}``. Using 1959 ``-`` as a wildcard for the ``PROJECT_ID`` will infer the 1960 project from the account. The ``ACCOUNT`` value can be the 1961 ``email`` address or the ``unique_id`` of the service account. 1962 private_key_type: 1963 The output format of the private key. The default value is 1964 ``TYPE_GOOGLE_CREDENTIALS_FILE``, which is the Google 1965 Credentials File format. 1966 key_algorithm: 1967 Which type of key and algorithm to use for the key. The 1968 default is currently a 2K RSA key. However this may change in 1969 the future. 1970 """, 1971 # @@protoc_insertion_point(class_scope:google.iam.admin.v1.CreateServiceAccountKeyRequest) 1972 }) 1973_sym_db.RegisterMessage(CreateServiceAccountKeyRequest) 1974 1975DeleteServiceAccountKeyRequest = _reflection.GeneratedProtocolMessageType('DeleteServiceAccountKeyRequest', (_message.Message,), { 1976 'DESCRIPTOR' : _DELETESERVICEACCOUNTKEYREQUEST, 1977 '__module__' : 'google.cloud.iam_admin_v1.proto.iam_pb2' 1978 , 1979 '__doc__': """The service account key delete request. 1980 1981 Attributes: 1982 name: 1983 Required. The resource name of the service account key in the 1984 following format: ``projects/{PROJECT_ID}/serviceAccounts/{ACC 1985 OUNT}/keys/{key}``. Using ``-`` as a wildcard for the 1986 ``PROJECT_ID`` will infer the project from the account. The 1987 ``ACCOUNT`` value can be the ``email`` address or the 1988 ``unique_id`` of the service account. 1989 """, 1990 # @@protoc_insertion_point(class_scope:google.iam.admin.v1.DeleteServiceAccountKeyRequest) 1991 }) 1992_sym_db.RegisterMessage(DeleteServiceAccountKeyRequest) 1993 1994SignBlobRequest = _reflection.GeneratedProtocolMessageType('SignBlobRequest', (_message.Message,), { 1995 'DESCRIPTOR' : _SIGNBLOBREQUEST, 1996 '__module__' : 'google.cloud.iam_admin_v1.proto.iam_pb2' 1997 , 1998 '__doc__': """The service account sign blob request. 1999 2000 Attributes: 2001 name: 2002 Required. The resource name of the service account in the 2003 following format: 2004 ``projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}``. Using 2005 ``-`` as a wildcard for the ``PROJECT_ID`` will infer the 2006 project from the account. The ``ACCOUNT`` value can be the 2007 ``email`` address or the ``unique_id`` of the service account. 2008 bytes_to_sign: 2009 Required. The bytes to sign. 2010 """, 2011 # @@protoc_insertion_point(class_scope:google.iam.admin.v1.SignBlobRequest) 2012 }) 2013_sym_db.RegisterMessage(SignBlobRequest) 2014 2015SignBlobResponse = _reflection.GeneratedProtocolMessageType('SignBlobResponse', (_message.Message,), { 2016 'DESCRIPTOR' : _SIGNBLOBRESPONSE, 2017 '__module__' : 'google.cloud.iam_admin_v1.proto.iam_pb2' 2018 , 2019 '__doc__': """The service account sign blob response. 2020 2021 Attributes: 2022 key_id: 2023 The id of the key used to sign the blob. 2024 signature: 2025 The signed blob. 2026 """, 2027 # @@protoc_insertion_point(class_scope:google.iam.admin.v1.SignBlobResponse) 2028 }) 2029_sym_db.RegisterMessage(SignBlobResponse) 2030 2031SignJwtRequest = _reflection.GeneratedProtocolMessageType('SignJwtRequest', (_message.Message,), { 2032 'DESCRIPTOR' : _SIGNJWTREQUEST, 2033 '__module__' : 'google.cloud.iam_admin_v1.proto.iam_pb2' 2034 , 2035 '__doc__': """The service account sign JWT request. 2036 2037 Attributes: 2038 name: 2039 Required. The resource name of the service account in the 2040 following format: 2041 ``projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}``. Using 2042 ``-`` as a wildcard for the ``PROJECT_ID`` will infer the 2043 project from the account. The ``ACCOUNT`` value can be the 2044 ``email`` address or the ``unique_id`` of the service account. 2045 payload: 2046 Required. The JWT payload to sign, a JSON JWT Claim set. 2047 """, 2048 # @@protoc_insertion_point(class_scope:google.iam.admin.v1.SignJwtRequest) 2049 }) 2050_sym_db.RegisterMessage(SignJwtRequest) 2051 2052SignJwtResponse = _reflection.GeneratedProtocolMessageType('SignJwtResponse', (_message.Message,), { 2053 'DESCRIPTOR' : _SIGNJWTRESPONSE, 2054 '__module__' : 'google.cloud.iam_admin_v1.proto.iam_pb2' 2055 , 2056 '__doc__': """The service account sign JWT response. 