Package com.google.cloud.privilegedaccessmanager.v1

Class PrivilegedAccessManagerGrpc.PrivilegedAccessManagerFutureStub

java.lang.Object
io.grpc.stub.AbstractStub<S>
io.grpc.stub.AbstractFutureStub<PrivilegedAccessManagerGrpc.PrivilegedAccessManagerFutureStub>
com.google.cloud.privilegedaccessmanager.v1.PrivilegedAccessManagerGrpc.PrivilegedAccessManagerFutureStub
Enclosing class:
PrivilegedAccessManagerGrpc
public static final class PrivilegedAccessManagerGrpc.PrivilegedAccessManagerFutureStub extends io.grpc.stub.AbstractFutureStub<PrivilegedAccessManagerGrpc.PrivilegedAccessManagerFutureStub>
A stub to allow clients to do ListenableFuture-style rpc calls to service PrivilegedAccessManager. 
 This API allows customers to manage temporary, request based privileged
 access to their resources.
 It defines the following resource model:
 * A collection of `Entitlement` resources. An entitlement allows configuring
   (among other things):
   * Some kind of privileged access that users can request.
   * A set of users called _requesters_ who can request this access.
   * A maximum duration for which the access can be requested.
   * An optional approval workflow which must be satisfied before access is
     granted.
 * A collection of `Grant` resources. A grant is a request by a requester to
   get the privileged access specified in an entitlement for some duration.
   After the approval workflow as specified in the entitlement is satisfied,
   the specified access is given to the requester. The access is automatically
   taken back after the requested duration is over.

  • Method Details

    • build

      protected PrivilegedAccessManagerGrpc.PrivilegedAccessManagerFutureStub build(io.grpc.Channel channel, io.grpc.CallOptions callOptions)
      Specified by:
      build in class io.grpc.stub.AbstractStub<PrivilegedAccessManagerGrpc.PrivilegedAccessManagerFutureStub>

    • checkOnboardingStatus

      public com.google.common.util.concurrent.ListenableFuture<CheckOnboardingStatusResponse> checkOnboardingStatus(CheckOnboardingStatusRequest request)
       `CheckOnboardingStatus` reports the onboarding status for a
 project/folder/organization. Any findings reported by this API need to be
 fixed before PAM can be used on the resource.

    • listEntitlements

      public com.google.common.util.concurrent.ListenableFuture<ListEntitlementsResponse> listEntitlements(ListEntitlementsRequest request)
       Lists entitlements in a given project/folder/organization and location.

    • searchEntitlements

      public com.google.common.util.concurrent.ListenableFuture<SearchEntitlementsResponse> searchEntitlements(SearchEntitlementsRequest request)
       `SearchEntitlements` returns entitlements on which the caller has the
 specified access.

    • getEntitlement

      public com.google.common.util.concurrent.ListenableFuture<Entitlement> getEntitlement(GetEntitlementRequest request)
       Gets details of a single entitlement.

    • createEntitlement

      public com.google.common.util.concurrent.ListenableFuture<Operation> createEntitlement(CreateEntitlementRequest request)
       Creates a new entitlement in a given project/folder/organization and
 location.

    • deleteEntitlement

      public com.google.common.util.concurrent.ListenableFuture<Operation> deleteEntitlement(DeleteEntitlementRequest request)
       Deletes a single entitlement. This method can only be called when there
 are no in-progress (`ACTIVE`/`ACTIVATING`/`REVOKING`) grants under the
 entitlement.

    • updateEntitlement

      public com.google.common.util.concurrent.ListenableFuture<Operation> updateEntitlement(UpdateEntitlementRequest request)
       Updates the entitlement specified in the request. Updated fields in the
 entitlement need to be specified in an update mask. The changes made to an
 entitlement are applicable only on future grants of the entitlement.
 However, if new approvers are added or existing approvers are removed from
 the approval workflow, the changes are effective on existing grants.
 The following fields are not supported for updates:
  * All immutable fields
  * Entitlement name
  * Resource name
  * Resource type
  * Adding an approval workflow in an entitlement which previously had no
    approval workflow.
  * Deleting the approval workflow from an entitlement.
  * Adding or deleting a step in the approval workflow (only one step is
    supported)
 Note that updates are allowed on the list of approvers in an approval
 workflow step.

    • listGrants

      public com.google.common.util.concurrent.ListenableFuture<ListGrantsResponse> listGrants(ListGrantsRequest request)
       Lists grants for a given entitlement.

    • searchGrants

      public com.google.common.util.concurrent.ListenableFuture<SearchGrantsResponse> searchGrants(SearchGrantsRequest request)
       `SearchGrants` returns grants that are related to the calling user in the
 specified way.

    • getGrant

      public com.google.common.util.concurrent.ListenableFuture<Grant> getGrant(GetGrantRequest request)
       Get details of a single grant.

    • createGrant

      public com.google.common.util.concurrent.ListenableFuture<Grant> createGrant(CreateGrantRequest request)
       Creates a new grant in a given project/folder/organization and
 location.

    • approveGrant

      public com.google.common.util.concurrent.ListenableFuture<Grant> approveGrant(ApproveGrantRequest request)
       `ApproveGrant` is used to approve a grant. This method can only be called
 on a grant when it's in the `APPROVAL_AWAITED` state. This operation can't
 be undone.

    • denyGrant

      public com.google.common.util.concurrent.ListenableFuture<Grant> denyGrant(DenyGrantRequest request)
       `DenyGrant` is used to deny a grant. This method can only be called on a
 grant when it's in the `APPROVAL_AWAITED` state. This operation can't be
 undone.

    • revokeGrant

      public com.google.common.util.concurrent.ListenableFuture<Operation> revokeGrant(RevokeGrantRequest request)
       `RevokeGrant` is used to immediately revoke access for a grant. This method
 can be called when the grant is in a non-terminal state.