package iam

Import Path
	google.golang.org/genproto/googleapis/iam/v1 (on go.dev)

Dependency Relation
	imports 11 packages, and imported by 6 packages

Involved Source Files

	      iam_policy.pb.go
	      options.pb.go
	      policy.pb.go
Package-Level Type Names (total 16, in which 15 are exported)

	/* sort exporteds by: alphabet | popularity */
	 type AuditConfigDelta (struct)
		One delta entry for AuditConfig. Each individual change (only one
		exempted_member in each entry) to a AuditConfig will be a separate entry.

		Fields (total 7, in which 4 are exported)
			Action AuditConfigDelta_Action
				The action that was performed on an audit configuration in a policy.
				Required

			ExemptedMember string
				A single identity that is exempted from "data access" audit
				logging for the `service` specified above.
				Follows the same format of Binding.members.

			LogType string
				Specifies the log_type that was be enabled. ADMIN_ACTIVITY is always
				enabled, and cannot be configured.
				Required

			Service string
				Specifies a service that was configured for Cloud Audit Logging.
				For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
				`allServices` is a special value that covers all services.
				Required

			/* 3 unexporteds ... *//* 3 unexporteds: */
			sizeCache protoimpl.SizeCache
			state protoimpl.MessageState
			unknownFields protoimpl.UnknownFields
		Methods (total 9, all are exported)
			(*T) Descriptor() ([]byte, []int)
				Deprecated: Use AuditConfigDelta.ProtoReflect.Descriptor instead.

			(*T) GetAction() AuditConfigDelta_Action
			(*T) GetExemptedMember() string
			(*T) GetLogType() string
			(*T) GetService() string
			(*T) ProtoMessage()
			(*T) ProtoReflect() protoreflect.Message
			(*T) Reset()
			(*T) String() string
		Implements (at least 7, in which 4 are exported)
			*T : google.golang.org/protobuf/reflect/protoreflect.ProtoMessage
			*T : google.golang.org/protobuf/runtime/protoiface.MessageV1
			*T : expvar.Var
			*T : fmt.Stringer
			/* 3+ unexporteds ... *//* 3+ unexporteds: */
			*T : google.golang.org/protobuf/internal/impl.messageV1
			*T : context.stringer
			*T : runtime.stringer
		As Outputs Of (at least one exported)
			func (*PolicyDelta).GetAuditConfigDeltas() []*AuditConfigDelta

	 type AuditConfigDelta_Action int32 (basic type)
		The type of action performed on an audit configuration in a policy.

		Methods (total 6, all are exported)
			( T) Descriptor() protoreflect.EnumDescriptor
			( T) Enum() *AuditConfigDelta_Action
			( T) EnumDescriptor() ([]byte, []int)
				Deprecated: Use AuditConfigDelta_Action.Descriptor instead.

			( T) Number() protoreflect.EnumNumber
			( T) String() string
			( T) Type() protoreflect.EnumType
		Implements (at least 6, in which 3 are exported)
			 T : google.golang.org/protobuf/reflect/protoreflect.Enum
			 T : expvar.Var
			 T : fmt.Stringer
			/* 3+ unexporteds ... *//* 3+ unexporteds: */
			 T : google.golang.org/protobuf/internal/impl.enumV1
			 T : context.stringer
			 T : runtime.stringer
		As Outputs Of (at least 2, both are exported)
			func (*AuditConfigDelta).GetAction() AuditConfigDelta_Action
			func AuditConfigDelta_Action.Enum() *AuditConfigDelta_Action
		As Types Of (total 3, all are exported)
			const AuditConfigDelta_ACTION_UNSPECIFIED
			const AuditConfigDelta_ADD
			const AuditConfigDelta_REMOVE

	 type Binding (struct)
		Associates `members` with a `role`.

		Fields (total 6, in which 3 are exported)
			Condition *expr.Expr
				The condition that is associated with this binding.
				NOTE: An unsatisfied condition will not allow user access via current
				binding. Different bindings, including their conditions, are examined
				independently.

			Members []string
				Specifies the identities requesting access for a Cloud Platform resource.
				`members` can have the following values:

				* `allUsers`: A special identifier that represents anyone who is
				   on the internet; with or without a Google account.

				* `allAuthenticatedUsers`: A special identifier that represents anyone
				   who is authenticated with a Google account or a service account.

				* `user:{emailid}`: An email address that represents a specific Google
				   account. For example, `alice@example.com` .

				* `serviceAccount:{emailid}`: An email address that represents a service
				   account. For example, `my-other-app@appspot.gserviceaccount.com`.

