📄 Source: GroupsMemberships.php
<?php
/*
* Copyright 2014 Google Inc.
*
* Licensed under the Apache License, Version 2.0 (the "License"); you may not
* use this file except in compliance with the License. You may obtain a copy of
* the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
* WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
* License for the specific language governing permissions and limitations under
* the License.
*/
namespace Google\Service\CloudIdentity\Resource;
use Google\Service\CloudIdentity\CheckTransitiveMembershipResponse;
use Google\Service\CloudIdentity\ListMembershipsResponse;
use Google\Service\CloudIdentity\LookupMembershipNameResponse;
use Google\Service\CloudIdentity\Membership;
use Google\Service\CloudIdentity\ModifyMembershipRolesRequest;
use Google\Service\CloudIdentity\ModifyMembershipRolesResponse;
use Google\Service\CloudIdentity\Operation;
use Google\Service\CloudIdentity\SearchDirectGroupsResponse;
use Google\Service\CloudIdentity\SearchTransitiveGroupsResponse;
use Google\Service\CloudIdentity\SearchTransitiveMembershipsResponse;
/**
* The "memberships" collection of methods.
* Typical usage is:
* <code>
* $cloudidentityService = new Google\Service\CloudIdentity(...);
* $memberships = $cloudidentityService->groups_memberships;
* </code>
*/
class GroupsMemberships extends \Google\Service\Resource
{
/**
* Check a potential member for membership in a group. **Note:** This feature is
* only available to Google Workspace Enterprise Standard, Enterprise Plus, and
* Enterprise for Education; and Cloud Identity Premium accounts. If the account
* of the member is not one of these, a 403 (PERMISSION_DENIED) HTTP status code
* will be returned. A member has membership to a group as long as there is a
* single viewable transitive membership between the group and the member. The
* actor must have view permissions to at least one transitive membership
* between the member and group. (memberships.checkTransitiveMembership)
*
* @param string $parent [Resource
* name](https://cloud.google.com/apis/design/resource_names) of the group to
* check the transitive membership in. Format: `groups/{group}`, where `group`
* is the unique id assigned to the Group to which the Membership belongs to.
* @param array $optParams Optional parameters.
*
* @opt_param string query Required. A CEL expression that MUST include member
* specification. This is a `required` field. Certain groups are uniquely
* identified by both a 'member_key_id' and a 'member_key_namespace', which
* requires an additional query input: 'member_key_namespace'. Example query:
* `member_key_id == 'member_key_id_value'`
* @return CheckTransitiveMembershipResponse
* @throws \Google\Service\Exception
*/
public function checkTransitiveMembership($parent, $optParams = [])
{
$params = ['parent' => $parent];
$params = array_merge($params, $optParams);
return $this->call('checkTransitiveMembership', [$params], CheckTransitiveMembershipResponse::class);
}
/**
* Creates a `Membership`. (memberships.create)
*
* @param string $parent Required. The parent `Group` resource under which to
* create the `Membership`. Must be of the form `groups/{group}`.
* @param Membership $postBody
* @param array $optParams Optional parameters.
* @return Operation
* @throws \Google\Service\Exception
*/
public function create($parent, Membership $postBody, $optParams = [])
{
$params = ['parent' => $parent, 'postBody' => $postBody];
$params = array_merge($params, $optParams);
return $this->call('create', [$params], Operation::class);
}
/**
* Deletes a `Membership`. (memberships.delete)
*
* @param string $name Required. The [resource
* name](https://cloud.google.com/apis/design/resource_names) of the
* `Membership` to delete. Must be of the form
* `groups/{group}/memberships/{membership}`
* @param array $optParams Optional parameters.
* @return Operation
* @throws \Google\Service\Exception
*/
public function delete($name, $optParams = [])
{
$params = ['name' => $name];
$params = array_merge($params, $optParams);
return $this->call('delete', [$params], Operation::class);
}
/**
* Retrieves a `Membership`. (memberships.get)
*
* @param string $name Required. The [resource
* name](https://cloud.google.com/apis/design/resource_names) of the
* `Membership` to retrieve. Must be of the form
* `groups/{group}/memberships/{membership}`.
* @param array $optParams Optional parameters.
* @return Membership
* @throws \Google\Service\Exception
*/
public function get($name, $optParams = [])
{
$params = ['name' => $name];
$params = array_merge($params, $optParams);
return $this->call('get', [$params], Membership::class);
}
/**
* Get a membership graph of just a member or both a member and a group.
