Policy
コレクションでコンテンツを整理
必要に応じて、コンテンツの保存と分類を行います。
JSON 表現 |
{
"assignments": [
{
object (Assignment )
}
],
"etag": string
} |
フィールド |
assignments[] |
object (Assignment )
assignments 件のリスト
|
etag |
string (bytes format)
etag は、オプティミスティック同時実行制御でポリシーの同時更新による相互上書きを防ぐために使用されます。競合状態を回避するために、システムが読み取り / 変更 / 書き込みサイクルで etag を使用して、ポリシーの更新を行うことを強くおすすめします。etag は policies.get のレスポンスで返されます。システムは、変更が同じバージョンのポリシーに適用されるように、その etag を policies.set のリクエストに含める必要があります。 policies.get の呼び出しで etag が指定されていない場合、既存のポリシーは盲目的に上書きされます。
Base64 でエンコードされた文字列。
|
割り当て
JSON 表現 |
{
"role": string,
"members": [
string
]
} |
フィールド |
role |
string
必須。members に割り当てるロール。
|
members[] |
string
ロールが割り当てられている ID。以下のいずれかの値が設定されます。
|
特に記載のない限り、このページのコンテンツはクリエイティブ・コモンズの表示 4.0 ライセンスにより使用許諾されます。コードサンプルは Apache 2.0 ライセンスにより使用許諾されます。詳しくは、Google Developers サイトのポリシーをご覧ください。Java は Oracle および関連会社の登録商標です。
最終更新日 2025-07-25 UTC。
[null,null,["最終更新日 2025-07-25 UTC。"],[[["\u003cp\u003eThis document defines an access control policy for resources, utilizing JSON for representation.\u003c/p\u003e\n"],["\u003cp\u003eThe policy includes assignments which associate members with specific roles.\u003c/p\u003e\n"],["\u003cp\u003eRoles determine the level of access granted to assigned members, which can be individuals or groups.\u003c/p\u003e\n"],["\u003cp\u003eAn \u003ccode\u003eetag\u003c/code\u003e is used for optimistic concurrency control, preventing simultaneous updates from overwriting each other.\u003c/p\u003e\n"]]],["The content defines access control policies for resources using JSON. A policy includes an array of \"assignments\" and an \"etag\" for concurrency control. Assignments link \"members\" to a specified \"role,\" with members being Google account emails or group emails. Systems use the etag in read-modify-write cycles to prevent overwriting. The \"role\" field is a required string, and members represent identities granted the specified role.\n"],null,["# Policy\n\n- [JSON representation](#SCHEMA_REPRESENTATION)\n- [Assignment](#Assignment)\n - [JSON representation](#Assignment.SCHEMA_REPRESENTATION)\n\nDefines an access control policy to the resources.\n\n| JSON representation |\n|-------------------------------------------------------------------------------------------------------------------------------|\n| ``` { \"assignments\": [ { object (/spectrum-access-system/reference/rest/v1alpha1/Policy#Assignment) } ], \"etag\": string } ``` |\n\n| Fields ||\n|-----------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| `assignments[]` | `object (`[Assignment](/spectrum-access-system/reference/rest/v1alpha1/Policy#Assignment)`)` List of [assignments](/spectrum-access-system/reference/rest/v1alpha1/Policy#Assignment) |\n| `etag` | `string (`[bytes](https://developers.google.com/discovery/v1/type-format)` format)` The etag is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the etag in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An etag is returned in the response to [policies.get](/spectrum-access-system/reference/rest/v1alpha1/policies/get#spectrum.sas.portal.v1alpha1.PolicyService.GetPolicy), and systems are expected to put that etag in the request to [policies.set](/spectrum-access-system/reference/rest/v1alpha1/policies/set#spectrum.sas.portal.v1alpha1.PolicyService.SetPolicy) to ensure that their change will be applied to the same version of the policy. If no etag is provided in the call to [policies.get](/spectrum-access-system/reference/rest/v1alpha1/policies/get#spectrum.sas.portal.v1alpha1.PolicyService.GetPolicy), then the existing policy is overwritten blindly. A base64-encoded string. |\n\nAssignment\n----------\n\nAssociates `members` with a `role`.\n\n| JSON representation |\n|---------------------------------------------------|\n| ``` { \"role\": string, \"members\": [ string ] } ``` |\n\n| Fields ||\n|-------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| `role` | `string` Required. Role that is assigned to `members`. |\n| `members[]` | `string` The identities the role is assigned to. It can have the following values: - `{user_email}`: An email address that represents a specific Google account. For example: `alice@gmail.com`. - `{group_email}`: An email address that represents a Google group. For example, `viewers@gmail.com`. |"]]