A stub to allow clients to do ListenableFuture-style rpc calls to service
PrivilegedAccessManager.
This API allows customers to manage temporary, request based privileged
access to their resources.
It defines the following resource model:
A collection of Entitlement resources. An entitlement allows configuring
(among other things):
Some kind of privileged access that users can request.
A set of users called requesters who can request this access.
A maximum duration for which the access can be requested.
An optional approval workflow which must be satisfied before access is
granted.
A collection of Grant resources. A grant is a request by a requester to
get the privileged access specified in an entitlement for some duration.
After the approval workflow as specified in the entitlement is satisfied,
the specified access is given to the requester. The access is automatically
taken back after the requested duration is over.
ApproveGrant is used to approve a grant. This method can only be called
on a grant when it's in the APPROVAL_AWAITED state. This operation can't
be undone.
CheckOnboardingStatus reports the onboarding status for a
project/folder/organization. Any findings reported by this API need to be
fixed before PAM can be used on the resource.
Updates the entitlement specified in the request. Updated fields in the
entitlement need to be specified in an update mask. The changes made to an
entitlement are applicable only on future grants of the entitlement.
However, if new approvers are added or existing approvers are removed from
the approval workflow, the changes are effective on existing grants.
The following fields are not supported for updates:
All immutable fields
Entitlement name
Resource name
Resource type
Adding an approval workflow in an entitlement which previously had no
approval workflow.
Deleting the approval workflow from an entitlement.
Adding or deleting a step in the approval workflow (only one step is
supported)
Note that updates are allowed on the list of approvers in an approval
workflow step.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-02-03 UTC."],[],[]]