				* `group:{emailid}`: An email address that represents a Google group.
				   For example, `admins@example.com`.

				* `domain:{domain}`: The G Suite domain (primary) that represents all the
				   users of that domain. For example, `google.com` or `example.com`.

			Role string
				Role that is assigned to `members`.
				For example, `roles/viewer`, `roles/editor`, or `roles/owner`.

			/* 3 unexporteds ... *//* 3 unexporteds: */
			sizeCache protoimpl.SizeCache
			state protoimpl.MessageState
			unknownFields protoimpl.UnknownFields
		Methods (total 8, all are exported)
			(*T) Descriptor() ([]byte, []int)
				Deprecated: Use Binding.ProtoReflect.Descriptor instead.

			(*T) GetCondition() *expr.Expr
			(*T) GetMembers() []string
			(*T) GetRole() string
			(*T) ProtoMessage()
			(*T) ProtoReflect() protoreflect.Message
			(*T) Reset()
			(*T) String() string
		Implements (at least 7, in which 4 are exported)
			*T : google.golang.org/protobuf/reflect/protoreflect.ProtoMessage
			*T : google.golang.org/protobuf/runtime/protoiface.MessageV1
			*T : expvar.Var
			*T : fmt.Stringer
			/* 3+ unexporteds ... *//* 3+ unexporteds: */
			*T : google.golang.org/protobuf/internal/impl.messageV1
			*T : context.stringer
			*T : runtime.stringer
		As Outputs Of (at least 3, in which 1 are exported)
			func (*Policy).GetBindings() []*Binding
			/* 2+ unexporteds ... *//* 2+ unexporteds: */
			func cloud.google.com/go/iam.(*Policy).binding(r iam.RoleName) *Binding
			func cloud.google.com/go/storage.iamFromStorageBindings(rbs []*raw.PolicyBindings) []*Binding
		As Inputs Of (at least 2, neither is exported)
			/* 2+ unexporteds ... *//* 2+ unexporteds: */
			func cloud.google.com/go/iam.memberIndex(m string, b *Binding) int
			func cloud.google.com/go/storage.iamToStorageBindings(ibs []*Binding) []*raw.PolicyBindings

	 type BindingDelta (struct)
		One delta entry for Binding. Each individual change (only one member in each
		entry) to a binding will be a separate entry.

		Fields (total 7, in which 4 are exported)
			Action BindingDelta_Action
				The action that was performed on a Binding.
				Required

			Condition *expr.Expr
				The condition that is associated with this binding.

			Member string
				A single identity requesting access for a Cloud Platform resource.
				Follows the same format of Binding.members.
				Required

			Role string
				Role that is assigned to `members`.
				For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
				Required

			/* 3 unexporteds ... *//* 3 unexporteds: */
			sizeCache protoimpl.SizeCache
			state protoimpl.MessageState
			unknownFields protoimpl.UnknownFields
		Methods (total 9, all are exported)
			(*T) Descriptor() ([]byte, []int)
				Deprecated: Use BindingDelta.ProtoReflect.Descriptor instead.

			(*T) GetAction() BindingDelta_Action
			(*T) GetCondition() *expr.Expr
			(*T) GetMember() string
			(*T) GetRole() string
			(*T) ProtoMessage()
			(*T) ProtoReflect() protoreflect.Message
			(*T) Reset()
			(*T) String() string
		Implements (at least 7, in which 4 are exported)
			*T : google.golang.org/protobuf/reflect/protoreflect.ProtoMessage
			*T : google.golang.org/protobuf/runtime/protoiface.MessageV1
			*T : expvar.Var
			*T : fmt.Stringer
			/* 3+ unexporteds ... *//* 3+ unexporteds: */
			*T : google.golang.org/protobuf/internal/impl.messageV1
			*T : context.stringer
			*T : runtime.stringer
		As Outputs Of (at least one exported)
			func (*PolicyDelta).GetBindingDeltas() []*BindingDelta

	 type BindingDelta_Action int32 (basic type)
		The type of action performed on a Binding in a policy.

		Methods (total 6, all are exported)
			( T) Descriptor() protoreflect.EnumDescriptor
			( T) Enum() *BindingDelta_Action
			( T) EnumDescriptor() ([]byte, []int)
				Deprecated: Use BindingDelta_Action.Descriptor instead.

