denyAccessState property

String? denyAccessState
getter/setter pair

Indicates whether the principal is denied the specified permission for the specified resource, based on evaluating all applicable IAM deny policies. Possible string values are:

  • "DENY_ACCESS_STATE_UNSPECIFIED" : Not specified.
  • "DENY_ACCESS_STATE_DENIED" : The deny policy denies the principal the permission.
  • "DENY_ACCESS_STATE_NOT_DENIED" : The deny policy doesn't deny the principal the permission.
  • "DENY_ACCESS_STATE_UNKNOWN_CONDITIONAL" : The deny policy denies the principal the permission if a condition expression evaluates to true. However, the sender of the request didn't provide enough context for Policy Troubleshooter to evaluate the condition expression.
  • "DENY_ACCESS_STATE_UNKNOWN_INFO" : The sender of the request does not have access to all of the deny policies that Policy Troubleshooter needs to evaluate the principal's access.

Implementation

core.String? denyAccessState;