2057 2058 Attributes: 2059 key_id: 2060 The id of the key used to sign the JWT. 2061 signed_jwt: 2062 The signed JWT. 2063 """, 2064 # @@protoc_insertion_point(class_scope:google.iam.admin.v1.SignJwtResponse) 2065 }) 2066_sym_db.RegisterMessage(SignJwtResponse) 2067 2068Role = _reflection.GeneratedProtocolMessageType('Role', (_message.Message,), { 2069 'DESCRIPTOR' : _ROLE, 2070 '__module__' : 'google.cloud.iam_admin_v1.proto.iam_pb2' 2071 , 2072 '__doc__': """A role in the Identity and Access Management API. 2073 2074 Attributes: 2075 name: 2076 The name of the role. When Role is used in CreateRole, the 2077 role name must not be set. When Role is used in output and 2078 other input such as UpdateRole, the role name is the complete 2079 path, e.g., roles/logging.viewer for predefined roles and 2080 organizations/{ORGANIZATION_ID}/roles/logging.viewer for 2081 custom roles. 2082 title: 2083 Optional. A human-readable title for the role. Typically this 2084 is limited to 100 UTF-8 bytes. 2085 description: 2086 Optional. A human-readable description for the role. 2087 included_permissions: 2088 The names of the permissions this role grants when bound in an 2089 IAM policy. 2090 stage: 2091 The current launch stage of the role. If the ``ALPHA`` launch 2092 stage has been selected for a role, the ``stage`` field will 2093 not be included in the returned definition for the role. 2094 etag: 2095 Used to perform a consistent read-modify-write. 2096 deleted: 2097 The current deleted state of the role. This field is read 2098 only. It will be ignored in calls to CreateRole and 2099 UpdateRole. 2100 """, 2101 # @@protoc_insertion_point(class_scope:google.iam.admin.v1.Role) 2102 }) 2103_sym_db.RegisterMessage(Role) 2104 2105QueryGrantableRolesRequest = _reflection.GeneratedProtocolMessageType('QueryGrantableRolesRequest', (_message.Message,), { 2106 'DESCRIPTOR' : _QUERYGRANTABLEROLESREQUEST, 2107 '__module__' : 'google.cloud.iam_admin_v1.proto.iam_pb2' 2108 , 2109 '__doc__': """The grantable role query request. 2110 2111 Attributes: 2112 full_resource_name: 2113 Required. The full resource name to query from the list of 2114 grantable roles. The name follows the Google Cloud Platform 2115 resource format. For example, a Cloud Platform project with id 2116 ``my-project`` will be named 2117 ``//cloudresourcemanager.googleapis.com/projects/my-project``. 2118 page_size: 2119 Optional limit on the number of roles to include in the 2120 response. 2121 page_token: 2122 Optional pagination token returned in an earlier 2123 QueryGrantableRolesResponse. 2124 """, 2125 # @@protoc_insertion_point(class_scope:google.iam.admin.v1.QueryGrantableRolesRequest) 2126 }) 2127_sym_db.RegisterMessage(QueryGrantableRolesRequest) 2128 2129QueryGrantableRolesResponse = _reflection.GeneratedProtocolMessageType('QueryGrantableRolesResponse', (_message.Message,), { 2130 'DESCRIPTOR' : _QUERYGRANTABLEROLESRESPONSE, 2131 '__module__' : 'google.cloud.iam_admin_v1.proto.iam_pb2' 2132 , 2133 '__doc__': """The grantable role query response. 2134 2135 Attributes: 2136 roles: 2137 The list of matching roles. 2138 next_page_token: 2139 To retrieve the next page of results, set 2140 ``QueryGrantableRolesRequest.page_token`` to this value. 2141 """, 2142 # @@protoc_insertion_point(class_scope:google.iam.admin.v1.QueryGrantableRolesResponse) 2143 }) 2144_sym_db.RegisterMessage(QueryGrantableRolesResponse) 2145 2146ListRolesRequest = _reflection.GeneratedProtocolMessageType('ListRolesRequest', (_message.Message,), { 2147 'DESCRIPTOR' : _LISTROLESREQUEST, 2148 '__module__' : 'google.cloud.iam_admin_v1.proto.iam_pb2' 2149 , 2150 '__doc__': """The request to get all roles defined under a resource. 2151 2152 Attributes: 2153 parent: 2154 The ``parent`` parameter’s value depends on the target 2155 resource for the request, namely ```roles`` 2156 </iam/reference/rest/v1/roles>`__, ```projects`` 2157 </iam/reference/rest/v1/projects.roles>`__, or 2158 ```organizations`` 2159 </iam/reference/rest/v1/organizations.roles>`__. Each resource 2160 type’s ``parent`` value format is described below: - 2161 ```roles.list()`` </iam/reference/rest/v1/roles/list>`__: An 2162 empty string. This method doesn’t require a resource; it 2163 simply returns all `predefined roles 2164 </iam/docs/understanding-roles#predefined_roles>`__ in 2165 Cloud IAM. Example request URL: 2166 ``https://iam.googleapis.com/v1/roles`` - 2167 ```projects.roles.list()`` 2168 </iam/reference/rest/v1/projects.roles/list>`__: 2169 ``projects/{PROJECT_ID}``. This method lists all project-level 2170 `custom roles </iam/docs/understanding-custom-roles>`__. 