1<html><body>
2<style>
3
4body, h1, h2, h3, div, span, p, pre, a {
5  margin: 0;
6  padding: 0;
7  border: 0;
8  font-weight: inherit;
9  font-style: inherit;
10  font-size: 100%;
11  font-family: inherit;
12  vertical-align: baseline;
13}
14
15body {
16  font-size: 13px;
17  padding: 1em;
18}
19
20h1 {
21  font-size: 26px;
22  margin-bottom: 1em;
23}
24
25h2 {
26  font-size: 24px;
27  margin-bottom: 1em;
28}
29
30h3 {
31  font-size: 20px;
32  margin-bottom: 1em;
33  margin-top: 1em;
34}
35
36pre, code {
37  line-height: 1.5;
38  font-family: Monaco, 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', 'Lucida Console', monospace;
39}
40
41pre {
42  margin-top: 0.5em;
43}
44
45h1, h2, h3, p {
46  font-family: Arial, sans serif;
47}
48
49h1, h2, h3 {
50  border-bottom: solid #CCC 1px;
51}
52
53.toc_element {
54  margin-top: 0.5em;
55}
56
57.firstline {
58  margin-left: 2 em;
59}
60
61.method  {
62  margin-top: 1em;
63  border: solid 1px #CCC;
64  padding: 1em;
65  background: #EEE;
66}
67
68.details {
69  font-weight: bold;
70  font-size: 14px;
71}
72
73</style>
74
75<h1><a href="cloudresourcemanager_v2beta1.html">Cloud Resource Manager API</a> . <a href="cloudresourcemanager_v2beta1.folders.html">folders</a></h1>
76<h2>Instance Methods</h2>
77<p class="toc_element">
78  <code><a href="#create">create(body, parent=None, x__xgafv=None)</a></code></p>
79<p class="firstline">Creates a Folder in the resource hierarchy.</p>
80<p class="toc_element">
81  <code><a href="#delete">delete(name, x__xgafv=None)</a></code></p>
82<p class="firstline">Requests deletion of a Folder. The Folder is moved into the</p>
83<p class="toc_element">
84  <code><a href="#get">get(name, x__xgafv=None)</a></code></p>
85<p class="firstline">Retrieves a Folder identified by the supplied resource name.</p>
86<p class="toc_element">
87  <code><a href="#getIamPolicy">getIamPolicy(resource, body=None, x__xgafv=None)</a></code></p>
88<p class="firstline">Gets the access control policy for a Folder. The returned policy may be</p>
89<p class="toc_element">
90  <code><a href="#list">list(parent=None, showDeleted=None, pageToken=None, x__xgafv=None, pageSize=None)</a></code></p>
91<p class="firstline">Lists the Folders that are direct descendants of supplied parent resource.</p>
92<p class="toc_element">
93  <code><a href="#list_next">list_next(previous_request, previous_response)</a></code></p>
94<p class="firstline">Retrieves the next page of results.</p>
95<p class="toc_element">
96  <code><a href="#move">move(name, body, x__xgafv=None)</a></code></p>
97<p class="firstline">Moves a Folder under a new resource parent.</p>
98<p class="toc_element">
99  <code><a href="#patch">patch(name, body, updateMask=None, x__xgafv=None)</a></code></p>
100<p class="firstline">Updates a Folder, changing its display_name.</p>
101<p class="toc_element">
102  <code><a href="#search">search(body, x__xgafv=None)</a></code></p>
103<p class="firstline">Search for folders that match specific filter criteria.</p>
104<p class="toc_element">
105  <code><a href="#search_next">search_next(previous_request, previous_response)</a></code></p>
106<p class="firstline">Retrieves the next page of results.</p>
107<p class="toc_element">
108  <code><a href="#setIamPolicy">setIamPolicy(resource, body, x__xgafv=None)</a></code></p>
109<p class="firstline">Sets the access control policy on a Folder, replacing any existing policy.</p>
110<p class="toc_element">
111  <code><a href="#testIamPermissions">testIamPermissions(resource, body, x__xgafv=None)</a></code></p>
112<p class="firstline">Returns permissions that a caller has on the specified Folder.</p>
113<p class="toc_element">
114  <code><a href="#undelete">undelete(name, body=None, x__xgafv=None)</a></code></p>
115<p class="firstline">Cancels the deletion request for a Folder. This method may only be</p>
116<h3>Method Details</h3>
117<div class="method">
118    <code class="details" id="create">create(body, parent=None, x__xgafv=None)</code>
119  <pre>Creates a Folder in the resource hierarchy.
120Returns an Operation which can be used to track the progress of the
121folder creation workflow.
122Upon success the Operation.response field will be populated with the
123created Folder.
124
125In order to succeed, the addition of this new Folder must not violate
126the Folder naming, height or fanout constraints.
127
128+ The Folder's display_name must be distinct from all other Folder's that
129share its parent.
130+ The addition of the Folder must not cause the active Folder hierarchy
131to exceed a height of 4. Note, the full active + deleted Folder hierarchy
132is allowed to reach a height of 8; this provides additional headroom when
133moving folders that contain deleted folders.
134+ The addition of the Folder must not cause the total number of Folders
135under its parent to exceed 100.
136
137If the operation fails due to a folder constraint violation, some errors
138may be returned by the CreateFolder request, with status code
139FAILED_PRECONDITION and an error description. Other folder constraint
140violations will be communicated in the Operation, with the specific
141PreconditionFailure returned via the details list in the Operation.error
142field.
143
144The caller must have `resourcemanager.folders.create` permission on the
145identified parent.
146
147Args:
148  body: object, The request body. (required)
149    The object takes the form of:
150
151{ # A Folder in an Organization's resource hierarchy, used to
152    # organize that Organization's resources.
153  "name": "A String", # Output only. The resource name of the Folder.
154      # Its format is `folders/{folder_id}`, for example: "folders/1234".
155  "displayName": "A String", # The folder’s display name.
156      # A folder’s display name must be unique amongst its siblings, e.g.
157      # no two folders with the same parent can share the same display name.
158      # The display name must start and end with a letter or digit, may contain
159      # letters, digits, spaces, hyphens and underscores and can be no longer
160      # than 30 characters. This is captured by the regular expression:
161      # [\p{L}\p{N}]([\p{L}\p{N}_- ]{0,28}[\p{L}\p{N}])?.
162  "createTime": "A String", # Output only. Timestamp when the Folder was created. Assigned by the server.
163  "parent": "A String", # The Folder’s parent's resource name.
164      # Updates to the folder's parent must be performed via
165      # MoveFolder.
166  "lifecycleState": "A String", # Output only.  The lifecycle state of the folder.
167      # Updates to the lifecycle_state must be performed via
168      # DeleteFolder and
169      # UndeleteFolder.
170}
171
172  parent: string, The resource name of the new Folder's parent.
