Lines Matching full:policy
79 <p class="firstline">Clears a `Policy` from a resource.</p>
82 <p class="firstline">Gets the effective `Policy` on a resource. This is the result of merging</p>
85 <p class="firstline">Gets a `Policy` on a resource.</p>
100 <p class="firstline">Updates the specified `Policy` on the resource. Creates a new `Policy` for</p>
104 <pre>Clears a `Policy` from a resource.
107 resource: string, Name of the resource for the `Policy` to clear. (required)
113 # will cause the `Policy` to be cleared blindly.
114 "constraint": "A String", # Name of the `Constraint` of the `Policy` to clear.
139 <pre>Gets the effective `Policy` on a resource. This is the result of merging
140 `Policies` in the resource hierarchy. The returned `Policy` will not have
141 an `etag`set because it is a computed `Policy` across multiple resources.
146 resource: string, The name of the resource to start computing the effective `Policy`. (required)
151 "constraint": "A String", # The name of the `Constraint` to compute the effective `Policy`.
162 { # Defines a Cloud Organization `Policy` which is used to specify `Constraints`
164 … "updateTime": "A String", # The time stamp the `Policy` was previously updated. This is set by the
166 # `SetOrgPolicy` was made for that `Policy`. Any value set by the client will
168 "version": 42, # Version of the `Policy`. Default version is 0;
169 … "constraint": "A String", # The name of the `Constraint` the `Policy` is configuring, for example,
180 # foo.com sets a `Policy` at their Organization resource node that restricts
182 # could then set a `Policy` with the `policy_type` `restore_default` on
204 # `denied_values` in the same `Policy` if `all_values` is
208 "allValues": "A String", # The policy all_values state.
213 "inheritFromParent": True or False, # Determines the inheritance behavior for this `Policy`.
215 # By default, a `ListPolicy` set at a resource supercedes any `Policy` set
217 # set to `true`, then the values from the effective `Policy` of the parent
218 # resource are inherited, meaning the values set in this `Policy` are
221 # Setting `Policy` hierarchies that inherit both allowed values and denied
223 # simple and understandable. However, it is possible to set a `Policy` with
224 # `allowed_values` set that inherits a `Policy` with `denied_values` set.
231 # Suppose that at the Organization level, a `Policy` is applied that
233 # `Policy` is applied to a project below the Organization that has
241 # `organizations/foo` has a `Policy` with values:
249 # `organizations/foo` has a `Policy` with values:
251 # `projects/bar` has a `Policy` with values:
257 # `organizations/foo` has a `Policy` with values:
259 # `projects/bar` has a `Policy` with:
265 # `organizations/foo` has a `Policy` with values:
267 # `projects/bar` has a `Policy` with values:
274 # Example 5 (no policy inherits parent policy):
275 # `organizations/foo` has no `Policy` set.
276 # `projects/bar` has no `Policy` set.
282 # `organizations/foo` has a `Policy` with values:
284 # `projects/bar` has a `Policy` with:
290 # `organizations/foo` has a `Policy` with values:
292 # `projects/bar` has a `Policy` with:
300 # `organizations/foo` has a `Policy` with values:
302 # `projects/bar` has a `Policy` with:
311 # that matches the value specified in this `Policy`. If `suggested_value`
321 "enforced": True or False, # If `true`, then the `Policy` is enforced. If `false`, then any
326 # set to `ALLOW`. A `Policy` for that `Constraint` exhibits the following
328 # - If the `Policy` at this resource has enforced set to `false`, serial
330 # - If the `Policy` at this resource has enforced set to `true`, serial
332 # - If the `Policy` at this resource is `RestoreDefault`, serial port
334 # - If no `Policy` is set at this resource or anywhere higher in the
336 # - If no `Policy` is set at this resource, but one exists higher in the
337 # resource hierarchy, the behavior is as if the`Policy` were set at
343 # `organizations/foo` has a `Policy` with:
345 # `projects/bar` has no `Policy` set.