* **Note:** This feature is only available to Google Workspace Enterprise
* Standard, Enterprise Plus, and Enterprise for Education; and Cloud Identity
* Premium accounts. If the account of the member is not one of these, a 403
* (PERMISSION_DENIED) HTTP status code will be returned. Given a member, the
* response will contain all membership paths from the member. Given both a
* group and a member, the response will contain all membership paths between
* the group and the member. (memberships.getMembershipGraph)
*
* @param string $parent Required. [Resource
* name](https://cloud.google.com/apis/design/resource_names) of the group to
* search transitive memberships in. Format: `groups/{group}`, where `group` is
* the unique ID assigned to the Group to which the Membership belongs to. group
* can be a wildcard collection id "-". When a group is specified, the
* membership graph will be constrained to paths between the member (defined in
* the query) and the parent. If a wildcard collection is provided, all
* membership paths connected to the member will be returned.
* @param array $optParams Optional parameters.
*
* @opt_param string query Required. A CEL expression that MUST include member
* specification AND label(s). Certain groups are uniquely identified by both a
* 'member_key_id' and a 'member_key_namespace', which requires an additional
* query input: 'member_key_namespace'. Example query: `member_key_id ==
* 'member_key_id_value' && in labels`
* @return Operation
* @throws \Google\Service\Exception
*/
public function getMembershipGraph($parent, $optParams = [])
{
$params = ['parent' => $parent];
$params = array_merge($params, $optParams);
return $this->call('getMembershipGraph', [$params], Operation::class);
}
/**
* Lists the `Membership`s within a `Group`. (memberships.listGroupsMemberships)
*
* @param string $parent Required. The parent `Group` resource under which to
* lookup the `Membership` name. Must be of the form `groups/{group}`.
* @param array $optParams Optional parameters.
*
* @opt_param int pageSize The maximum number of results to return. Note that
* the number of results returned may be less than this value even if there are
* more available results. To fetch all results, clients must continue calling
* this method repeatedly until the response no longer contains a
* `next_page_token`. If unspecified, defaults to 200 for `GroupView.BASIC` and
* to 50 for `GroupView.FULL`. Must not be greater than 1000 for
* `GroupView.BASIC` or 500 for `GroupView.FULL`.
* @opt_param string pageToken The `next_page_token` value returned from a
* previous search request, if any.
* @opt_param string view The level of detail to be returned. If unspecified,
* defaults to `View.BASIC`.
* @return ListMembershipsResponse
* @throws \Google\Service\Exception
*/
public function listGroupsMemberships($parent, $optParams = [])
{
$params = ['parent' => $parent];
$params = array_merge($params, $optParams);
return $this->call('list', [$params], ListMembershipsResponse::class);
}
/**
* Looks up the [resource
* name](https://cloud.google.com/apis/design/resource_names) of a `Membership`
* by its `EntityKey`. (memberships.lookup)
*
* @param string $parent Required. The parent `Group` resource under which to
* lookup the `Membership` name. Must be of the form `groups/{group}`.
* @param array $optParams Optional parameters.
*
* @opt_param string memberKey.id The ID of the entity. For Google-managed
* entities, the `id` should be the email address of an existing group or user.
* Email addresses need to adhere to [name guidelines for users and
* groups](https://support.google.com/a/answer/9193374). For external-identity-
* mapped entities, the `id` must be a string conforming to the Identity
* Source's requirements. Must be unique within a `namespace`.
* @opt_param string memberKey.namespace The namespace in which the entity
* exists. If not specified, the `EntityKey` represents a Google-managed entity
* such as a Google user or a Google Group. If specified, the `EntityKey`
* represents an external-identity-mapped group. The namespace must correspond
* to an identity source created in Admin Console and must be in the form of
* `identitysources/{identity_source}`.
* @return LookupMembershipNameResponse
* @throws \Google\Service\Exception
*/
public function lookup($parent, $optParams = [])
{
$params = ['parent' => $parent];
$params = array_merge($params, $optParams);
return $this->call('lookup', [$params], LookupMembershipNameResponse::class);
}
/**
* Modifies the `MembershipRole`s of a `Membership`.
* (memberships.modifyMembershipRoles)
*
* @param string $name Required. The [resource
* name](https://cloud.google.com/apis/design/resource_names) of the
* `Membership` whose roles are to be modified. Must be of the form
* `groups/{group}/memberships/{membership}`.
* @param ModifyMembershipRolesRequest $postBody
* @param array $optParams Optional parameters.
* @return ModifyMembershipRolesResponse
* @throws \Google\Service\Exception
*/
public function modifyMembershipRoles($name, ModifyMembershipRolesRequest $postBody, $optParams = [])
{
$params = ['name' => $name, 'postBody' => $postBody];
$params = array_merge($params, $optParams);
return $this->call('modifyMembershipRoles', [$params], ModifyMembershipRolesResponse::class);
}
/**
* Searches direct groups of a member. (memberships.searchDirectGroups)
*
* @param string $parent [Resource
* name](https://cloud.google.com/apis/design/resource_names) of the group to
* search transitive memberships in. Format: groups/{group_id}, where group_id
* is always '-' as this API will search across all groups for a given member.