173Must be of the form `folders/{folder_id}` or `organizations/{org_id}`.
174  x__xgafv: string, V1 error format.
175    Allowed values
176      1 - v1 error format
177      2 - v2 error format
178
179Returns:
180  An object of the form:
181
182    { # This resource represents a long-running operation that is the result of a
183      # network API call.
184    "response": { # The normal response of the operation in case of success.  If the original
185        # method returns no data on success, such as `Delete`, the response is
186        # `google.protobuf.Empty`.  If the original method is standard
187        # `Get`/`Create`/`Update`, the response should be the resource.  For other
188        # methods, the response should have the type `XxxResponse`, where `Xxx`
189        # is the original method name.  For example, if the original method name
190        # is `TakeSnapshot()`, the inferred response type is
191        # `TakeSnapshotResponse`.
192      "a_key": "", # Properties of the object. Contains field @type with type URL.
193    },
194    "metadata": { # Service-specific metadata associated with the operation.  It typically
195        # contains progress information and common metadata such as create time.
196        # Some services might not provide such metadata.  Any method that returns a
197        # long-running operation should document the metadata type, if any.
198      "a_key": "", # Properties of the object. Contains field @type with type URL.
199    },
200    "done": True or False, # If the value is `false`, it means the operation is still in progress.
201        # If `true`, the operation is completed, and either `error` or `response` is
202        # available.
203    "name": "A String", # The server-assigned name, which is only unique within the same service that
204        # originally returns it. If you use the default HTTP mapping, the
205        # `name` should be a resource name ending with `operations/{unique_id}`.
206    "error": { # The `Status` type defines a logical error model that is suitable for # The error result of the operation in case of failure or cancellation.
207        # different programming environments, including REST APIs and RPC APIs. It is
208        # used by [gRPC](https://github.com/grpc). Each `Status` message contains
209        # three pieces of data: error code, error message, and error details.
210        #
211        # You can find out more about this error model and how to work with it in the
212        # [API Design Guide](https://cloud.google.com/apis/design/errors).
213      "message": "A String", # A developer-facing error message, which should be in English. Any
214          # user-facing error message should be localized and sent in the
215          # google.rpc.Status.details field, or localized by the client.
216      "code": 42, # The status code, which should be an enum value of google.rpc.Code.
217      "details": [ # A list of messages that carry the error details.  There is a common set of
218          # message types for APIs to use.
219        {
220          "a_key": "", # Properties of the object. Contains field @type with type URL.
221        },
222      ],
223    },
224  }</pre>
225</div>
226
227<div class="method">
228    <code class="details" id="delete">delete(name, x__xgafv=None)</code>
229  <pre>Requests deletion of a Folder. The Folder is moved into the
230DELETE_REQUESTED state
231immediately, and is deleted approximately 30 days later. This method may
232only be called on an empty Folder in the
233ACTIVE state, where a Folder is empty if
234it doesn't contain any Folders or Projects in the
235ACTIVE state.
236The caller must have `resourcemanager.folders.delete` permission on the
237identified folder.
238
239Args:
240  name: string, the resource name of the Folder to be deleted.
241Must be of the form `folders/{folder_id}`. (required)
242  x__xgafv: string, V1 error format.
243    Allowed values
244      1 - v1 error format
245      2 - v2 error format
246
247Returns:
248  An object of the form:
249
250    { # A Folder in an Organization's resource hierarchy, used to
251      # organize that Organization's resources.
252    "name": "A String", # Output only. The resource name of the Folder.
253        # Its format is `folders/{folder_id}`, for example: "folders/1234".
254    "displayName": "A String", # The folder’s display name.
255        # A folder’s display name must be unique amongst its siblings, e.g.
256        # no two folders with the same parent can share the same display name.
257        # The display name must start and end with a letter or digit, may contain
258        # letters, digits, spaces, hyphens and underscores and can be no longer
259        # than 30 characters. This is captured by the regular expression:
260        # [\p{L}\p{N}]([\p{L}\p{N}_- ]{0,28}[\p{L}\p{N}])?.
261    "createTime": "A String", # Output only. Timestamp when the Folder was created. Assigned by the server.
262    "parent": "A String", # The Folder’s parent's resource name.
263        # Updates to the folder's parent must be performed via
264        # MoveFolder.
265    "lifecycleState": "A String", # Output only.  The lifecycle state of the folder.
266        # Updates to the lifecycle_state must be performed via
267        # DeleteFolder and
268        # UndeleteFolder.
269  }</pre>
270</div>
271
272<div class="method">
273    <code class="details" id="get">get(name, x__xgafv=None)</code>
274  <pre>Retrieves a Folder identified by the supplied resource name.
275Valid Folder resource names have the format `folders/{folder_id}`
276(for example, `folders/1234`).
277The caller must have `resourcemanager.folders.get` permission on the
278identified folder.
279
280Args:
281  name: string, The resource name of the Folder to retrieve.
282Must be of the form `folders/{folder_id}`. (required)
283  x__xgafv: string, V1 error format.
284    Allowed values
285      1 - v1 error format
286      2 - v2 error format
287
288Returns:
289  An object of the form:
290
291    { # A Folder in an Organization's resource hierarchy, used to
292      # organize that Organization's resources.
293    "name": "A String", # Output only. The resource name of the Folder.
294        # Its format is `folders/{folder_id}`, for example: "folders/1234".
295    "displayName": "A String", # The folder’s display name.
296        # A folder’s display name must be unique amongst its siblings, e.g.
297        # no two folders with the same parent can share the same display name.
298        # The display name must start and end with a letter or digit, may contain
299        # letters, digits, spaces, hyphens and underscores and can be no longer
300        # than 30 characters. This is captured by the regular expression:
301        # [\p{L}\p{N}]([\p{L}\p{N}_- ]{0,28}[\p{L}\p{N}])?.
302    "createTime": "A String", # Output only. Timestamp when the Folder was created. Assigned by the server.
303    "parent": "A String", # The Folder’s parent's resource name.
304        # Updates to the folder's parent must be performed via
305        # MoveFolder.
306    "lifecycleState": "A String", # Output only.  The lifecycle state of the folder.
307        # Updates to the lifecycle_state must be performed via
308        # DeleteFolder and
309        # UndeleteFolder.
310  }</pre>
311</div>
312
313<div class="method">
314    <code class="details" id="getIamPolicy">getIamPolicy(resource, body=None, x__xgafv=None)</code>
315  <pre>Gets the access control policy for a Folder. The returned policy may be
316empty if no such policy or resource exists. The `resource` field should
317be the Folder's resource name, e.g. "folders/1234".
318The caller must have `resourcemanager.folders.getIamPolicy` permission
319on the identified folder.
320
321Args:
322  resource: string, REQUIRED: The resource for which the policy is being requested.
323See the operation documentation for the appropriate value for this field. (required)
324  body: object, The request body.