2171 Example request URL: 2172 ``https://iam.googleapis.com/v1/projects/{PROJECT_ID}/roles`` 2173 - ```organizations.roles.list()`` 2174 </iam/reference/rest/v1/organizations.roles/list>`__: 2175 ``organizations/{ORGANIZATION_ID}``. This method lists all 2176 organization-level `custom roles </iam/docs/understanding- 2177 custom-roles>`__. Example request URL: ``https://iam.google 2178 apis.com/v1/organizations/{ORGANIZATION_ID}/roles`` Note: 2179 Wildcard (*) values are invalid; you must specify a complete 2180 project ID or organization ID. 2181 page_size: 2182 Optional limit on the number of roles to include in the 2183 response. 2184 page_token: 2185 Optional pagination token returned in an earlier 2186 ListRolesResponse. 2187 view: 2188 Optional view for the returned Role objects. When ``FULL`` is 2189 specified, the ``includedPermissions`` field is returned, 2190 which includes a list of all permissions in the role. The 2191 default value is ``BASIC``, which does not return the 2192 ``includedPermissions`` field. 2193 show_deleted: 2194 Include Roles that have been deleted. 2195 """, 2196 # @@protoc_insertion_point(class_scope:google.iam.admin.v1.ListRolesRequest) 2197 }) 2198_sym_db.RegisterMessage(ListRolesRequest) 2199 2200ListRolesResponse = _reflection.GeneratedProtocolMessageType('ListRolesResponse', (_message.Message,), { 2201 'DESCRIPTOR' : _LISTROLESRESPONSE, 2202 '__module__' : 'google.cloud.iam_admin_v1.proto.iam_pb2' 2203 , 2204 '__doc__': """The response containing the roles defined under a resource. 2205 2206 Attributes: 2207 roles: 2208 The Roles defined on this resource. 2209 next_page_token: 2210 To retrieve the next page of results, set 2211 ``ListRolesRequest.page_token`` to this value. 2212 """, 2213 # @@protoc_insertion_point(class_scope:google.iam.admin.v1.ListRolesResponse) 2214 }) 2215_sym_db.RegisterMessage(ListRolesResponse) 2216 2217GetRoleRequest = _reflection.GeneratedProtocolMessageType('GetRoleRequest', (_message.Message,), { 2218 'DESCRIPTOR' : _GETROLEREQUEST, 2219 '__module__' : 'google.cloud.iam_admin_v1.proto.iam_pb2' 2220 , 2221 '__doc__': """The request to get the definition of an existing role. 2222 2223 Attributes: 2224 name: 2225 The ``name`` parameter’s value depends on the target resource 2226 for the request, namely ```roles`` 2227 </iam/reference/rest/v1/roles>`__, ```projects`` 2228 </iam/reference/rest/v1/projects.roles>`__, or 2229 ```organizations`` 2230 </iam/reference/rest/v1/organizations.roles>`__. Each resource 2231 type’s ``name`` value format is described below: - 2232 ```roles.get()`` </iam/reference/rest/v1/roles/get>`__: 2233 ``roles/{ROLE_NAME}``. This method returns results from all 2234 `predefined roles </iam/docs/understanding- 2235 roles#predefined_roles>`__ in Cloud IAM. Example request 2236 URL: ``https://iam.googleapis.com/v1/roles/{ROLE_NAME}`` - 2237 ```projects.roles.get()`` 2238 </iam/reference/rest/v1/projects.roles/get>`__: 2239 ``projects/{PROJECT_ID}/roles/{CUSTOM_ROLE_ID}``. This method 2240 returns only `custom roles </iam/docs/understanding-custom- 2241 roles>`__ that have been created at the project level. 2242 Example request URL: ``https://iam.googleapis.com/v1/projec 2243 ts/{PROJECT_ID}/roles/{CUSTOM_ROLE_ID}`` - 2244 ```organizations.roles.get()`` 2245 </iam/reference/rest/v1/organizations.roles/get>`__: 2246 ``organizations/{ORGANIZATION_ID}/roles/{CUSTOM_ROLE_ID}``. 