REST Resource: projects.locations.entitlements

{
  "name": string,
  "createTime": string,
  "updateTime": string,
  "eligibleUsers": [
    {
      object (AccessControlEntry)
    }
  ],
  "approvalWorkflow": {
    object (ApprovalWorkflow)
  },
  "privilegedAccess": {
    object (PrivilegedAccess)
  },
  "maxRequestDuration": string,
  "state": enum (State),
  "requesterJustificationConfig": {
    object (RequesterJustificationConfig)
  },
  "additionalNotificationTargets": {
    object (AdditionalNotificationTargets)
  },
  "etag": string
}

string

Identifier. Name of the entitlement. Possible formats:

• organizations/{organization-number}/locations/{region}/entitlements/{entitlement-id}
• folders/{folder-number}/locations/{region}/entitlements/{entitlement-id}
• projects/{project-id|project-number}/locations/{region}/entitlements/{entitlement-id}

string (Timestamp format)

Output only. Create time stamp.

A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".

string (Timestamp format)

Output only. Update time stamp.

A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".

object (AccessControlEntry)

Optional. Who can create grants using this entitlement. This list should contain at most one entry.

object (ApprovalWorkflow)

Optional. The approvals needed before access are granted to a requester. No approvals are needed if this field is null.

object (PrivilegedAccess)

The access granted to a requester on successful approval.

string (Duration format)

Required. The maximum amount of time that access is granted for a request. A requester can ask for a duration less than this, but never more.

A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s".

enum (State)

Output only. Current state of this entitlement.

object (RequesterJustificationConfig)

Required. The manner in which the requester should provide a justification for requesting access.

object (AdditionalNotificationTargets)

Optional. Additional email addresses to be notified based on actions taken.

string

An etag is used for optimistic concurrency control as a way to prevent simultaneous updates to the same entitlement. An etag is returned in the response to entitlements.get and the caller should put the etag in the request to entitlements.patch so that their change is applied on the same version. If this field is omitted or if there is a mismatch while updating an entitlement, then the server rejects the request.