350 # `organizations/foo` has a `Policy` with:
352 # `projects/bar` has a `Policy` with:
358 # `organizations/foo` has a `Policy` with:
360 # `projects/bar` has a `Policy` with:
366 "etag": "A String", # An opaque tag indicating the current version of the `Policy`, used for
369 # When the `Policy` is returned from either a `GetPolicy` or a
371 # `Policy` to use when executing a read-modify-write loop.
373 # When the `Policy` is returned from a `GetEffectivePolicy` request, the
376 # When the `Policy` is used in a `SetOrgPolicy` method, use the `etag` value
380 # `Policy`.
386 <pre>Gets a `Policy` on a resource.
388 If no `Policy` is set on the resource, a `Policy` is returned with default
391 `Policy` during read-modify-write.
394 resource: string, Name of the resource the `Policy` is set on. (required)
399 "constraint": "A String", # Name of the `Constraint` to get the `Policy`.
410 { # Defines a Cloud Organization `Policy` which is used to specify `Constraints`
412 … "updateTime": "A String", # The time stamp the `Policy` was previously updated. This is set by the
414 # `SetOrgPolicy` was made for that `Policy`. Any value set by the client will
416 "version": 42, # Version of the `Policy`. Default version is 0;
417 … "constraint": "A String", # The name of the `Constraint` the `Policy` is configuring, for example,
428 # foo.com sets a `Policy` at their Organization resource node that restricts
430 # could then set a `Policy` with the `policy_type` `restore_default` on
452 # `denied_values` in the same `Policy` if `all_values` is
456 "allValues": "A String", # The policy all_values state.
461 "inheritFromParent": True or False, # Determines the inheritance behavior for this `Policy`.
463 # By default, a `ListPolicy` set at a resource supercedes any `Policy` set
465 # set to `true`, then the values from the effective `Policy` of the parent
466 # resource are inherited, meaning the values set in this `Policy` are
469 # Setting `Policy` hierarchies that inherit both allowed values and denied
471 # simple and understandable. However, it is possible to set a `Policy` with
472 # `allowed_values` set that inherits a `Policy` with `denied_values` set.
479 # Suppose that at the Organization level, a `Policy` is applied that
481 # `Policy` is applied to a project below the Organization that has
489 # `organizations/foo` has a `Policy` with values:
497 # `organizations/foo` has a `Policy` with values:
499 # `projects/bar` has a `Policy` with values:
505 # `organizations/foo` has a `Policy` with values:
507 # `projects/bar` has a `Policy` with:
513 # `organizations/foo` has a `Policy` with values:
515 # `projects/bar` has a `Policy` with values:
522 # Example 5 (no policy inherits parent policy):
523 # `organizations/foo` has no `Policy` set.
524 # `projects/bar` has no `Policy` set.
530 # `organizations/foo` has a `Policy` with values:
532 # `projects/bar` has a `Policy` with:
538 # `organizations/foo` has a `Policy` with values:
540 # `projects/bar` has a `Policy` with:
548 # `organizations/foo` has a `Policy` with values:
550 # `projects/bar` has a `Policy` with:
559 # that matches the value specified in this `Policy`. If `suggested_value`
569 "enforced": True or False, # If `true`, then the `Policy` is enforced. If `false`, then any
574 # set to `ALLOW`. A `Policy` for that `Constraint` exhibits the following
576 # - If the `Policy` at this resource has enforced set to `false`, serial
578 # - If the `Policy` at this resource has enforced set to `true`, serial
580 # - If the `Policy` at this resource is `RestoreDefault`, serial port
582 # - If no `Policy` is set at this resource or anywhere higher in the
584 # - If no `Policy` is set at this resource, but one exists higher in the
585 # resource hierarchy, the behavior is as if the`Policy` were set at
591 # `organizations/foo` has a `Policy` with:
593 # `projects/bar` has no `Policy` set.