2247 This method returns only `custom roles 2248 </iam/docs/understanding-custom-roles>`__ that have been 2249 created at the organization level. Example request URL: ``h 2250 ttps://iam.googleapis.com/v1/organizations/{ORGANIZATION_ID}/r 2251 oles/{CUSTOM_ROLE_ID}`` Note: Wildcard (*) values are 2252 invalid; you must specify a complete project ID or 2253 organization ID. 2254 """, 2255 # @@protoc_insertion_point(class_scope:google.iam.admin.v1.GetRoleRequest) 2256 }) 2257_sym_db.RegisterMessage(GetRoleRequest) 2258 2259CreateRoleRequest = _reflection.GeneratedProtocolMessageType('CreateRoleRequest', (_message.Message,), { 2260 'DESCRIPTOR' : _CREATEROLEREQUEST, 2261 '__module__' : 'google.cloud.iam_admin_v1.proto.iam_pb2' 2262 , 2263 '__doc__': """The request to create a new role. 2264 2265 Attributes: 2266 parent: 2267 The ``parent`` parameter’s value depends on the target 2268 resource for the request, namely ```projects`` 2269 </iam/reference/rest/v1/projects.roles>`__ or 2270 ```organizations`` 2271 </iam/reference/rest/v1/organizations.roles>`__. Each resource 2272 type’s ``parent`` value format is described below: - 2273 ```projects.roles.create()`` 2274 </iam/reference/rest/v1/projects.roles/create>`__: 2275 ``projects/{PROJECT_ID}``. This method creates project-level 2276 `custom roles </iam/docs/understanding-custom-roles>`__. 2277 Example request URL: 2278 ``https://iam.googleapis.com/v1/projects/{PROJECT_ID}/roles`` 2279 - ```organizations.roles.create()`` 2280 </iam/reference/rest/v1/organizations.roles/create>`__: 2281 ``organizations/{ORGANIZATION_ID}``. This method creates 2282 organization-level `custom roles </iam/docs/understanding- 2283 custom-roles>`__. Example request URL: ``https://iam.google 2284 apis.com/v1/organizations/{ORGANIZATION_ID}/roles`` Note: 2285 Wildcard (*) values are invalid; you must specify a complete 2286 project ID or organization ID. 2287 role_id: 2288 The role ID to use for this role. 2289 role: 2290 The Role resource to create. 2291 """, 2292 # @@protoc_insertion_point(class_scope:google.iam.admin.v1.CreateRoleRequest) 2293 }) 2294_sym_db.RegisterMessage(CreateRoleRequest) 2295 2296UpdateRoleRequest = _reflection.GeneratedProtocolMessageType('UpdateRoleRequest', (_message.Message,), { 2297 'DESCRIPTOR' : _UPDATEROLEREQUEST, 2298 '__module__' : 'google.cloud.iam_admin_v1.proto.iam_pb2' 2299 , 2300 '__doc__': """The request to update a role. 2301 2302 Attributes: 2303 name: 2304 The ``name`` parameter’s value depends on the target resource 2305 for the request, namely ```projects`` 2306 </iam/reference/rest/v1/projects.roles>`__ or 2307 ```organizations`` 2308 </iam/reference/rest/v1/organizations.roles>`__. Each resource 2309 type’s ``name`` value format is described below: - 2310 ```projects.roles.patch()`` 2311 </iam/reference/rest/v1/projects.roles/patch>`__: 2312 ``projects/{PROJECT_ID}/roles/{CUSTOM_ROLE_ID}``. This method 2313 updates only `custom roles </iam/docs/understanding-custom- 2314 roles>`__ that have been created at the project level. 2315 Example request URL: ``https://iam.googleapis.com/v1/projec 2316 ts/{PROJECT_ID}/roles/{CUSTOM_ROLE_ID}`` - 2317 ```organizations.roles.patch()`` 2318 </iam/reference/rest/v1/organizations.roles/patch>`__: 2319 ``organizations/{ORGANIZATION_ID}/roles/{CUSTOM_ROLE_ID}``. 2320 This method updates only `custom roles 2321 </iam/docs/understanding-custom-roles>`__ that have been 2322 created at the organization level. Example request URL: ``h 2323 ttps://iam.googleapis.com/v1/organizations/{ORGANIZATION_ID}/r 2324 oles/{CUSTOM_ROLE_ID}`` Note: Wildcard (*) values are 2325 invalid; you must specify a complete project ID or 2326 organization ID. 2327 role: 2328 The updated role. 2329 update_mask: 2330 A mask describing which fields in the Role have changed. 2331 """, 2332 # @@protoc_insertion_point(class_scope:google.iam.admin.v1.UpdateRoleRequest) 2333 }) 2334_sym_db.RegisterMessage(UpdateRoleRequest) 2335 2336DeleteRoleRequest = _reflection.GeneratedProtocolMessageType('DeleteRoleRequest', (_message.Message,), { 2337 'DESCRIPTOR' : _DELETEROLEREQUEST, 2338 '__module__' : 'google.cloud.iam_admin_v1.proto.iam_pb2' 2339 , 2340 '__doc__': """The request to delete an existing role. 2341 2342 Attributes: 2343 name: 2344 The ``name`` parameter’s value depends on the target resource 2345 for the request, namely ```projects`` 2346 </iam/reference/rest/v1/projects.roles>`__ or 2347 ```organizations`` 2348 </iam/reference/rest/v1/organizations.roles>`__. Each resource 2349 type’s ``name`` value format is described below: - 2350 ```projects.roles.delete()`` 2351 </iam/reference/rest/v1/projects.roles/delete>`__: 2352 ``projects/{PROJECT_ID}/roles/{CUSTOM_ROLE_ID}``. This method 2353 deletes only `custom roles </iam/docs/understanding-custom- 2354 roles>`__ that have been created at the project level. 