[e3d4e0a] | 1 | <?php
|
---|
| 2 | /*
|
---|
| 3 | * Copyright 2014 Google Inc.
|
---|
| 4 | *
|
---|
| 5 | * Licensed under the Apache License, Version 2.0 (the "License"); you may not
|
---|
| 6 | * use this file except in compliance with the License. You may obtain a copy of
|
---|
| 7 | * the License at
|
---|
| 8 | *
|
---|
| 9 | * http://www.apache.org/licenses/LICENSE-2.0
|
---|
| 10 | *
|
---|
| 11 | * Unless required by applicable law or agreed to in writing, software
|
---|
| 12 | * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
---|
| 13 | * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
---|
| 14 | * License for the specific language governing permissions and limitations under
|
---|
| 15 | * the License.
|
---|
| 16 | */
|
---|
| 17 |
|
---|
| 18 | namespace Google\Service\Iam\Resource;
|
---|
| 19 |
|
---|
| 20 | use Google\Service\Iam\CreateRoleRequest;
|
---|
| 21 | use Google\Service\Iam\ListRolesResponse;
|
---|
| 22 | use Google\Service\Iam\Role;
|
---|
| 23 | use Google\Service\Iam\UndeleteRoleRequest;
|
---|
| 24 |
|
---|
| 25 | /**
|
---|
| 26 | * The "roles" collection of methods.
|
---|
| 27 | * Typical usage is:
|
---|
| 28 | * <code>
|
---|
| 29 | * $iamService = new Google\Service\Iam(...);
|
---|
| 30 | * $roles = $iamService->organizations_roles;
|
---|
| 31 | * </code>
|
---|
| 32 | */
|
---|
| 33 | class OrganizationsRoles extends \Google\Service\Resource
|
---|
| 34 | {
|
---|
| 35 | /**
|
---|
| 36 | * Creates a new custom Role. (roles.create)
|
---|
| 37 | *
|
---|
| 38 | * @param string $parent The `parent` parameter's value depends on the target
|
---|
| 39 | * resource for the request, namely
|
---|
| 40 | * [`projects`](https://cloud.google.com/iam/reference/rest/v1/projects.roles)
|
---|
| 41 | * or [`organizations`](https://cloud.google.com/iam/reference/rest/v1/organizat
|
---|
| 42 | * ions.roles). Each resource type's `parent` value format is described below: *
|
---|
| 43 | * [`projects.roles.create()`](https://cloud.google.com/iam/reference/rest/v1/pr
|
---|
| 44 | * ojects.roles/create): `projects/{PROJECT_ID}`. This method creates project-
|
---|
| 45 | * level [custom roles](https://cloud.google.com/iam/docs/understanding-custom-
|
---|
| 46 | * roles). Example request URL:
|
---|
| 47 | * `https://iam.googleapis.com/v1/projects/{PROJECT_ID}/roles` * [`organizations
|
---|
| 48 | * .roles.create()`](https://cloud.google.com/iam/reference/rest/v1/organization
|
---|
| 49 | * s.roles/create): `organizations/{ORGANIZATION_ID}`. This method creates
|
---|
| 50 | * organization-level [custom roles](https://cloud.google.com/iam/docs
|
---|
| 51 | * /understanding-custom-roles). Example request URL:
|
---|
| 52 | * `https://iam.googleapis.com/v1/organizations/{ORGANIZATION_ID}/roles` Note:
|
---|
| 53 | * Wildcard (*) values are invalid; you must specify a complete project ID or
|
---|
| 54 | * organization ID.
|
---|
| 55 | * @param CreateRoleRequest $postBody
|
---|
| 56 | * @param array $optParams Optional parameters.