325    The object takes the form of:
326
327{ # Request message for `GetIamPolicy` method.
328  }
329
330  x__xgafv: string, V1 error format.
331    Allowed values
332      1 - v1 error format
333      2 - v2 error format
334
335Returns:
336  An object of the form:
337
338    { # Defines an Identity and Access Management (IAM) policy. It is used to
339      # specify access control policies for Cloud Platform resources.
340      #
341      #
342      # A `Policy` consists of a list of `bindings`. A `binding` binds a list of
343      # `members` to a `role`, where the members can be user accounts, Google groups,
344      # Google domains, and service accounts. A `role` is a named list of permissions
345      # defined by IAM.
346      #
347      # **JSON Example**
348      #
349      #     {
350      #       "bindings": [
351      #         {
352      #           "role": "roles/owner",
353      #           "members": [
354      #             "user:mike@example.com",
355      #             "group:admins@example.com",
356      #             "domain:google.com",
357      #             "serviceAccount:my-other-app@appspot.gserviceaccount.com"
358      #           ]
359      #         },
360      #         {
361      #           "role": "roles/viewer",
362      #           "members": ["user:sean@example.com"]
363      #         }
364      #       ]
365      #     }
366      #
367      # **YAML Example**
368      #
369      #     bindings:
370      #     - members:
371      #       - user:mike@example.com
372      #       - group:admins@example.com
373      #       - domain:google.com
374      #       - serviceAccount:my-other-app@appspot.gserviceaccount.com
375      #       role: roles/owner
376      #     - members:
377      #       - user:sean@example.com
378      #       role: roles/viewer
379      #
380      #
381      # For a description of IAM and its features, see the
382      # [IAM developer's guide](https://cloud.google.com/iam/docs).
383    "auditConfigs": [ # Specifies cloud audit logging configuration for this policy.
384      { # Specifies the audit configuration for a service.
385          # The configuration determines which permission types are logged, and what
386          # identities, if any, are exempted from logging.
387          # An AuditConfig must have one or more AuditLogConfigs.
388          #
389          # If there are AuditConfigs for both `allServices` and a specific service,
390          # the union of the two AuditConfigs is used for that service: the log_types
391          # specified in each AuditConfig are enabled, and the exempted_members in each
392          # AuditLogConfig are exempted.
393          #
394          # Example Policy with multiple AuditConfigs:
395          #
396          #     {
397          #       "audit_configs": [
398          #         {
399          #           "service": "allServices"
400          #           "audit_log_configs": [
401          #             {
402          #               "log_type": "DATA_READ",
403          #               "exempted_members": [
404          #                 "user:foo@gmail.com"
405          #               ]
406          #             },
407          #             {
408          #               "log_type": "DATA_WRITE",
409          #             },
410          #             {
411          #               "log_type": "ADMIN_READ",
412          #             }
413          #           ]
414          #         },
415          #         {
416          #           "service": "fooservice.googleapis.com"
417          #           "audit_log_configs": [
418          #             {
419          #               "log_type": "DATA_READ",
420          #             },
421          #             {
422          #               "log_type": "DATA_WRITE",
423          #               "exempted_members": [
424          #                 "user:bar@gmail.com"
425          #               ]
426          #             }
427          #           ]
428          #         }
429          #       ]
430          #     }
431          #
432          # For fooservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ
433          # logging. It also exempts foo@gmail.com from DATA_READ logging, and
434          # bar@gmail.com from DATA_WRITE logging.
435        "auditLogConfigs": [ # The configuration for logging of each type of permission.
436          { # Provides the configuration for logging a type of permissions.
437              # Example:
438              #
439              #     {
440              #       "audit_log_configs": [
441              #         {
442              #           "log_type": "DATA_READ",
443              #           "exempted_members": [
444              #             "user:foo@gmail.com"
445              #           ]
446              #         },
447              #         {
448              #           "log_type": "DATA_WRITE",
449              #         }
450              #       ]
451              #     }
452              #
453              # This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting
454              # foo@gmail.com from DATA_READ logging.
455            "exemptedMembers": [ # Specifies the identities that do not cause logging for this type of
456                # permission.
457                # Follows the same format of Binding.members.
458              "A String",
459            ],
460            "logType": "A String", # The log type that this config enables.
461          },
462        ],
463        "service": "A String", # Specifies a service that will be enabled for audit logging.
464            # For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
465            # `allServices` is a special value that covers all services.
466      },
467    ],
468    "version": 42, # Deprecated.
469    "bindings": [ # Associates a list of `members` to a `role`.
470        # `bindings` with no members will result in an error.
471      { # Associates `members` with a `role`.
472        "role": "A String", # Role that is assigned to `members`.
473            # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
474        "condition": { # Represents an expression text. Example: # The condition that is associated with this binding.
475            # NOTE: An unsatisfied condition will not allow user access via current
476            # binding. Different bindings, including their conditions, are examined
477            # independently.
478            #
479            #     title: "User account presence"
480            #     description: "Determines whether the request has a user account"
481            #     expression: "size(request.user) > 0"
482          "location": "A String", # An optional string indicating the location of the expression for error
483              # reporting, e.g. a file name and a position in the file.
484          "expression": "A String", # Textual representation of an expression in
485              # Common Expression Language syntax.
486              #
487              # The application context of the containing message determines which
488              # well-known feature set of CEL is supported.
489          "description": "A String", # An optional description of the expression. This is a longer text which
490              # describes the expression, e.g. when hovered over it in a UI.
491          "title": "A String", # An optional title for the expression, i.e. a short string describing
492              # its purpose. This can be used e.g. in UIs which allow to enter the
493              # expression.
494        },
495        "members": [ # Specifies the identities requesting access for a Cloud Platform resource.
496            # `members` can have the following values:
497            #
498            # * `allUsers`: A special identifier that represents anyone who is
499            #    on the internet; with or without a Google account.
500            #
501            # * `allAuthenticatedUsers`: A special identifier that represents anyone
502            #    who is authenticated with a Google account or a service account.
503            #
504            # * `user:{emailid}`: An email address that represents a specific Google
505            #    account. For example, `alice@gmail.com` .
506            #
507            #
508            # * `serviceAccount:{emailid}`: An email address that represents a service
509            #    account. For example, `my-other-app@appspot.gserviceaccount.com`.
510            #
511            # * `group:{emailid}`: An email address that represents a Google group.
512            #    For example, `admins@example.com`.
513            #
514            #
515            # * `domain:{domain}`: The G Suite domain (primary) that represents all the
516            #    users of that domain. For example, `google.com` or `example.com`.
517            #
518          "A String",
519        ],
520      },
521    ],
522    "etag": "A String", # `etag` is used for optimistic concurrency control as a way to help
523        # prevent simultaneous updates of a policy from overwriting each other.