2355 Example request URL: ``https://iam.googleapis.com/v1/projec 2356 ts/{PROJECT_ID}/roles/{CUSTOM_ROLE_ID}`` - 2357 ```organizations.roles.delete()`` 2358 </iam/reference/rest/v1/organizations.roles/delete>`__: 2359 ``organizations/{ORGANIZATION_ID}/roles/{CUSTOM_ROLE_ID}``. 2360 This method deletes only `custom roles 2361 </iam/docs/understanding-custom-roles>`__ that have been 2362 created at the organization level. Example request URL: ``h 2363 ttps://iam.googleapis.com/v1/organizations/{ORGANIZATION_ID}/r 2364 oles/{CUSTOM_ROLE_ID}`` Note: Wildcard (*) values are 2365 invalid; you must specify a complete project ID or 2366 organization ID. 2367 etag: 2368 Used to perform a consistent read-modify-write. 2369 """, 2370 # @@protoc_insertion_point(class_scope:google.iam.admin.v1.DeleteRoleRequest) 2371 }) 2372_sym_db.RegisterMessage(DeleteRoleRequest) 2373 2374UndeleteRoleRequest = _reflection.GeneratedProtocolMessageType('UndeleteRoleRequest', (_message.Message,), { 2375 'DESCRIPTOR' : _UNDELETEROLEREQUEST, 2376 '__module__' : 'google.cloud.iam_admin_v1.proto.iam_pb2' 2377 , 2378 '__doc__': """The request to undelete an existing role. 2379 2380 Attributes: 2381 name: 2382 The ``name`` parameter’s value depends on the target resource 2383 for the request, namely ```projects`` 2384 </iam/reference/rest/v1/projects.roles>`__ or 2385 ```organizations`` 2386 </iam/reference/rest/v1/organizations.roles>`__. Each resource 2387 type’s ``name`` value format is described below: - 2388 ```projects.roles.undelete()`` 2389 </iam/reference/rest/v1/projects.roles/undelete>`__: 2390 ``projects/{PROJECT_ID}/roles/{CUSTOM_ROLE_ID}``. This method 2391 undeletes only `custom roles </iam/docs/understanding- 2392 custom-roles>`__ that have been created at the project 2393 level. Example request URL: ``https://iam.googleapis.com/v1 2394 /projects/{PROJECT_ID}/roles/{CUSTOM_ROLE_ID}`` - 2395 ```organizations.roles.undelete()`` 2396 </iam/reference/rest/v1/organizations.roles/undelete>`__: 2397 ``organizations/{ORGANIZATION_ID}/roles/{CUSTOM_ROLE_ID}``. 2398 This method undeletes only `custom roles 2399 </iam/docs/understanding-custom-roles>`__ that have been 2400 created at the organization level. Example request URL: ``h 2401 ttps://iam.googleapis.com/v1/organizations/{ORGANIZATION_ID}/r 2402 oles/{CUSTOM_ROLE_ID}`` Note: Wildcard (*) values are 2403 invalid; you must specify a complete project ID or 2404 organization ID. 2405 etag: 2406 Used to perform a consistent read-modify-write. 2407 """, 2408 # @@protoc_insertion_point(class_scope:google.iam.admin.v1.UndeleteRoleRequest) 2409 }) 2410_sym_db.RegisterMessage(UndeleteRoleRequest) 2411 2412Permission = _reflection.GeneratedProtocolMessageType('Permission', (_message.Message,), { 2413 'DESCRIPTOR' : _PERMISSION, 2414 '__module__' : 'google.cloud.iam_admin_v1.proto.iam_pb2' 2415 , 2416 '__doc__': """A permission which can be included by a role. 2417 2418 Attributes: 2419 name: 2420 The name of this Permission. 2421 title: 2422 The title of this Permission. 2423 description: 2424 A brief description of what this Permission is used for. This 2425 permission can ONLY be used in predefined roles. 2426 only_in_predefined_roles: 2427 This permission can ONLY be used in predefined roles. 2428 stage: 2429 The current launch stage of the permission. 2430 custom_roles_support_level: 2431 The current custom role support level. 2432 """, 2433 # @@protoc_insertion_point(class_scope:google.iam.admin.v1.Permission) 2434 }) 2435_sym_db.RegisterMessage(Permission) 2436 2437QueryTestablePermissionsRequest = _reflection.GeneratedProtocolMessageType('QueryTestablePermissionsRequest', (_message.Message,), { 2438 'DESCRIPTOR' : _QUERYTESTABLEPERMISSIONSREQUEST, 2439 '__module__' : 'google.cloud.iam_admin_v1.proto.iam_pb2' 2440 , 2441 '__doc__': """A request to get permissions which can be tested on a resource. 2442 2443 Attributes: 2444 full_resource_name: 2445 Required. The full resource name to query from the list of 2446 testable permissions. The name follows the Google Cloud 2447 Platform resource format. For example, a Cloud Platform 2448 project with id ``my-project`` will be named 2449 ``//cloudresourcemanager.googleapis.com/projects/my-project``. 2450 page_size: 2451 Optional limit on the number of permissions to include in the 2452 response. 