|
---|
| 57 | * @return Role
|
---|
| 58 | */
|
---|
| 59 | public function create($parent, CreateRoleRequest $postBody, $optParams = [])
|
---|
| 60 | {
|
---|
| 61 | $params = ['parent' => $parent, 'postBody' => $postBody];
|
---|
| 62 | $params = array_merge($params, $optParams);
|
---|
| 63 | return $this->call('create', [$params], Role::class);
|
---|
| 64 | }
|
---|
| 65 | /**
|
---|
| 66 | * Deletes a custom Role. When you delete a custom role, the following changes
|
---|
| 67 | * occur immediately: * You cannot bind a principal to the custom role in an IAM
|
---|
| 68 | * Policy. * Existing bindings to the custom role are not changed, but they have
|
---|
| 69 | * no effect. * By default, the response from ListRoles does not include the
|
---|
| 70 | * custom role. You have 7 days to undelete the custom role. After 7 days, the
|
---|
| 71 | * following changes occur: * The custom role is permanently deleted and cannot
|
---|
| 72 | * be recovered. * If an IAM policy contains a binding to the custom role, the
|
---|
| 73 | * binding is permanently removed. (roles.delete)
|
---|
| 74 | *
|
---|
| 75 | * @param string $name The `name` parameter's value depends on the target
|
---|
| 76 | * resource for the request, namely
|
---|
| 77 | * [`projects`](https://cloud.google.com/iam/reference/rest/v1/projects.roles)
|
---|
| 78 | * or [`organizations`](https://cloud.google.com/iam/reference/rest/v1/organizat
|
---|
| 79 | * ions.roles). Each resource type's `name` value format is described below: * [
|
---|
| 80 | * `projects.roles.delete()`](https://cloud.google.com/iam/reference/rest/v1/pro
|
---|
| 81 | * jects.roles/delete): `projects/{PROJECT_ID}/roles/{CUSTOM_ROLE_ID}`. This
|
---|
| 82 | * method deletes only [custom roles](https://cloud.google.com/iam/docs
|
---|
| 83 | * /understanding-custom-roles) that have been created at the project level.
|
---|
| 84 | * Example request URL:
|
---|
| 85 | * `https://iam.googleapis.com/v1/projects/{PROJECT_ID}/roles/{CUSTOM_ROLE_ID}`
|
---|
| 86 | * * [`organizations.roles.delete()`](https://cloud.google.com/iam/reference/res
|
---|
| 87 | * t/v1/organizations.roles/delete):
|
---|
| 88 | * `organizations/{ORGANIZATION_ID}/roles/{CUSTOM_ROLE_ID}`. This method deletes
|
---|
| 89 | * only [custom roles](https://cloud.google.com/iam/docs/understanding-custom-
|
---|
| 90 | * roles) that have been created at the organization level. Example request URL:
|
---|
| 91 | * `https://iam.googleapis.com/v1/organizations/{ORGANIZATION_ID}/roles/{CUSTOM_
|
---|
| 92 | * ROLE_ID}` Note: Wildcard (*) values are invalid; you must specify a complete
|
---|
| 93 | * project ID or organization ID.
|
---|
| 94 | * @param array $optParams Optional parameters.
|
---|
| 95 | *
|
---|
| 96 | * @opt_param string etag Used to perform a consistent read-modify-write.