598 # `organizations/foo` has a `Policy` with:
600 # `projects/bar` has a `Policy` with:
606 # `organizations/foo` has a `Policy` with:
608 # `projects/bar` has a `Policy` with:
614 "etag": "A String", # An opaque tag indicating the current version of the `Policy`, used for
617 # When the `Policy` is returned from either a `GetPolicy` or a
619 # `Policy` to use when executing a read-modify-write loop.
621 # When the `Policy` is returned from a `GetEffectivePolicy` request, the
624 # When the `Policy` is used in a `SetOrgPolicy` method, use the `etag` value
628 # `Policy`.
668 # organization's policy adminstrator to fit the needs of the organzation by
677 # `Policy` being defined or inherited for the resource in question.
678 …raintDefault": "A String", # The evaluation behavior of this constraint in the absense of 'Policy'.
692 # configured by an Organization's policy administrator with a `Policy`.
694 # can be used in `Policy.allowed_values` and `Policy.denied_values`. For
754 { # Defines a Cloud Organization `Policy` which is used to specify `Constraints`
756 … "updateTime": "A String", # The time stamp the `Policy` was previously updated. This is set by the
758 # `SetOrgPolicy` was made for that `Policy`. Any value set by the client will
760 "version": 42, # Version of the `Policy`. Default version is 0;
761 … "constraint": "A String", # The name of the `Constraint` the `Policy` is configuring, for example,
772 # foo.com sets a `Policy` at their Organization resource node that restricts
774 # could then set a `Policy` with the `policy_type` `restore_default` on
796 # `denied_values` in the same `Policy` if `all_values` is
800 "allValues": "A String", # The policy all_values state.
805 … "inheritFromParent": True or False, # Determines the inheritance behavior for this `Policy`.
807 # By default, a `ListPolicy` set at a resource supercedes any `Policy` set
809 # set to `true`, then the values from the effective `Policy` of the parent
810 # resource are inherited, meaning the values set in this `Policy` are
813 # Setting `Policy` hierarchies that inherit both allowed values and denied
815 # simple and understandable. However, it is possible to set a `Policy` with
816 # `allowed_values` set that inherits a `Policy` with `denied_values` set.
823 # Suppose that at the Organization level, a `Policy` is applied that
825 # `Policy` is applied to a project below the Organization that has
833 # `organizations/foo` has a `Policy` with values:
841 # `organizations/foo` has a `Policy` with values:
843 # `projects/bar` has a `Policy` with values:
849 # `organizations/foo` has a `Policy` with values:
851 # `projects/bar` has a `Policy` with:
857 # `organizations/foo` has a `Policy` with values:
859 # `projects/bar` has a `Policy` with values:
866 # Example 5 (no policy inherits parent policy):
867 # `organizations/foo` has no `Policy` set.
868 # `projects/bar` has no `Policy` set.
874 # `organizations/foo` has a `Policy` with values:
876 # `projects/bar` has a `Policy` with:
882 # `organizations/foo` has a `Policy` with values:
884 # `projects/bar` has a `Policy` with:
892 # `organizations/foo` has a `Policy` with values:
894 # `projects/bar` has a `Policy` with:
903 # that matches the value specified in this `Policy`. If `suggested_value`
913 … "enforced": True or False, # If `true`, then the `Policy` is enforced. If `false`, then any
918 # set to `ALLOW`. A `Policy` for that `Constraint` exhibits the following
920 # - If the `Policy` at this resource has enforced set to `false`, serial
922 # - If the `Policy` at this resource has enforced set to `true`, serial
924 # - If the `Policy` at this resource is `RestoreDefault`, serial port
926 # - If no `Policy` is set at this resource or anywhere higher in the
928 # - If no `Policy` is set at this resource, but one exists higher in the
929 # resource hierarchy, the behavior is as if the`Policy` were set at
935 # `organizations/foo` has a `Policy` with:
937 # `projects/bar` has no `Policy` set.
942 # `organizations/foo` has a `Policy` with:
944 # `projects/bar` has a `Policy` with:
950 # `organizations/foo` has a `Policy` with:
952 # `projects/bar` has a `Policy` with:
958 "etag": "A String", # An opaque tag indicating the current version of the `Policy`, used for
961 # When the `Policy` is returned from either a `GetPolicy` or a
963 # `Policy` to use when executing a read-modify-write loop.