2453 page_token: 2454 Optional pagination token returned in an earlier 2455 QueryTestablePermissionsRequest. 2456 """, 2457 # @@protoc_insertion_point(class_scope:google.iam.admin.v1.QueryTestablePermissionsRequest) 2458 }) 2459_sym_db.RegisterMessage(QueryTestablePermissionsRequest) 2460 2461QueryTestablePermissionsResponse = _reflection.GeneratedProtocolMessageType('QueryTestablePermissionsResponse', (_message.Message,), { 2462 'DESCRIPTOR' : _QUERYTESTABLEPERMISSIONSRESPONSE, 2463 '__module__' : 'google.cloud.iam_admin_v1.proto.iam_pb2' 2464 , 2465 '__doc__': """The response containing permissions which can be tested on a resource. 2466 2467 Attributes: 2468 permissions: 2469 The Permissions testable on the requested resource. 2470 next_page_token: 2471 To retrieve the next page of results, set 2472 ``QueryTestableRolesRequest.page_token`` to this value. 2473 """, 2474 # @@protoc_insertion_point(class_scope:google.iam.admin.v1.QueryTestablePermissionsResponse) 2475 }) 2476_sym_db.RegisterMessage(QueryTestablePermissionsResponse) 2477 2478 2479DESCRIPTOR._options = None 2480_SERVICEACCOUNT._options = None 2481_CREATESERVICEACCOUNTREQUEST.fields_by_name['name']._options = None 2482_CREATESERVICEACCOUNTREQUEST.fields_by_name['account_id']._options = None 2483_LISTSERVICEACCOUNTSREQUEST.fields_by_name['name']._options = None 2484_GETSERVICEACCOUNTREQUEST.fields_by_name['name']._options = None 2485_DELETESERVICEACCOUNTREQUEST.fields_by_name['name']._options = None 2486_LISTSERVICEACCOUNTKEYSREQUEST.fields_by_name['name']._options = None 2487_GETSERVICEACCOUNTKEYREQUEST.fields_by_name['name']._options = None 2488_SERVICEACCOUNTKEY._options = None 2489_CREATESERVICEACCOUNTKEYREQUEST.fields_by_name['name']._options = None 2490_DELETESERVICEACCOUNTKEYREQUEST.fields_by_name['name']._options = None 2491_SIGNBLOBREQUEST.fields_by_name['name']._options = None 2492_SIGNBLOBREQUEST.fields_by_name['bytes_to_sign']._options = None 2493_SIGNJWTREQUEST.fields_by_name['name']._options = None 2494_SIGNJWTREQUEST.fields_by_name['payload']._options = None 2495_QUERYGRANTABLEROLESREQUEST.fields_by_name['full_resource_name']._options = None 2496_LISTROLESREQUEST.fields_by_name['parent']._options = None 2497_GETROLEREQUEST.fields_by_name['name']._options = None 2498_CREATEROLEREQUEST.fields_by_name['parent']._options = None 2499_UPDATEROLEREQUEST.fields_by_name['name']._options = None 2500_DELETEROLEREQUEST.fields_by_name['name']._options = None 2501_UNDELETEROLEREQUEST.fields_by_name['name']._options = None 2502 2503_IAM = _descriptor.ServiceDescriptor( 2504 name='IAM', 2505 full_name='google.iam.admin.v1.IAM', 2506 file=DESCRIPTOR, 2507 index=0, 2508 serialized_options=b'\312A\022iam.googleapis.com\322A.https://www.googleapis.com/auth/cloud-platform', 2509 create_key=_descriptor._internal_create_key, 2510 serialized_start=4848, 2511 serialized_end=8820, 2512 methods=[ 2513 _descriptor.MethodDescriptor( 2514 name='ListServiceAccounts', 2515 full_name='google.iam.admin.v1.IAM.ListServiceAccounts', 2516 index=0, 2517 containing_service=None, 2518 input_type=_LISTSERVICEACCOUNTSREQUEST, 2519 output_type=_LISTSERVICEACCOUNTSRESPONSE, 2520 serialized_options=b'\202\323\344\223\002\'\022%/v1/{name=projects/*}/serviceAccounts\332A\004name', 2521 create_key=_descriptor._internal_create_key, 2522 ), 2523 _descriptor.MethodDescriptor( 2524 name='GetServiceAccount', 2525 full_name='google.iam.admin.v1.IAM.GetServiceAccount', 2526 index=1, 2527 containing_service=None, 2528 input_type=_GETSERVICEACCOUNTREQUEST, 2529 output_type=_SERVICEACCOUNT, 2530 serialized_options=b'\202\323\344\223\002)\022\'/v1/{name=projects/*/serviceAccounts/*}\332A\004name', 2531 create_key=_descriptor._internal_create_key, 2532 ), 2533 _descriptor.MethodDescriptor( 2534 name='CreateServiceAccount', 2535 full_name='google.iam.admin.v1.IAM.CreateServiceAccount', 2536 index=2, 2537 containing_service=None, 2538 input_type=_CREATESERVICEACCOUNTREQUEST, 2539 output_type=_SERVICEACCOUNT, 2540 serialized_options=b'\202\323\344\223\002*\"%/v1/{name=projects/*}/serviceAccounts:\001*\332A\037name,account_id,service_account', 2541 create_key=_descriptor._internal_create_key, 2542 ), 2543 _descriptor.MethodDescriptor( 2544 