membership property

Indicates whether the principal is listed as a denied principal in the deny rule, either directly or through membership in a principal set. Possible string values are:

• "MEMBERSHIP_MATCHING_STATE_UNSPECIFIED" : Not specified.
• "MEMBERSHIP_MATCHED" : The principal in the request matches the principal in the policy. The principal can be included directly or indirectly: * A principal is included directly if that principal is listed in the role binding. * A principal is included indirectly if that principal is in a Google group, Google Workspace account, or Cloud Identity domain that is listed in the policy.
• "MEMBERSHIP_NOT_MATCHED" : The principal in the request doesn't match the principal in the policy.
• "MEMBERSHIP_UNKNOWN_INFO" : The principal in the policy is a group or domain, and the sender of the request doesn't have permission to view whether the principal in the request is a member of the group or domain.
• "MEMBERSHIP_UNKNOWN_UNSUPPORTED" : The principal is an unsupported type.