|
---|
| 97 | * @return Role
|
---|
| 98 | */
|
---|
| 99 | public function delete($name, $optParams = [])
|
---|
| 100 | {
|
---|
| 101 | $params = ['name' => $name];
|
---|
| 102 | $params = array_merge($params, $optParams);
|
---|
| 103 | return $this->call('delete', [$params], Role::class);
|
---|
| 104 | }
|
---|
| 105 | /**
|
---|
| 106 | * Gets the definition of a Role. (roles.get)
|
---|
| 107 | *
|
---|
| 108 | * @param string $name The `name` parameter's value depends on the target
|
---|
| 109 | * resource for the request, namely
|
---|
| 110 | * [`roles`](https://cloud.google.com/iam/reference/rest/v1/roles),
|
---|
| 111 | * [`projects`](https://cloud.google.com/iam/reference/rest/v1/projects.roles),
|
---|
| 112 | * or [`organizations`](https://cloud.google.com/iam/reference/rest/v1/organizat
|
---|
| 113 | * ions.roles). Each resource type's `name` value format is described below: *
|
---|
| 114 | * [`roles.get()`](https://cloud.google.com/iam/reference/rest/v1/roles/get):
|
---|
| 115 | * `roles/{ROLE_NAME}`. This method returns results from all [predefined
|
---|
| 116 | * roles](https://cloud.google.com/iam/docs/understanding-
|
---|
| 117 | * roles#predefined_roles) in Cloud IAM. Example request URL:
|
---|
| 118 | * `https://iam.googleapis.com/v1/roles/{ROLE_NAME}` * [`projects.roles.get()`](
|
---|
| 119 | * https://cloud.google.com/iam/reference/rest/v1/projects.roles/get):
|
---|
| 120 | * `projects/{PROJECT_ID}/roles/{CUSTOM_ROLE_ID}`. This method returns only
|
---|
| 121 | * [custom roles](https://cloud.google.com/iam/docs/understanding-custom-roles)
|
---|
| 122 | * that have been created at the project level. Example request URL:
|
---|
| 123 | * `https://iam.googleapis.com/v1/projects/{PROJECT_ID}/roles/{CUSTOM_ROLE_ID}`
|
---|
| 124 | * * [`organizations.roles.get()`](https://cloud.google.com/iam/reference/rest/v
|
---|
| 125 | * 1/organizations.roles/get):
|
---|
| 126 | * `organizations/{ORGANIZATION_ID}/roles/{CUSTOM_ROLE_ID}`. This method returns
|
---|
| 127 | * only [custom roles](https://cloud.google.com/iam/docs/understanding-custom-
|
---|
| 128 | * roles) that have been created at the organization level. Example request URL:
|
---|
| 129 | * `https://iam.googleapis.com/v1/organizations/{ORGANIZATION_ID}/roles/{CUSTOM_
|
---|
| 130 | * ROLE_ID}` Note: Wildcard (*) values are invalid; you must specify a complete
|
---|
| 131 | * project ID or organization ID.
|
---|
| 132 | * @param array $optParams Optional parameters.
|
---|
| 133 | * @return Role
|
---|
| 134 | */
|
---|
| 135 | public function get($name, $optParams = [])
|
---|
| 136 | {
|
---|
| 137 | $params = ['name' => $name];
|
---|
| 138 | $params = array_merge($params, $optParams);
|
---|
| 139 | return $this->call('get', [$params], Role::class);
|
---|
| 140 | }
|
---|
| 141 | /**
|
---|
| 142 | * Lists every predefined Role that IAM supports, or every custom role that is
|
---|
| 143 | * defined for an organization or project. (roles.listOrganizationsRoles)
|
---|
| 144 | *
|
---|
| 145 | * @param string $parent The `parent` parameter's value depends on the target
|
---|
| 146 | * resource for the request, namely
|
---|
| 147 | * [`roles`](https://cloud.google.com/iam/reference/rest/v1/roles),
|
---|
| 148 | * [`projects`](https://cloud.google.com/iam/reference/rest/v1/projects.roles),
|
---|
| 149 | * or [`organizations`](https://cloud.google.com/iam/reference/rest/v1/organizat
|
---|
| 150 | * ions.roles). Each resource type's `parent` value format is described below: *
|
---|
| 151 | * [`roles.list()`](https://cloud.google.com/iam/reference/rest/v1/roles/list):
|
---|
| 152 | * An empty string. This method doesn't require a resource; it simply returns
|
---|
| 153 | * all [predefined roles](https://cloud.google.com/iam/docs/understanding-
|
---|
| 154 | * roles#predefined_roles) in Cloud IAM. Example request URL:
|
---|
| 155 | * `https://iam.googleapis.com/v1/roles` * [`projects.roles.list()`](https://clo
|
---|
| 156 | * ud.google.com/iam/reference/rest/v1/projects.roles/list):
|
---|
| 157 | * `projects/{PROJECT_ID}`. This method lists all project-level [custom
|
---|
| 158 | * roles](https://cloud.google.com/iam/docs/understanding-custom-roles). Example
|
---|
| 159 | * request URL: `https://iam.googleapis.com/v1/projects/{PROJECT_ID}/roles` * [`
|
---|
| 160 | * organizations.roles.list()`](https://cloud.google.com/iam/reference/rest/v1/o
|
---|
| 161 | * rganizations.roles/list): `organizations/{ORGANIZATION_ID}`. This method
|
---|
| 162 | * lists all organization-level [custom roles](https://cloud.google.com/iam/docs
|
---|
| 163 | * /understanding-custom-roles). Example request URL:
|
---|
| 164 | * `https://iam.googleapis.com/v1/organizations/{ORGANIZATION_ID}/roles` Note:
|
---|
| 165 | * Wildcard (*) values are invalid; you must specify a complete project ID or
|
---|
| 166 | * organization ID.