name='UpdateServiceAccount', 2545 full_name='google.iam.admin.v1.IAM.UpdateServiceAccount', 2546 index=3, 2547 containing_service=None, 2548 input_type=_SERVICEACCOUNT, 2549 output_type=_SERVICEACCOUNT, 2550 serialized_options=b'\202\323\344\223\002,\032\'/v1/{name=projects/*/serviceAccounts/*}:\001*', 2551 create_key=_descriptor._internal_create_key, 2552 ), 2553 _descriptor.MethodDescriptor( 2554 name='DeleteServiceAccount', 2555 full_name='google.iam.admin.v1.IAM.DeleteServiceAccount', 2556 index=4, 2557 containing_service=None, 2558 input_type=_DELETESERVICEACCOUNTREQUEST, 2559 output_type=google_dot_protobuf_dot_empty__pb2._EMPTY, 2560 serialized_options=b'\202\323\344\223\002)*\'/v1/{name=projects/*/serviceAccounts/*}\332A\004name', 2561 create_key=_descriptor._internal_create_key, 2562 ), 2563 _descriptor.MethodDescriptor( 2564 name='ListServiceAccountKeys', 2565 full_name='google.iam.admin.v1.IAM.ListServiceAccountKeys', 2566 index=5, 2567 containing_service=None, 2568 input_type=_LISTSERVICEACCOUNTKEYSREQUEST, 2569 output_type=_LISTSERVICEACCOUNTKEYSRESPONSE, 2570 serialized_options=b'\202\323\344\223\002.\022,/v1/{name=projects/*/serviceAccounts/*}/keys\332A\016name,key_types', 2571 create_key=_descriptor._internal_create_key, 2572 ), 2573 _descriptor.MethodDescriptor( 2574 name='GetServiceAccountKey', 2575 full_name='google.iam.admin.v1.IAM.GetServiceAccountKey', 2576 index=6, 2577 containing_service=None, 2578 input_type=_GETSERVICEACCOUNTKEYREQUEST, 2579 output_type=_SERVICEACCOUNTKEY, 2580 serialized_options=b'\202\323\344\223\0020\022./v1/{name=projects/*/serviceAccounts/*/keys/*}\332A\024name,public_key_type', 2581 create_key=_descriptor._internal_create_key, 2582 ), 2583 _descriptor.MethodDescriptor( 2584 name='CreateServiceAccountKey', 2585 full_name='google.iam.admin.v1.IAM.CreateServiceAccountKey', 2586 index=7, 2587 containing_service=None, 2588 input_type=_CREATESERVICEACCOUNTKEYREQUEST, 2589 output_type=_SERVICEACCOUNTKEY, 2590 serialized_options=b'\202\323\344\223\0021\",/v1/{name=projects/*/serviceAccounts/*}/keys:\001*\332A#name,private_key_type,key_algorithm', 2591 create_key=_descriptor._internal_create_key, 2592 ), 2593 _descriptor.MethodDescriptor( 2594 name='DeleteServiceAccountKey', 2595 full_name='google.iam.admin.v1.IAM.DeleteServiceAccountKey', 2596 index=8, 2597 containing_service=None, 2598 input_type=_DELETESERVICEACCOUNTKEYREQUEST, 2599 output_type=google_dot_protobuf_dot_empty__pb2._EMPTY, 2600 serialized_options=b'\202\323\344\223\0020*./v1/{name=projects/*/serviceAccounts/*/keys/*}\332A\004name', 2601 create_key=_descriptor._internal_create_key, 2602 ), 2603 _descriptor.MethodDescriptor( 2604 name='SignBlob', 2605 full_name='google.iam.admin.v1.IAM.SignBlob', 2606 index=9, 2607 containing_service=None, 2608 input_type=_SIGNBLOBREQUEST, 2609 output_type=_SIGNBLOBRESPONSE, 2610 serialized_options=b'\202\323\344\223\0025\"0/v1/{name=projects/*/serviceAccounts/*}:signBlob:\001*\332A\022name,bytes_to_sign', 2611 create_key=_descriptor._internal_create_key, 2612 ), 2613 _descriptor.MethodDescriptor( 2614 name='SignJwt', 2615 full_name='google.iam.admin.v1.IAM.SignJwt', 2616 index=10, 2617 containing_service=None, 2618 input_type=_SIGNJWTREQUEST, 2619 output_type=_SIGNJWTRESPONSE, 2620 serialized_options=b'\202\323\344\223\0024\"//v1/{name=projects/*/serviceAccounts/*}:signJwt:\001*\332A\014name,payload', 2621 create_key=_descriptor._internal_create_key, 2622 ), 2623 _descriptor.MethodDescriptor( 2624 name='GetIamPolicy', 2625 full_name='google.iam.admin.v1.IAM.GetIamPolicy', 2626 index=11, 2627 containing_service=None, 2628 input_type=google_dot_iam_dot_v1_dot_iam__policy__pb2._GETIAMPOLICYREQUEST, 2629 output_type=google_dot_iam_dot_v1_dot_policy__pb2._POLICY, 2630 serialized_options=b'\202\323\344\223\002:\"8/v1/{resource=projects/*/serviceAccounts/*}:getIamPolicy\332A\010resource', 2631 create_key=_descriptor._internal_create_key, 2632 ), 2633 _descriptor.MethodDescriptor( 2634 name='SetIamPolicy', 2635 full_name='google.iam.admin.v1.IAM.SetIamPolicy', 2636 index=12, 2637 containing_service=None, 2638 input_type=google_dot_iam_dot_v1_dot_iam__policy__pb2._SETIAMPOLICYREQUEST, 2639 output_type=google_dot_iam_dot_v1_dot_policy__pb2._POLICY, 2640 