524        # It is strongly suggested that systems make use of the `etag` in the
525        # read-modify-write cycle to perform policy updates in order to avoid race
526        # conditions: An `etag` is returned in the response to `getIamPolicy`, and
527        # systems are expected to put that etag in the request to `setIamPolicy` to
528        # ensure that their change will be applied to the same version of the policy.
529        #
530        # If no `etag` is provided in the call to `setIamPolicy`, then the existing
531        # policy is overwritten blindly.
532  }</pre>
533</div>
534
535<div class="method">
536    <code class="details" id="list">list(parent=None, showDeleted=None, pageToken=None, x__xgafv=None, pageSize=None)</code>
537  <pre>Lists the Folders that are direct descendants of supplied parent resource.
538List provides a strongly consistent view of the Folders underneath
539the specified parent resource.
540List returns Folders sorted based upon the (ascending) lexical ordering
541of their display_name.
542The caller must have `resourcemanager.folders.list` permission on the
543identified parent.
544
545Args:
546  parent: string, The resource name of the Organization or Folder whose Folders are
547being listed.
548Must be of the form `folders/{folder_id}` or `organizations/{org_id}`.
549Access to this method is controlled by checking the
550`resourcemanager.folders.list` permission on the `parent`.
551  showDeleted: boolean, Controls whether Folders in the
552DELETE_REQUESTED
553state should be returned. Defaults to false. This field is optional.
554  pageToken: string, A pagination token returned from a previous call to `ListFolders`
555that indicates where this listing should continue from.
556This field is optional.
557  x__xgafv: string, V1 error format.
558    Allowed values
559      1 - v1 error format
560      2 - v2 error format
561  pageSize: integer, The maximum number of Folders to return in the response.
562This field is optional.
563
564Returns:
565  An object of the form:
566
567    { # The ListFolders response message.
568    "folders": [ # A possibly paginated list of Folders that are direct descendants of
569        # the specified parent resource.
570      { # A Folder in an Organization's resource hierarchy, used to
571          # organize that Organization's resources.
572        "name": "A String", # Output only. The resource name of the Folder.
573            # Its format is `folders/{folder_id}`, for example: "folders/1234".
574        "displayName": "A String", # The folder’s display name.
575            # A folder’s display name must be unique amongst its siblings, e.g.
576            # no two folders with the same parent can share the same display name.
577            # The display name must start and end with a letter or digit, may contain
578            # letters, digits, spaces, hyphens and underscores and can be no longer
579            # than 30 characters. This is captured by the regular expression:
580            # [\p{L}\p{N}]([\p{L}\p{N}_- ]{0,28}[\p{L}\p{N}])?.
581        "createTime": "A String", # Output only. Timestamp when the Folder was created. Assigned by the server.
582        "parent": "A String", # The Folder’s parent's resource name.
583            # Updates to the folder's parent must be performed via
584            # MoveFolder.
585        "lifecycleState": "A String", # Output only.  The lifecycle state of the folder.
586            # Updates to the lifecycle_state must be performed via
587            # DeleteFolder and
588            # UndeleteFolder.
589      },
590    ],
591    "nextPageToken": "A String", # A pagination token returned from a previous call to `ListFolders`
592        # that indicates from where listing should continue.
593        # This field is optional.
594  }</pre>
595</div>
596
597<div class="method">
598    <code class="details" id="list_next">list_next(previous_request, previous_response)</code>
599  <pre>Retrieves the next page of results.
600
601Args:
602  previous_request: The request for the previous page. (required)
603  previous_response: The response from the request for the previous page. (required)
604
605Returns:
606  A request object that you can call 'execute()' on to request the next
607  page. Returns None if there are no more items in the collection.
608    </pre>
609</div>
610
611<div class="method">
612    <code class="details" id="move">move(name, body, x__xgafv=None)</code>
613  <pre>Moves a Folder under a new resource parent.
614Returns an Operation which can be used to track the progress of the
615folder move workflow.
616Upon success the Operation.response field will be populated with the
617moved Folder.
618Upon failure, a FolderOperationError categorizing the failure cause will
619be returned - if the failure occurs synchronously then the
620FolderOperationError will be returned via the Status.details field
621and if it occurs asynchronously then the FolderOperation will be returned
622via the Operation.error field.
623In addition, the Operation.metadata field will be populated with a
624FolderOperation message as an aid to stateless clients.
625Folder moves will be rejected if they violate either the naming, height
626or fanout constraints described in the
627CreateFolder documentation.
628The caller must have `resourcemanager.folders.move` permission on the
629folder's current and proposed new parent.
630
631Args:
632  name: string, The resource name of the Folder to move.
633Must be of the form folders/{folder_id} (required)
634  body: object, The request body. (required)
635    The object takes the form of:
636
637{ # The MoveFolder request message.
638    "destinationParent": "A String", # The resource name of the Folder or Organization to reparent
639        # the folder under.
640        # Must be of the form `folders/{folder_id}` or `organizations/{org_id}`.
641  }
642
643  x__xgafv: string, V1 error format.
644    Allowed values
645      1 - v1 error format
646      2 - v2 error format
647
648Returns:
649  An object of the form:
650
651    { # This resource represents a long-running operation that is the result of a
652      # network API call.
653    "response": { # The normal response of the operation in case of success.  If the original
654        # method returns no data on success, such as `Delete`, the response is
655        # `google.protobuf.Empty`.  If the original method is standard
656        # `Get`/`Create`/`Update`, the response should be the resource.  For other
657        # methods, the response should have the type `XxxResponse`, where `Xxx`
658        # is the original method name.  For example, if the original method name
659        # is `TakeSnapshot()`, the inferred response type is
660        # `TakeSnapshotResponse`.
661      "a_key": "", # Properties of the object. Contains field @type with type URL.
662    },
663    "metadata": { # Service-specific metadata associated with the operation.  It typically
664        # contains progress information and common metadata such as create time.
665        # Some services might not provide such metadata.  Any method that returns a
666        # long-running operation should document the metadata type, if any.
667      "a_key": "", # Properties of the object. Contains field @type with type URL.
668    },
669    "done": True or False, # If the value is `false`, it means the operation is still in progress.
670        # If `true`, the operation is completed, and either `error` or `response` is
671        # available.
672    "name": "A String", # The server-assigned name, which is only unique within the same service that
673        # originally returns it. If you use the default HTTP mapping, the
674        # `name` should be a resource name ending with `operations/{unique_id}`.
675    "error": { # The `Status` type defines a logical error model that is suitable for # The error result of the operation in case of failure or cancellation.
676        # different programming environments, including REST APIs and RPC APIs. It is
677        # used by [gRPC](https://github.com/grpc). Each `Status` message contains
678        # three pieces of data: error code, error message, and error details.
679        #
680        # You can find out more about this error model and how to work with it in the
681        # [API Design Guide](https://cloud.google.com/apis/design/errors).
682      "message": "A String", # A developer-facing error message, which should be in English. Any
683          # user-facing error message should be localized and sent in the
684          # google.rpc.Status.details field, or localized by the client.
