Package com.google.cloud.privilegedaccessmanager.v1


@Generated("by gapic-generator-java") package com.google.cloud.privilegedaccessmanager.v1
A client to Privileged Access Manager API

The interfaces provided are listed below, along with usage samples.

======================= PrivilegedAccessManagerClient =======================

Service Description: This API allows customers to manage temporary, request based privileged access to their resources.

It defines the following resource model:

  • A collection of `Entitlement` resources. An entitlement allows configuring (among other things):

* Some kind of privileged access that users can request. * A set of users called _requesters_ who can request this access. * A maximum duration for which the access can be requested. * An optional approval workflow which must be satisfied before access is granted.

  • A collection of `Grant` resources. A grant is a request by a requester to get the privileged access specified in an entitlement for some duration.

After the approval workflow as specified in the entitlement is satisfied, the specified access is given to the requester. The access is automatically taken back after the requested duration is over.

Sample for PrivilegedAccessManagerClient:


 // This snippet has been automatically generated and should be regarded as a code template only.
 // It will require modifications to work:
 // - It may require correct/in-range values for request initialization.
 // - It may require specifying regional endpoints when creating the service client as shown in
 // https://cloud.google.com/java/docs/setup#configure_endpoints_for_the_client_library
 try (PrivilegedAccessManagerClient privilegedAccessManagerClient =
     PrivilegedAccessManagerClient.create()) {
   CheckOnboardingStatusRequest request =
       CheckOnboardingStatusRequest.newBuilder()
           .setParent(LocationName.of("[PROJECT]", "[LOCATION]").toString())
           .build();
   CheckOnboardingStatusResponse response =
       privilegedAccessManagerClient.checkOnboardingStatus(request);
 }