965 # When the `Policy` is returned from a `GetEffectivePolicy` request, the
968 # When the `Policy` is used in a `SetOrgPolicy` method, use the `etag` value
972 # `Policy`.
994 <pre>Updates the specified `Policy` on the resource. Creates a new `Policy` for
997 Not supplying an `etag` on the request `Policy` results in an unconditional
998 write of the `Policy`.
1001 resource: string, Resource name of the resource to attach the `Policy`. (required)
1006 …"policy": { # Defines a Cloud Organization `Policy` which is used to specify `Constraints` # `Poli…
1008 … "updateTime": "A String", # The time stamp the `Policy` was previously updated. This is set by the
1010 # `SetOrgPolicy` was made for that `Policy`. Any value set by the client will
1012 "version": 42, # Version of the `Policy`. Default version is 0;
1013 … "constraint": "A String", # The name of the `Constraint` the `Policy` is configuring, for example,
1024 # foo.com sets a `Policy` at their Organization resource node that restricts
1026 # could then set a `Policy` with the `policy_type` `restore_default` on
1048 # `denied_values` in the same `Policy` if `all_values` is
1052 "allValues": "A String", # The policy all_values state.
1057 "inheritFromParent": True or False, # Determines the inheritance behavior for this `Policy`.
1059 # By default, a `ListPolicy` set at a resource supercedes any `Policy` set
1061 # set to `true`, then the values from the effective `Policy` of the parent
1062 # resource are inherited, meaning the values set in this `Policy` are
1065 # Setting `Policy` hierarchies that inherit both allowed values and denied
1067 # simple and understandable. However, it is possible to set a `Policy` with
1068 # `allowed_values` set that inherits a `Policy` with `denied_values` set.
1075 # Suppose that at the Organization level, a `Policy` is applied that
1077 # `Policy` is applied to a project below the Organization that has
1085 # `organizations/foo` has a `Policy` with values:
1093 # `organizations/foo` has a `Policy` with values:
1095 # `projects/bar` has a `Policy` with values:
1101 # `organizations/foo` has a `Policy` with values:
1103 # `projects/bar` has a `Policy` with:
1109 # `organizations/foo` has a `Policy` with values:
1111 # `projects/bar` has a `Policy` with values:
1118 # Example 5 (no policy inherits parent policy):
1119 # `organizations/foo` has no `Policy` set.
1120 # `projects/bar` has no `Policy` set.
1126 # `organizations/foo` has a `Policy` with values:
1128 # `projects/bar` has a `Policy` with:
1134 # `organizations/foo` has a `Policy` with values:
1136 # `projects/bar` has a `Policy` with:
1144 # `organizations/foo` has a `Policy` with values:
1146 # `projects/bar` has a `Policy` with:
1155 # that matches the value specified in this `Policy`. If `suggested_value`
1165 "enforced": True or False, # If `true`, then the `Policy` is enforced. If `false`, then any
1170 # set to `ALLOW`. A `Policy` for that `Constraint` exhibits the following
1172 # - If the `Policy` at this resource has enforced set to `false`, serial
1174 # - If the `Policy` at this resource has enforced set to `true`, serial
1176 # - If the `Policy` at this resource is `RestoreDefault`, serial port
1178 # - If no `Policy` is set at this resource or anywhere higher in the
1180 # - If no `Policy` is set at this resource, but one exists higher in the
1181 # resource hierarchy, the behavior is as if the`Policy` were set at
1187 # `organizations/foo` has a `Policy` with:
1189 # `projects/bar` has no `Policy` set.
1194 # `organizations/foo` has a `Policy` with:
1196 # `projects/bar` has a `Policy` with:
1202 # `organizations/foo` has a `Policy` with:
1204 # `projects/bar` has a `Policy` with:
1210 "etag": "A String", # An opaque tag indicating the current version of the `Policy`, used for
1213 # When the `Policy` is returned from either a `GetPolicy` or a
1215 # `Policy` to use when executing a read-modify-write loop.