685      "code": 42, # The status code, which should be an enum value of google.rpc.Code.
686      "details": [ # A list of messages that carry the error details.  There is a common set of
687          # message types for APIs to use.
688        {
689          "a_key": "", # Properties of the object. Contains field @type with type URL.
690        },
691      ],
692    },
693  }</pre>
694</div>
695
696<div class="method">
697    <code class="details" id="patch">patch(name, body, updateMask=None, x__xgafv=None)</code>
698  <pre>Updates a Folder, changing its display_name.
699Changes to the folder display_name will be rejected if they violate either
700the display_name formatting rules or naming constraints described in
701the CreateFolder documentation.
702
703The Folder's display name must start and end with a letter or digit,
704may contain letters, digits, spaces, hyphens and underscores and can be
705no longer than 30 characters. This is captured by the regular expression:
706[\p{L}\p{N}]([\p{L}\p{N}_- ]{0,28}[\p{L}\p{N}])?.
707The caller must have `resourcemanager.folders.update` permission on the
708identified folder.
709
710If the update fails due to the unique name constraint then a
711PreconditionFailure explaining this violation will be returned
712in the Status.details field.
713
714Args:
715  name: string, Output only. The resource name of the Folder.
716Its format is `folders/{folder_id}`, for example: "folders/1234". (required)
717  body: object, The request body. (required)
718    The object takes the form of:
719
720{ # A Folder in an Organization's resource hierarchy, used to
721    # organize that Organization's resources.
722  "name": "A String", # Output only. The resource name of the Folder.
723      # Its format is `folders/{folder_id}`, for example: "folders/1234".
724  "displayName": "A String", # The folder’s display name.
725      # A folder’s display name must be unique amongst its siblings, e.g.
726      # no two folders with the same parent can share the same display name.
727      # The display name must start and end with a letter or digit, may contain
728      # letters, digits, spaces, hyphens and underscores and can be no longer
729      # than 30 characters. This is captured by the regular expression:
730      # [\p{L}\p{N}]([\p{L}\p{N}_- ]{0,28}[\p{L}\p{N}])?.
731  "createTime": "A String", # Output only. Timestamp when the Folder was created. Assigned by the server.
732  "parent": "A String", # The Folder’s parent's resource name.
733      # Updates to the folder's parent must be performed via
734      # MoveFolder.
735  "lifecycleState": "A String", # Output only.  The lifecycle state of the folder.
736      # Updates to the lifecycle_state must be performed via
737      # DeleteFolder and
738      # UndeleteFolder.
739}
740
741  updateMask: string, Fields to be updated.
742Only the `display_name` can be updated.
743  x__xgafv: string, V1 error format.
744    Allowed values
745      1 - v1 error format
746      2 - v2 error format
747
748Returns:
749  An object of the form:
750
751    { # A Folder in an Organization's resource hierarchy, used to
752      # organize that Organization's resources.
753    "name": "A String", # Output only. The resource name of the Folder.
754        # Its format is `folders/{folder_id}`, for example: "folders/1234".
755    "displayName": "A String", # The folder’s display name.
756        # A folder’s display name must be unique amongst its siblings, e.g.
757        # no two folders with the same parent can share the same display name.
758        # The display name must start and end with a letter or digit, may contain
759        # letters, digits, spaces, hyphens and underscores and can be no longer
760        # than 30 characters. This is captured by the regular expression:
761        # [\p{L}\p{N}]([\p{L}\p{N}_- ]{0,28}[\p{L}\p{N}])?.
762    "createTime": "A String", # Output only. Timestamp when the Folder was created. Assigned by the server.
763    "parent": "A String", # The Folder’s parent's resource name.
764        # Updates to the folder's parent must be performed via
765        # MoveFolder.
766    "lifecycleState": "A String", # Output only.  The lifecycle state of the folder.
767        # Updates to the lifecycle_state must be performed via
768        # DeleteFolder and
769        # UndeleteFolder.
770  }</pre>
771</div>
772
773<div class="method">
774    <code class="details" id="search">search(body, x__xgafv=None)</code>
775  <pre>Search for folders that match specific filter criteria.
776Search provides an eventually consistent view of the folders a user has
777access to which meet the specified filter criteria.
778
779This will only return folders on which the caller has the
780permission `resourcemanager.folders.get`.
781
782Args:
783  body: object, The request body. (required)
784    The object takes the form of:
785
786{ # The request message for searching folders.
787    "pageToken": "A String", # A pagination token returned from a previous call to `SearchFolders`
788        # that indicates from where search should continue.
789        # This field is optional.
790    "pageSize": 42, # The maximum number of folders to return in the response.
791        # This field is optional.
792    "query": "A String", # Search criteria used to select the Folders to return.
793        # If no search criteria is specified then all accessible folders will be
794        # returned.
795        #
796        # Query expressions can be used to restrict results based upon displayName,
797        # lifecycleState and parent, where the operators `=`, `NOT`, `AND` and `OR`
798        # can be used along with the suffix wildcard symbol `*`.
799        #
800        # The displayName field in a query expression should use escaped quotes
801        # for values that include whitespace to prevent unexpected behavior.
802        #
803        # Some example queries are:
804        #
805        # |Query | Description|
806        # |----- | -----------|
807        # |displayName=Test* | Folders whose display name starts with "Test".|
808        # |lifecycleState=ACTIVE | Folders whose lifecycleState is ACTIVE.|
809        # |parent=folders/123 | Folders whose parent is "folders/123".|
810        # |parent=folders/123 AND lifecycleState=ACTIVE | Active folders whose parent
811        # is "folders/123".| |displayName=\\"Test String\\"|Folders whose display
812        # name includes both "Test" and "String".|
813  }
814
815  x__xgafv: string, V1 error format.
816    Allowed values
817      1 - v1 error format
818      2 - v2 error format
819
820Returns:
821  An object of the form:
822
823    { # The response message for searching folders.
824    "nextPageToken": "A String", # A pagination token returned from a previous call to `SearchFolders`
825        # that indicates from where searching should continue.
826        # This field is optional.
827    "folders": [ # A possibly paginated folder search results.
828        # the specified parent resource.
829      { # A Folder in an Organization's resource hierarchy, used to
830          # organize that Organization's resources.
831        "name": "A String", # Output only. The resource name of the Folder.
832            # Its format is `folders/{folder_id}`, for example: "folders/1234".
833        "displayName": "A String", # The folder’s display name.
834            # A folder’s display name must be unique amongst its siblings, e.g.
835            # no two folders with the same parent can share the same display name.
836            # The display name must start and end with a letter or digit, may contain
837            # letters, digits, spaces, hyphens and underscores and can be no longer
838            # than 30 characters. This is captured by the regular expression:
839            # [\p{L}\p{N}]([\p{L}\p{N}_- ]{0,28}[\p{L}\p{N}])?.
