The principal in the request matches the principal in the policy. The
principal can be included directly or indirectly:
A principal is included directly if that principal is listed in the
role binding.
A principal is included indirectly if that principal is in a Google
group, Google Workspace account, or Cloud Identity domain that is listed
in the policy.
MembershipNotMatched
The principal in the request doesn't match the principal in the policy.
MembershipUnknownInfo
The principal in the policy is a group or domain, and the sender of the
request doesn't have permission to view whether the principal in the
request is a member of the group or domain.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-03-21 UTC."],[[["The `MembershipMatchingState` enum in the Policy Troubleshooter v3 API determines whether a request's principal matches a policy's principal."],["Possible states include `MembershipMatched` (direct or indirect inclusion), `MembershipNotMatched`, `MembershipUnknownInfo` (lack of permission to verify group/domain membership), and `MembershipUnknownUnsupported` (unsupported principal type)."],["The enum is found within the `Google.Cloud.PolicyTroubleshooter.Iam.V3` namespace in the `Google.Cloud.PolicyTroubleshooter.Iam.V3.dll` assembly."],["The latest version available for the `MembershipMatchingState` enum is 1.2.0."]]],[]]