1217 # When the `Policy` is returned from a `GetEffectivePolicy` request, the
1220 # When the `Policy` is used in a `SetOrgPolicy` method, use the `etag` value
1224 # `Policy`.
1236 { # Defines a Cloud Organization `Policy` which is used to specify `Constraints`
1238 … "updateTime": "A String", # The time stamp the `Policy` was previously updated. This is set by the
1240 # `SetOrgPolicy` was made for that `Policy`. Any value set by the client will
1242 "version": 42, # Version of the `Policy`. Default version is 0;
1243 … "constraint": "A String", # The name of the `Constraint` the `Policy` is configuring, for example,
1254 # foo.com sets a `Policy` at their Organization resource node that restricts
1256 # could then set a `Policy` with the `policy_type` `restore_default` on
1278 # `denied_values` in the same `Policy` if `all_values` is
1282 "allValues": "A String", # The policy all_values state.
1287 "inheritFromParent": True or False, # Determines the inheritance behavior for this `Policy`.
1289 # By default, a `ListPolicy` set at a resource supercedes any `Policy` set
1291 # set to `true`, then the values from the effective `Policy` of the parent
1292 # resource are inherited, meaning the values set in this `Policy` are
1295 # Setting `Policy` hierarchies that inherit both allowed values and denied
1297 # simple and understandable. However, it is possible to set a `Policy` with
1298 # `allowed_values` set that inherits a `Policy` with `denied_values` set.
1305 # Suppose that at the Organization level, a `Policy` is applied that
1307 # `Policy` is applied to a project below the Organization that has
1315 # `organizations/foo` has a `Policy` with values:
1323 # `organizations/foo` has a `Policy` with values:
1325 # `projects/bar` has a `Policy` with values:
1331 # `organizations/foo` has a `Policy` with values:
1333 # `projects/bar` has a `Policy` with:
1339 # `organizations/foo` has a `Policy` with values:
1341 # `projects/bar` has a `Policy` with values:
1348 # Example 5 (no policy inherits parent policy):
1349 # `organizations/foo` has no `Policy` set.
1350 # `projects/bar` has no `Policy` set.
1356 # `organizations/foo` has a `Policy` with values:
1358 # `projects/bar` has a `Policy` with:
1364 # `organizations/foo` has a `Policy` with values:
1366 # `projects/bar` has a `Policy` with:
1374 # `organizations/foo` has a `Policy` with values:
1376 # `projects/bar` has a `Policy` with:
1385 # that matches the value specified in this `Policy`. If `suggested_value`
1395 "enforced": True or False, # If `true`, then the `Policy` is enforced. If `false`, then any
1400 # set to `ALLOW`. A `Policy` for that `Constraint` exhibits the following
1402 # - If the `Policy` at this resource has enforced set to `false`, serial
1404 # - If the `Policy` at this resource has enforced set to `true`, serial
1406 # - If the `Policy` at this resource is `RestoreDefault`, serial port
1408 # - If no `Policy` is set at this resource or anywhere higher in the
1410 # - If no `Policy` is set at this resource, but one exists higher in the
1411 # resource hierarchy, the behavior is as if the`Policy` were set at
1417 # `organizations/foo` has a `Policy` with:
1419 # `projects/bar` has no `Policy` set.
1424 # `organizations/foo` has a `Policy` with:
1426 # `projects/bar` has a `Policy` with:
1432 # `organizations/foo` has a `Policy` with:
1434 # `projects/bar` has a `Policy` with:
1440 "etag": "A String", # An opaque tag indicating the current version of the `Policy`, used for
1443 # When the `Policy` is returned from either a `GetPolicy` or a
1445 # `Policy` to use when executing a read-modify-write loop.
1447 # When the `Policy` is returned from a `GetEffectivePolicy` request, the
1450 # When the `Policy` is used in a `SetOrgPolicy` method, use the `etag` value
1454 # `Policy`.