840        "createTime": "A String", # Output only. Timestamp when the Folder was created. Assigned by the server.
841        "parent": "A String", # The Folder’s parent's resource name.
842            # Updates to the folder's parent must be performed via
843            # MoveFolder.
844        "lifecycleState": "A String", # Output only.  The lifecycle state of the folder.
845            # Updates to the lifecycle_state must be performed via
846            # DeleteFolder and
847            # UndeleteFolder.
848      },
849    ],
850  }</pre>
851</div>
852
853<div class="method">
854    <code class="details" id="search_next">search_next(previous_request, previous_response)</code>
855  <pre>Retrieves the next page of results.
856
857Args:
858  previous_request: The request for the previous page. (required)
859  previous_response: The response from the request for the previous page. (required)
860
861Returns:
862  A request object that you can call 'execute()' on to request the next
863  page. Returns None if there are no more items in the collection.
864    </pre>
865</div>
866
867<div class="method">
868    <code class="details" id="setIamPolicy">setIamPolicy(resource, body, x__xgafv=None)</code>
869  <pre>Sets the access control policy on a Folder, replacing any existing policy.
870The `resource` field should be the Folder's resource name, e.g.
871"folders/1234".
872The caller must have `resourcemanager.folders.setIamPolicy` permission
873on the identified folder.
874
875Args:
876  resource: string, REQUIRED: The resource for which the policy is being specified.
877See the operation documentation for the appropriate value for this field. (required)
878  body: object, The request body. (required)
879    The object takes the form of:
880
881{ # Request message for `SetIamPolicy` method.
882    "policy": { # Defines an Identity and Access Management (IAM) policy. It is used to # REQUIRED: The complete policy to be applied to the `resource`. The size of
883        # the policy is limited to a few 10s of KB. An empty policy is a
884        # valid policy but certain Cloud Platform services (such as Projects)
885        # might reject them.
886        # specify access control policies for Cloud Platform resources.
887        #
888        #
889        # A `Policy` consists of a list of `bindings`. A `binding` binds a list of
890        # `members` to a `role`, where the members can be user accounts, Google groups,
891        # Google domains, and service accounts. A `role` is a named list of permissions
892        # defined by IAM.
893        #
894        # **JSON Example**
895        #
896        #     {
897        #       "bindings": [
898        #         {
899        #           "role": "roles/owner",
900        #           "members": [
901        #             "user:mike@example.com",
902        #             "group:admins@example.com",
903        #             "domain:google.com",
904        #             "serviceAccount:my-other-app@appspot.gserviceaccount.com"
905        #           ]
906        #         },
907        #         {
908        #           "role": "roles/viewer",
909        #           "members": ["user:sean@example.com"]
910        #         }
911        #       ]
912        #     }
913        #
914        # **YAML Example**
915        #
916        #     bindings:
917        #     - members:
918        #       - user:mike@example.com
919        #       - group:admins@example.com
920        #       - domain:google.com
921        #       - serviceAccount:my-other-app@appspot.gserviceaccount.com
922        #       role: roles/owner
923        #     - members:
924        #       - user:sean@example.com
925        #       role: roles/viewer
926        #
927        #
928        # For a description of IAM and its features, see the
929        # [IAM developer's guide](https://cloud.google.com/iam/docs).
930      "auditConfigs": [ # Specifies cloud audit logging configuration for this policy.
931        { # Specifies the audit configuration for a service.
932            # The configuration determines which permission types are logged, and what
933            # identities, if any, are exempted from logging.
934            # An AuditConfig must have one or more AuditLogConfigs.
935            #
936            # If there are AuditConfigs for both `allServices` and a specific service,
937            # the union of the two AuditConfigs is used for that service: the log_types
938            # specified in each AuditConfig are enabled, and the exempted_members in each
939            # AuditLogConfig are exempted.
940            #
941            # Example Policy with multiple AuditConfigs:
942            #
943            #     {
944            #       "audit_configs": [
945            #         {
946            #           "service": "allServices"
947            #           "audit_log_configs": [
948            #             {
949            #               "log_type": "DATA_READ",
950            #               "exempted_members": [
951            #                 "user:foo@gmail.com"
952            #               ]
953            #             },
954            #             {
955            #               "log_type": "DATA_WRITE",
956            #             },
957            #             {
958            #               "log_type": "ADMIN_READ",
959            #             }
960            #           ]
961            #         },
962            #         {
963            #           "service": "fooservice.googleapis.com"
964            #           "audit_log_configs": [
965            #             {
966            #               "log_type": "DATA_READ",
967            #             },
968            #             {
969            #               "log_type": "DATA_WRITE",
970            #               "exempted_members": [
971            #                 "user:bar@gmail.com"
972            #               ]
973            #             }
974            #           ]
975            #         }
976            #       ]
977            #     }
978            #
979            # For fooservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ
980            # logging. It also exempts foo@gmail.com from DATA_READ logging, and
981            # bar@gmail.com from DATA_WRITE logging.
982          "auditLogConfigs": [ # The configuration for logging of each type of permission.
983            { # Provides the configuration for logging a type of permissions.
984                # Example:
985                #
986                #     {
987                #       "audit_log_configs": [
988                #         {
989                #           "log_type": "DATA_READ",
990                #           "exempted_members": [
991                #             "user:foo@gmail.com"
992                #           ]
993                #         },
994                #         {
995                #           "log_type": "DATA_WRITE",
996                #         }
997                #       ]
998                #     }
999                #
1000                # This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting
1001                # foo@gmail.com from DATA_READ logging.
1002              "exemptedMembers": [ # Specifies the identities that do not cause logging for this type of
1003                  # permission.
1004                  # Follows the same format of Binding.members.
1005                "A String",
1006              ],
1007              "logType": "A String", # The log type that this config enables.
1008            },
1009          ],
1010          "service": "A String", # Specifies a service that will be enabled for audit logging.
1011              # For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
1012              # `allServices` is a special value that covers all services.
1013        },
1014      ],
1015      "version": 42, # Deprecated.
1016      "bindings": [ # Associates a list of `members` to a `role`.
1017          # `bindings` with no members will result in an error.
1018        { # Associates `members` with a `role`.
1019          "role": "A String", # Role that is assigned to `members`.
1020              # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
1021          "condition": { # Represents an expression text. Example: # The condition that is associated with this binding.
1022              # NOTE: An unsatisfied condition will not allow user access via current
1023              # binding. Different bindings, including their conditions, are examined
1024              # independently.
1025              #
1026              #     title: "User account presence"
1027              #     description: "Determines whether the request has a user account"
1028              #     expression: "size(request.user) > 0"
1029            "location": "A String", # An optional string indicating the location of the expression for error
1030                # reporting, e.g. a file name and a position in the file.
1031            "expression": "A String", # Textual representation of an expression in
1032                # Common Expression Language syntax.