|
---|
| 167 | * @param array $optParams Optional parameters.
|
---|
| 168 | *
|
---|
| 169 | * @opt_param int pageSize Optional limit on the number of roles to include in
|
---|
| 170 | * the response. The default is 300, and the maximum is 1,000.
|
---|
| 171 | * @opt_param string pageToken Optional pagination token returned in an earlier
|
---|
| 172 | * ListRolesResponse.
|
---|
| 173 | * @opt_param bool showDeleted Include Roles that have been deleted.
|
---|
| 174 | * @opt_param string view Optional view for the returned Role objects. When
|
---|
| 175 | * `FULL` is specified, the `includedPermissions` field is returned, which
|
---|
| 176 | * includes a list of all permissions in the role. The default value is `BASIC`,
|
---|
| 177 | * which does not return the `includedPermissions` field.
|
---|
| 178 | * @return ListRolesResponse
|
---|
| 179 | */
|
---|
| 180 | public function listOrganizationsRoles($parent, $optParams = [])
|
---|
| 181 | {
|
---|
| 182 | $params = ['parent' => $parent];
|
---|
| 183 | $params = array_merge($params, $optParams);
|
---|
| 184 | return $this->call('list', [$params], ListRolesResponse::class);
|
---|
| 185 | }
|
---|
| 186 | /**
|
---|
| 187 | * Updates the definition of a custom Role. (roles.patch)
|
---|
| 188 | *
|
---|
| 189 | * @param string $name The `name` parameter's value depends on the target
|
---|
| 190 | * resource for the request, namely
|
---|
| 191 | * [`projects`](https://cloud.google.com/iam/reference/rest/v1/projects.roles)
|
---|
| 192 | * or [`organizations`](https://cloud.google.com/iam/reference/rest/v1/organizat
|
---|
| 193 | * ions.roles). Each resource type's `name` value format is described below: * [
|
---|
| 194 | * `projects.roles.patch()`](https://cloud.google.com/iam/reference/rest/v1/proj
|
---|
| 195 | * ects.roles/patch): `projects/{PROJECT_ID}/roles/{CUSTOM_ROLE_ID}`. This
|
---|
| 196 | * method updates only [custom roles](https://cloud.google.com/iam/docs
|
---|
| 197 | * /understanding-custom-roles) that have been created at the project level.
|
---|
| 198 | * Example request URL:
|
---|
| 199 | * `https://iam.googleapis.com/v1/projects/{PROJECT_ID}/roles/{CUSTOM_ROLE_ID}`
|
---|
| 200 | * * [`organizations.roles.patch()`](https://cloud.google.com/iam/reference/rest
|
---|
| 201 | * /v1/organizations.roles/patch):
|
---|
| 202 | * `organizations/{ORGANIZATION_ID}/roles/{CUSTOM_ROLE_ID}`. This method updates
|
---|
| 203 | * only [custom roles](https://cloud.google.com/iam/docs/understanding-custom-
|
---|
| 204 | * roles) that have been created at the organization level. Example request URL:
|
---|
| 205 | * `https://iam.googleapis.com/v1/organizations/{ORGANIZATION_ID}/roles/{CUSTOM_
|
---|
| 206 | * ROLE_ID}` Note: Wildcard (*) values are invalid; you must specify a complete
|
---|
| 207 | * project ID or organization ID.