* @param array $optParams Optional parameters.
*
* @opt_param string orderBy The ordering of membership relation for the display
* name or email in the response. The syntax for this field can be found at
* https://cloud.google.com/apis/design/design_patterns#sorting_order. Example:
* Sort by the ascending display name: order_by="group_name" or
* order_by="group_name asc". Sort by the descending display name:
* order_by="group_name desc". Sort by the ascending group key:
* order_by="group_key" or order_by="group_key asc". Sort by the descending
* group key: order_by="group_key desc".
* @opt_param int pageSize The default page size is 200 (max 1000).
* @opt_param string pageToken The `next_page_token` value returned from a
* previous list request, if any
* @opt_param string query Required. A CEL expression that MUST include member
* specification AND label(s). Users can search on label attributes of groups.
* CONTAINS match ('in') is supported on labels. Identity-mapped groups are
* uniquely identified by both a `member_key_id` and a `member_key_namespace`,
* which requires an additional query input: `member_key_namespace`. Example
* query: `member_key_id == 'member_key_id_value' && 'label_value' in labels`
* @return SearchDirectGroupsResponse
* @throws \Google\Service\Exception
*/
public function searchDirectGroups($parent, $optParams = [])
{
$params = ['parent' => $parent];
$params = array_merge($params, $optParams);
return $this->call('searchDirectGroups', [$params], SearchDirectGroupsResponse::class);
}
/**
* Search transitive groups of a member. **Note:** This feature is only
* available to Google Workspace Enterprise Standard, Enterprise Plus, and
* Enterprise for Education; and Cloud Identity Premium accounts. If the account
* of the member is not one of these, a 403 (PERMISSION_DENIED) HTTP status code
* will be returned. A transitive group is any group that has a direct or
* indirect membership to the member. Actor must have view permissions all
* transitive groups. (memberships.searchTransitiveGroups)
*
* @param string $parent [Resource
* name](https://cloud.google.com/apis/design/resource_names) of the group to
* search transitive memberships in. Format: `groups/{group}`, where `group` is
* always '-' as this API will search across all groups for a given member.
* @param array $optParams Optional parameters.
*
* @opt_param int pageSize The default page size is 200 (max 1000).
* @opt_param string pageToken The `next_page_token` value returned from a
* previous list request, if any.
* @opt_param string query Required. A CEL expression that MUST include member
* specification AND label(s). This is a `required` field. Users can search on
* label attributes of groups. CONTAINS match ('in') is supported on labels.
* Identity-mapped groups are uniquely identified by both a `member_key_id` and
* a `member_key_namespace`, which requires an additional query input:
* `member_key_namespace`. Example query: `member_key_id ==
* 'member_key_id_value' && in labels` Query may optionally contain equality
* operators on the parent of the group restricting the search within a
* particular customer, e.g. `parent == 'customers/{customer_id}'`. The
* `customer_id` must begin with "C" (for example, 'C046psxkn'). This filtering
* is only supported for Admins with groups read permissions on the input
* customer. Example query: `member_key_id == 'member_key_id_value' && in labels
* && parent == 'customers/C046psxkn'`
* @return SearchTransitiveGroupsResponse
* @throws \Google\Service\Exception
*/
public function searchTransitiveGroups($parent, $optParams = [])
{
$params = ['parent' => $parent];
$params = array_merge($params, $optParams);
return $this->call('searchTransitiveGroups', [$params], SearchTransitiveGroupsResponse::class);
}
/**
* Search transitive memberships of a group. **Note:** This feature is only
* available to Google Workspace Enterprise Standard, Enterprise Plus, and
* Enterprise for Education; and Cloud Identity Premium accounts. If the account
* of the group is not one of these, a 403 (PERMISSION_DENIED) HTTP status code
* will be returned. A transitive membership is any direct or indirect
* membership of a group. Actor must have view permissions to all transitive
* memberships. (memberships.searchTransitiveMemberships)
*
* @param string $parent [Resource
* name](https://cloud.google.com/apis/design/resource_names) of the group to
* search transitive memberships in. Format: `groups/{group}`, where `group` is
* the unique ID assigned to the Group.
* @param array $optParams Optional parameters.
*
* @opt_param int pageSize The default page size is 200 (max 1000).
* @opt_param string pageToken The `next_page_token` value returned from a
* previous list request, if any.
* @return SearchTransitiveMembershipsResponse
* @throws \Google\Service\Exception
*/
public function searchTransitiveMemberships($parent, $optParams = [])
{
$params = ['parent' => $parent];
$params = array_merge($params, $optParams);
return $this->call('searchTransitiveMemberships', [$params], SearchTransitiveMembershipsResponse::class);
}
}
// Adding a class alias for backwards compatibility with the previous class name.
class_alias(GroupsMemberships::class, 'Google_Service_CloudIdentity_Resource_GroupsMemberships');
← Back