1033                #
1034                # The application context of the containing message determines which
1035                # well-known feature set of CEL is supported.
1036            "description": "A String", # An optional description of the expression. This is a longer text which
1037                # describes the expression, e.g. when hovered over it in a UI.
1038            "title": "A String", # An optional title for the expression, i.e. a short string describing
1039                # its purpose. This can be used e.g. in UIs which allow to enter the
1040                # expression.
1041          },
1042          "members": [ # Specifies the identities requesting access for a Cloud Platform resource.
1043              # `members` can have the following values:
1044              #
1045              # * `allUsers`: A special identifier that represents anyone who is
1046              #    on the internet; with or without a Google account.
1047              #
1048              # * `allAuthenticatedUsers`: A special identifier that represents anyone
1049              #    who is authenticated with a Google account or a service account.
1050              #
1051              # * `user:{emailid}`: An email address that represents a specific Google
1052              #    account. For example, `alice@gmail.com` .
1053              #
1054              #
1055              # * `serviceAccount:{emailid}`: An email address that represents a service
1056              #    account. For example, `my-other-app@appspot.gserviceaccount.com`.
1057              #
1058              # * `group:{emailid}`: An email address that represents a Google group.
1059              #    For example, `admins@example.com`.
1060              #
1061              #
1062              # * `domain:{domain}`: The G Suite domain (primary) that represents all the
1063              #    users of that domain. For example, `google.com` or `example.com`.
1064              #
1065            "A String",
1066          ],
1067        },
1068      ],
1069      "etag": "A String", # `etag` is used for optimistic concurrency control as a way to help
1070          # prevent simultaneous updates of a policy from overwriting each other.
1071          # It is strongly suggested that systems make use of the `etag` in the
1072          # read-modify-write cycle to perform policy updates in order to avoid race
1073          # conditions: An `etag` is returned in the response to `getIamPolicy`, and
1074          # systems are expected to put that etag in the request to `setIamPolicy` to
1075          # ensure that their change will be applied to the same version of the policy.
1076          #
1077          # If no `etag` is provided in the call to `setIamPolicy`, then the existing
1078          # policy is overwritten blindly.
1079    },
1080    "updateMask": "A String", # OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only
1081        # the fields in the mask will be modified. If no mask is provided, the
1082        # following default mask is used:
1083        # paths: "bindings, etag"
1084        # This field is only used by Cloud IAM.
1085  }
1086
1087  x__xgafv: string, V1 error format.
1088    Allowed values
1089      1 - v1 error format
1090      2 - v2 error format
1091
1092Returns:
1093  An object of the form:
1094
1095    { # Defines an Identity and Access Management (IAM) policy. It is used to
1096      # specify access control policies for Cloud Platform resources.
1097      #
1098      #
1099      # A `Policy` consists of a list of `bindings`. A `binding` binds a list of
1100      # `members` to a `role`, where the members can be user accounts, Google groups,
1101      # Google domains, and service accounts. A `role` is a named list of permissions
1102      # defined by IAM.
1103      #
1104      # **JSON Example**
1105      #
1106      #     {
1107      #       "bindings": [
1108      #         {
1109      #           "role": "roles/owner",
1110      #           "members": [
1111      #             "user:mike@example.com",
1112      #             "group:admins@example.com",
1113      #             "domain:google.com",
1114      #             "serviceAccount:my-other-app@appspot.gserviceaccount.com"
1115      #           ]
1116      #         },
1117      #         {
1118      #           "role": "roles/viewer",
1119      #           "members": ["user:sean@example.com"]
1120      #         }
1121      #       ]
1122      #     }
1123      #
1124      # **YAML Example**
1125      #
1126      #     bindings:
1127      #     - members:
1128      #       - user:mike@example.com
1129      #       - group:admins@example.com
1130      #       - domain:google.com
1131      #       - serviceAccount:my-other-app@appspot.gserviceaccount.com
1132      #       role: roles/owner
1133      #     - members:
1134      #       - user:sean@example.com
1135      #       role: roles/viewer
1136      #
1137      #
1138      # For a description of IAM and its features, see the
1139      # [IAM developer's guide](https://cloud.google.com/iam/docs).
1140    "auditConfigs": [ # Specifies cloud audit logging configuration for this policy.
1141      { # Specifies the audit configuration for a service.
1142          # The configuration determines which permission types are logged, and what
1143          # identities, if any, are exempted from logging.
1144          # An AuditConfig must have one or more AuditLogConfigs.
1145          #
1146          # If there are AuditConfigs for both `allServices` and a specific service,
1147          # the union of the two AuditConfigs is used for that service: the log_types
1148          # specified in each AuditConfig are enabled, and the exempted_members in each
1149          # AuditLogConfig are exempted.
1150          #
1151          # Example Policy with multiple AuditConfigs:
1152          #
1153          #     {
1154          #       "audit_configs": [
1155          #         {
1156          #           "service": "allServices"
1157          #           "audit_log_configs": [
1158          #             {
1159          #               "log_type": "DATA_READ",
1160          #               "exempted_members": [
1161          #                 "user:foo@gmail.com"
1162          #               ]
1163          #             },
1164          #             {
1165          #               "log_type": "DATA_WRITE",
1166          #             },
1167          #             {
1168          #               "log_type": "ADMIN_READ",
1169          #             }
1170          #           ]
1171          #         },
1172          #         {
1173          #           "service": "fooservice.googleapis.com"
1174          #           "audit_log_configs": [
1175          #             {
1176          #               "log_type": "DATA_READ",
1177          #             },
1178          #             {
1179          #               "log_type": "DATA_WRITE",
1180          #               "exempted_members": [
1181          #                 "user:bar@gmail.com"
1182          #               ]
1183          #             }
1184          #           ]
1185          #         }
1186          #       ]
1187          #     }
1188          #
1189          # For fooservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ
1190          # logging. It also exempts foo@gmail.com from DATA_READ logging, and
1191          # bar@gmail.com from DATA_WRITE logging.
1192        "auditLogConfigs": [ # The configuration for logging of each type of permission.
1193          { # Provides the configuration for logging a type of permissions.
1194              # Example:
1195              #
1196              #     {
1197              #       "audit_log_configs": [
1198              #         {
1199              #           "log_type": "DATA_READ",
1200              #           "exempted_members": [
1201              #             "user:foo@gmail.com"
1202              #           ]
1203              #         },
1204              #         {
1205              #           "log_type": "DATA_WRITE",
1206              #         }
1207              #       ]
1208              #     }
1209              #
1210              # This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting
1211              # foo@gmail.com from DATA_READ logging.
1212            "exemptedMembers": [ # Specifies the identities that do not cause logging for this type of
1213                # permission.
1214                # Follows the same format of Binding.members.
1215              "A String",
1216            ],
1217            "logType": "A String", # The log type that this config enables.
