Struct AccessApprovalSettings 

pub struct AccessApprovalSettings {

    pub active_key_version: Option<String>,
    pub ancestor_has_active_key_version: Option<bool>,
    pub approval_policy: Option<CustomerApprovalApprovalPolicy>,
    pub effective_approval_policy: Option<CustomerApprovalApprovalPolicy>,
    pub enrolled_ancestor: Option<bool>,
    pub enrolled_services: Option<Vec<EnrolledService>>,
    pub invalid_key_version: Option<bool>,
    pub name: Option<String>,
    pub notification_emails: Option<Vec<String>>,
    pub notification_pubsub_topic: Option<String>,
    pub prefer_no_broad_approval_requests: Option<bool>,
    pub preferred_request_expiration_days: Option<i32>,
    pub request_scope_max_width_preference: Option<String>,
    pub require_customer_visible_justification: Option<bool>,
}

Settings on a Project/Folder/Organization related to Access Approval.

Activities

This type is used in activities, which are methods you may call on this type or where this type is involved in. The list links the activity name, along with information about where it is used (one of request and response).

• get access approval settings folders (response)
• update access approval settings folders (request|response)
• get access approval settings organizations (response)
• update access approval settings organizations (request|response)
• get access approval settings projects (response)
• update access approval settings projects (request|response)

Fields

active_key_version: Option<String>

The asymmetric crypto key version to use for signing approval requests. Empty active_key_version indicates that a Google-managed key should be used for signing. This property will be ignored if set by an ancestor of this resource, and new non-empty values may not be set.

ancestor_has_active_key_version: Option<bool>

Output only. This field is read only (not settable via UpdateAccessApprovalSettings method). If the field is true, that indicates that an ancestor of this Project or Folder has set active_key_version (this field will always be unset for the organization since organizations do not have ancestors).

approval_policy: Option<CustomerApprovalApprovalPolicy>

Optional. Policy configuration for Access Approval that sets the operating mode. The available policies are Transparency, Streamlined Support, and Approval Required.

effective_approval_policy: Option<CustomerApprovalApprovalPolicy>

Output only. Effective policy applied for Access Approval, inclusive of inheritance.

enrolled_ancestor: Option<bool>

Output only. This field is read only (not settable via UpdateAccessApprovalSettings method). If the field is true, that indicates that at least one service is enrolled for Access Approval in one or more ancestors of the Project or Folder (this field will always be unset for the organization since organizations do not have ancestors).

enrolled_services: Option<Vec<EnrolledService>>

A list of Google Cloud Services for which the given resource has Access Approval enrolled. Access requests for the resource given by name against any of these services contained here will be required to have explicit approval. If name refers to an organization, enrollment can be done for individual services. If name refers to a folder or project, enrollment can only be done on an all or nothing basis. If a cloud_product is repeated in this list, the first entry will be honored and all following entries will be discarded.

invalid_key_version: Option<bool>

Output only. This field is read only (not settable via UpdateAccessApprovalSettings method). If the field is true, that indicates that there is some configuration issue with the active_key_version configured at this level in the resource hierarchy (e.g. it doesn’t exist or the Access Approval service account doesn’t have the correct permissions on it, etc.) This key version is not necessarily the effective key version at this level, as key versions are inherited top-down.

name: Option<String>

The resource name of the settings. Format is one of: * “projects/{project}/accessApprovalSettings” * “folders/{folder}/accessApprovalSettings” * “organizations/{organization}/accessApprovalSettings”

notification_emails: Option<Vec<String>>

A list of email addresses to which notifications relating to approval requests should be sent. Notifications relating to a resource will be sent to all emails in the settings of ancestor resources of that resource. A maximum of 50 email addresses are allowed.

notification_pubsub_topic: Option<String>

Optional. A pubsub topic that notifications relating to access approval are published to. Notifications include pre-approved accesses.

prefer_no_broad_approval_requests: Option<bool>

This field is used to set a preference for granularity of an access approval request. If true, Google personnel will be asked to send resource-level requests when possible. If false, Google personnel will be asked to send requests at the project level.

preferred_request_expiration_days: Option<i32>

Set the default access approval request expiration time. This value is able to be set directly by the customer at the time of approval, overriding this suggested value. We recommend setting this value to 30 days.

request_scope_max_width_preference: Option<String>

Optional. A setting that indicates the maximum scope of an Access Approval request: either organization, folder, or project. Google administrators will be asked to send requests no broader than the configured scope.

require_customer_visible_justification: Option<bool>

Optional. When enabled, Google will only be able to send approval requests for access reasons with a customer accessible case ID in the reason detail. Also known as “Require customer initiated support case justification”

Trait Implementations

impl Clone for AccessApprovalSettings

fn clone(&self) -> AccessApprovalSettings

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AccessApprovalSettings

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AccessApprovalSettings

fn default() -> AccessApprovalSettings

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for AccessApprovalSettings

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for AccessApprovalSettings

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl RequestValue for AccessApprovalSettings

impl ResponseResult for AccessApprovalSettings