|
---|
| 208 | * @param Role $postBody
|
---|
| 209 | * @param array $optParams Optional parameters.
|
---|
| 210 | *
|
---|
| 211 | * @opt_param string updateMask A mask describing which fields in the Role have
|
---|
| 212 | * changed.
|
---|
| 213 | * @return Role
|
---|
| 214 | */
|
---|
| 215 | public function patch($name, Role $postBody, $optParams = [])
|
---|
| 216 | {
|
---|
| 217 | $params = ['name' => $name, 'postBody' => $postBody];
|
---|
| 218 | $params = array_merge($params, $optParams);
|
---|
| 219 | return $this->call('patch', [$params], Role::class);
|
---|
| 220 | }
|
---|
| 221 | /**
|
---|
| 222 | * Undeletes a custom Role. (roles.undelete)
|
---|
| 223 | *
|
---|
| 224 | * @param string $name The `name` parameter's value depends on the target
|
---|
| 225 | * resource for the request, namely
|
---|
| 226 | * [`projects`](https://cloud.google.com/iam/reference/rest/v1/projects.roles)
|
---|
| 227 | * or [`organizations`](https://cloud.google.com/iam/reference/rest/v1/organizat
|
---|
| 228 | * ions.roles). Each resource type's `name` value format is described below: * [
|
---|
| 229 | * `projects.roles.undelete()`](https://cloud.google.com/iam/reference/rest/v1/p
|
---|
| 230 | * rojects.roles/undelete): `projects/{PROJECT_ID}/roles/{CUSTOM_ROLE_ID}`. This
|
---|
| 231 | * method undeletes only [custom roles](https://cloud.google.com/iam/docs
|
---|
| 232 | * /understanding-custom-roles) that have been created at the project level.
|
---|
| 233 | * Example request URL:
|
---|
| 234 | * `https://iam.googleapis.com/v1/projects/{PROJECT_ID}/roles/{CUSTOM_ROLE_ID}`
|
---|
| 235 | * * [`organizations.roles.undelete()`](https://cloud.google.com/iam/reference/r
|
---|
| 236 | * est/v1/organizations.roles/undelete):
|
---|
| 237 | * `organizations/{ORGANIZATION_ID}/roles/{CUSTOM_ROLE_ID}`. This method
|
---|
| 238 | * undeletes only [custom roles](https://cloud.google.com/iam/docs
|
---|
| 239 | * /understanding-custom-roles) that have been created at the organization
|
---|
| 240 | * level. Example request URL: `https://iam.googleapis.com/v1/organizations/{ORG
|
---|
| 241 | * ANIZATION_ID}/roles/{CUSTOM_ROLE_ID}` Note: Wildcard (*) values are invalid;
|
---|
| 242 | * you must specify a complete project ID or organization ID.
|
---|
| 243 | * @param UndeleteRoleRequest $postBody
|
---|
| 244 | * @param array $optParams Optional parameters.
|
---|
| 245 | * @return Role
|
---|
| 246 | */
|
---|
| 247 | public function undelete($name, UndeleteRoleRequest $postBody, $optParams = [])
|
---|
| 248 | {
|
---|
| 249 | $params = ['name' => $name, 'postBody' => $postBody];
|
---|
| 250 | $params = array_merge($params, $optParams);
|
---|
| 251 | return $this->call('undelete', [$params], Role::class);
|
---|
| 252 | }
|
---|
| 253 | }
|
---|
| 254 |
|
---|
| 255 | // Adding a class alias for backwards compatibility with the previous class name.
|
---|
| 256 | class_alias(OrganizationsRoles::class, 'Google_Service_Iam_Resource_OrganizationsRoles');
|
---|