1218          },
1219        ],
1220        "service": "A String", # Specifies a service that will be enabled for audit logging.
1221            # For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
1222            # `allServices` is a special value that covers all services.
1223      },
1224    ],
1225    "version": 42, # Deprecated.
1226    "bindings": [ # Associates a list of `members` to a `role`.
1227        # `bindings` with no members will result in an error.
1228      { # Associates `members` with a `role`.
1229        "role": "A String", # Role that is assigned to `members`.
1230            # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
1231        "condition": { # Represents an expression text. Example: # The condition that is associated with this binding.
1232            # NOTE: An unsatisfied condition will not allow user access via current
1233            # binding. Different bindings, including their conditions, are examined
1234            # independently.
1235            #
1236            #     title: "User account presence"
1237            #     description: "Determines whether the request has a user account"
1238            #     expression: "size(request.user) > 0"
1239          "location": "A String", # An optional string indicating the location of the expression for error
1240              # reporting, e.g. a file name and a position in the file.
1241          "expression": "A String", # Textual representation of an expression in
1242              # Common Expression Language syntax.
1243              #
1244              # The application context of the containing message determines which
1245              # well-known feature set of CEL is supported.
1246          "description": "A String", # An optional description of the expression. This is a longer text which
1247              # describes the expression, e.g. when hovered over it in a UI.
1248          "title": "A String", # An optional title for the expression, i.e. a short string describing
1249              # its purpose. This can be used e.g. in UIs which allow to enter the
1250              # expression.
1251        },
1252        "members": [ # Specifies the identities requesting access for a Cloud Platform resource.
1253            # `members` can have the following values:
1254            #
1255            # * `allUsers`: A special identifier that represents anyone who is
1256            #    on the internet; with or without a Google account.
1257            #
1258            # * `allAuthenticatedUsers`: A special identifier that represents anyone
1259            #    who is authenticated with a Google account or a service account.
1260            #
1261            # * `user:{emailid}`: An email address that represents a specific Google
1262            #    account. For example, `alice@gmail.com` .
1263            #
1264            #
1265            # * `serviceAccount:{emailid}`: An email address that represents a service
1266            #    account. For example, `my-other-app@appspot.gserviceaccount.com`.
1267            #
1268            # * `group:{emailid}`: An email address that represents a Google group.
1269            #    For example, `admins@example.com`.
1270            #
1271            #
1272            # * `domain:{domain}`: The G Suite domain (primary) that represents all the
1273            #    users of that domain. For example, `google.com` or `example.com`.
1274            #
1275          "A String",
1276        ],
1277      },
1278    ],
1279    "etag": "A String", # `etag` is used for optimistic concurrency control as a way to help
1280        # prevent simultaneous updates of a policy from overwriting each other.
1281        # It is strongly suggested that systems make use of the `etag` in the
1282        # read-modify-write cycle to perform policy updates in order to avoid race
1283        # conditions: An `etag` is returned in the response to `getIamPolicy`, and
1284        # systems are expected to put that etag in the request to `setIamPolicy` to
1285        # ensure that their change will be applied to the same version of the policy.
1286        #
1287        # If no `etag` is provided in the call to `setIamPolicy`, then the existing
1288        # policy is overwritten blindly.
1289  }</pre>
1290</div>
1291
1292<div class="method">
1293    <code class="details" id="testIamPermissions">testIamPermissions(resource, body, x__xgafv=None)</code>
1294  <pre>Returns permissions that a caller has on the specified Folder.
1295The `resource` field should be the Folder's resource name,
1296e.g. "folders/1234".
1297
1298There are no permissions required for making this API call.
1299
1300Args:
1301  resource: string, REQUIRED: The resource for which the policy detail is being requested.
1302See the operation documentation for the appropriate value for this field. (required)
1303  body: object, The request body. (required)
1304    The object takes the form of:
1305
1306{ # Request message for `TestIamPermissions` method.
1307    "permissions": [ # The set of permissions to check for the `resource`. Permissions with
1308        # wildcards (such as '*' or 'storage.*') are not allowed. For more
1309        # information see
1310        # [IAM Overview](https://cloud.google.com/iam/docs/overview#permissions).
1311      "A String",
1312    ],
1313  }
1314
1315  x__xgafv: string, V1 error format.
1316    Allowed values
1317      1 - v1 error format
1318      2 - v2 error format
1319
1320Returns:
1321  An object of the form:
1322
1323    { # Response message for `TestIamPermissions` method.
1324    "permissions": [ # A subset of `TestPermissionsRequest.permissions` that the caller is
1325        # allowed.
1326      "A String",
1327    ],
1328  }</pre>
1329</div>
1330
1331<div class="method">
1332    <code class="details" id="undelete">undelete(name, body=None, x__xgafv=None)</code>
1333  <pre>Cancels the deletion request for a Folder. This method may only be
1334called on a Folder in the
1335DELETE_REQUESTED state.
1336In order to succeed, the Folder's parent must be in the
1337ACTIVE state.
1338In addition, reintroducing the folder into the tree must not violate
1339folder naming, height and fanout constraints described in the
1340CreateFolder documentation.
1341The caller must have `resourcemanager.folders.undelete` permission on the
1342identified folder.
1343
1344Args:
1345  name: string, The resource name of the Folder to undelete.
1346Must be of the form `folders/{folder_id}`. (required)
1347  body: object, The request body.
1348    The object takes the form of:
1349
1350{ # The UndeleteFolder request message.
1351  }
1352
1353  x__xgafv: string, V1 error format.
1354    Allowed values
1355      1 - v1 error format
1356      2 - v2 error format
1357
1358Returns:
1359  An object of the form:
1360
1361    { # A Folder in an Organization's resource hierarchy, used to
1362      # organize that Organization's resources.
1363    "name": "A String", # Output only. The resource name of the Folder.
1364        # Its format is `folders/{folder_id}`, for example: "folders/1234".
1365    "displayName": "A String", # The folder’s display name.
1366        # A folder’s display name must be unique amongst its siblings, e.g.
1367        # no two folders with the same parent can share the same display name.
1368        # The display name must start and end with a letter or digit, may contain
1369        # letters, digits, spaces, hyphens and underscores and can be no longer
1370        # than 30 characters. This is captured by the regular expression:
1371        # [\p{L}\p{N}]([\p{L}\p{N}_- ]{0,28}[\p{L}\p{N}])?.
1372    "createTime": "A String", # Output only. Timestamp when the Folder was created. Assigned by the server.
1373    "parent": "A String", # The Folder’s parent's resource name.
1374        # Updates to the folder's parent must be performed via
1375        # MoveFolder.
1376    "lifecycleState": "A String", # Output only.  The lifecycle state of the folder.
1377        # Updates to the lifecycle_state must be performed via
1378        # DeleteFolder and
1379        # UndeleteFolder.
1380  }</pre>
1381</div>
1382
1383</body></html>