serialized_options=b'\202\323\344\223\002=\"8/v1/{resource=projects/*/serviceAccounts/*}:setIamPolicy:\001*\332A\017resource,policy', 2641 create_key=_descriptor._internal_create_key, 2642 ), 2643 _descriptor.MethodDescriptor( 2644 name='TestIamPermissions', 2645 full_name='google.iam.admin.v1.IAM.TestIamPermissions', 2646 index=13, 2647 containing_service=None, 2648 input_type=google_dot_iam_dot_v1_dot_iam__policy__pb2._TESTIAMPERMISSIONSREQUEST, 2649 output_type=google_dot_iam_dot_v1_dot_iam__policy__pb2._TESTIAMPERMISSIONSRESPONSE, 2650 serialized_options=b'\202\323\344\223\002C\">/v1/{resource=projects/*/serviceAccounts/*}:testIamPermissions:\001*\332A\024resource,permissions', 2651 create_key=_descriptor._internal_create_key, 2652 ), 2653 _descriptor.MethodDescriptor( 2654 name='QueryGrantableRoles', 2655 full_name='google.iam.admin.v1.IAM.QueryGrantableRoles', 2656 index=14, 2657 containing_service=None, 2658 input_type=_QUERYGRANTABLEROLESREQUEST, 2659 output_type=_QUERYGRANTABLEROLESRESPONSE, 2660 serialized_options=b'\202\323\344\223\002\"\"\035/v1/roles:queryGrantableRoles:\001*\332A\022full_resource_name', 2661 create_key=_descriptor._internal_create_key, 2662 ), 2663 _descriptor.MethodDescriptor( 2664 name='ListRoles', 2665 full_name='google.iam.admin.v1.IAM.ListRoles', 2666 index=15, 2667 containing_service=None, 2668 input_type=_LISTROLESREQUEST, 2669 output_type=_LISTROLESRESPONSE, 2670 serialized_options=b'\202\323\344\223\002R\022\t/v1/rolesZ$\022\"/v1/{parent=organizations/*}/rolesZ\037\022\035/v1/{parent=projects/*}/roles', 2671 create_key=_descriptor._internal_create_key, 2672 ), 2673 _descriptor.MethodDescriptor( 2674 name='GetRole', 2675 full_name='google.iam.admin.v1.IAM.GetRole', 2676 index=16, 2677 containing_service=None, 2678 input_type=_GETROLEREQUEST, 2679 output_type=_ROLE, 2680 serialized_options=b'\202\323\344\223\002[\022\022/v1/{name=roles/*}Z$\022\"/v1/{name=organizations/*/roles/*}Z\037\022\035/v1/{name=projects/*/roles/*}', 2681 create_key=_descriptor._internal_create_key, 2682 ), 2683 _descriptor.MethodDescriptor( 2684 name='CreateRole', 2685 full_name='google.iam.admin.v1.IAM.CreateRole', 2686 index=17, 2687 containing_service=None, 2688 input_type=_CREATEROLEREQUEST, 2689 output_type=_ROLE, 2690 serialized_options=b'\202\323\344\223\002K\"\"/v1/{parent=organizations/*}/roles:\001*Z\"\"\035/v1/{parent=projects/*}/roles:\001*', 2691 create_key=_descriptor._internal_create_key, 2692 ), 2693 _descriptor.MethodDescriptor( 2694 name='UpdateRole', 2695 full_name='google.iam.admin.v1.IAM.UpdateRole', 2696 index=18, 2697 containing_service=None, 2698 input_type=_UPDATEROLEREQUEST, 2699 output_type=_ROLE, 2700 serialized_options=b'\202\323\344\223\002Q2\"/v1/{name=organizations/*/roles/*}:\004roleZ%2\035/v1/{name=projects/*/roles/*}:\004role', 2701 create_key=_descriptor._internal_create_key, 2702 ), 2703 _descriptor.MethodDescriptor( 2704 name='DeleteRole', 2705 full_name='google.iam.admin.v1.IAM.DeleteRole', 2706 index=19, 2707 containing_service=None, 2708 input_type=_DELETEROLEREQUEST, 2709 output_type=_ROLE, 2710 serialized_options=b'\202\323\344\223\002E*\"/v1/{name=organizations/*/roles/*}Z\037*\035/v1/{name=projects/*/roles/*}', 2711 create_key=_descriptor._internal_create_key, 2712 ), 2713 _descriptor.MethodDescriptor( 2714 name='UndeleteRole', 2715 full_name='google.iam.admin.v1.IAM.UndeleteRole', 2716 index=20, 2717 containing_service=None, 2718 input_type=_UNDELETEROLEREQUEST, 2719 output_type=_ROLE, 2720 serialized_options=b'\202\323\344\223\002]\"+/v1/{name=organizations/*/roles/*}:undelete:\001*Z+\"&/v1/{name=projects/*/roles/*}:undelete:\001*', 2721 create_key=_descriptor._internal_create_key, 2722 ), 2723 _descriptor.MethodDescriptor( 2724 name='QueryTestablePermissions', 2725 full_name='google.iam.admin.v1.IAM.QueryTestablePermissions', 2726 index=21, 2727 containing_service=None, 2728 input_type=_QUERYTESTABLEPERMISSIONSREQUEST, 2729 output_type=_QUERYTESTABLEPERMISSIONSRESPONSE, 2730 serialized_options=b'\202\323\344\223\002-\"(/v1/permissions:queryTestablePermissions:\001*', 2731 create_key=_descriptor._internal_create_key, 2732 ), 2733]) 2734_sym_db.RegisterServiceDescriptor(_IAM) 2735 2736DESCRIPTOR.services_by_name['IAM'] = _IAM 2737 2738# @@protoc_insertion_point(module_scope) 2739