			( T) Number() protoreflect.EnumNumber
			( T) String() string
			( T) Type() protoreflect.EnumType
		Implements (at least 6, in which 3 are exported)
			 T : google.golang.org/protobuf/reflect/protoreflect.Enum
			 T : expvar.Var
			 T : fmt.Stringer
			/* 3+ unexporteds ... *//* 3+ unexporteds: */
			 T : google.golang.org/protobuf/internal/impl.enumV1
			 T : context.stringer
			 T : runtime.stringer
		As Outputs Of (at least 2, both are exported)
			func (*BindingDelta).GetAction() BindingDelta_Action
			func BindingDelta_Action.Enum() *BindingDelta_Action
		As Types Of (total 3, all are exported)
			const BindingDelta_ACTION_UNSPECIFIED
			const BindingDelta_ADD
			const BindingDelta_REMOVE

	 type GetIamPolicyRequest (struct)
		Request message for `GetIamPolicy` method.

		Fields (total 5, in which 2 are exported)
			Options *GetPolicyOptions
				OPTIONAL: A `GetPolicyOptions` object for specifying options to
				`GetIamPolicy`. This field is only used by Cloud IAM.

			Resource string
				REQUIRED: The resource for which the policy is being requested.
				See the operation documentation for the appropriate value for this field.

			/* 3 unexporteds ... *//* 3 unexporteds: */
			sizeCache protoimpl.SizeCache
			state protoimpl.MessageState
			unknownFields protoimpl.UnknownFields
		Methods (total 7, all are exported)
			(*T) Descriptor() ([]byte, []int)
				Deprecated: Use GetIamPolicyRequest.ProtoReflect.Descriptor instead.

			(*T) GetOptions() *GetPolicyOptions
			(*T) GetResource() string
			(*T) ProtoMessage()
			(*T) ProtoReflect() protoreflect.Message
			(*T) Reset()
			(*T) String() string
		Implements (at least 7, in which 4 are exported)
			*T : google.golang.org/protobuf/reflect/protoreflect.ProtoMessage
			*T : google.golang.org/protobuf/runtime/protoiface.MessageV1
			*T : expvar.Var
			*T : fmt.Stringer
			/* 3+ unexporteds ... *//* 3+ unexporteds: */
			*T : google.golang.org/protobuf/internal/impl.messageV1
			*T : context.stringer
			*T : runtime.stringer
		As Inputs Of (at least 11, all are exported)
			func IAMPolicyClient.GetIamPolicy(ctx context.Context, in *GetIamPolicyRequest, opts ...grpc.CallOption) (*Policy, error)
			func IAMPolicyServer.GetIamPolicy(context.Context, *GetIamPolicyRequest) (*Policy, error)
			func (*UnimplementedIAMPolicyServer).GetIamPolicy(context.Context, *GetIamPolicyRequest) (*Policy, error)
			func google.golang.org/genproto/googleapis/cloud/secretmanager/v1.SecretManagerServiceClient.GetIamPolicy(ctx context.Context, in *GetIamPolicyRequest, opts ...grpc.CallOption) (*Policy, error)
			func google.golang.org/genproto/googleapis/cloud/secretmanager/v1.SecretManagerServiceServer.GetIamPolicy(context.Context, *GetIamPolicyRequest) (*Policy, error)
			func google.golang.org/genproto/googleapis/cloud/secretmanager/v1.(*UnimplementedSecretManagerServiceServer).GetIamPolicy(context.Context, *GetIamPolicyRequest) (*Policy, error)
			func google.golang.org/genproto/googleapis/cloud/tasks/v2.CloudTasksClient.GetIamPolicy(ctx context.Context, in *GetIamPolicyRequest, opts ...grpc.CallOption) (*Policy, error)
			func google.golang.org/genproto/googleapis/cloud/tasks/v2.CloudTasksServer.GetIamPolicy(context.Context, *GetIamPolicyRequest) (*Policy, error)
			func google.golang.org/genproto/googleapis/cloud/tasks/v2.(*UnimplementedCloudTasksServer).GetIamPolicy(context.Context, *GetIamPolicyRequest) (*Policy, error)
			func cloud.google.com/go/cloudtasks/apiv2.(*Client).GetIamPolicy(ctx context.Context, req *GetIamPolicyRequest, opts ...gax.CallOption) (*Policy, error)
			func cloud.google.com/go/secretmanager/apiv1.(*Client).GetIamPolicy(ctx context.Context, req *GetIamPolicyRequest, opts ...gax.CallOption) (*Policy, error)

	 type GetPolicyOptions (struct)
		Encapsulates settings provided to GetIamPolicy.

		Fields (total 4, in which 1 are exported)
			RequestedPolicyVersion int32
				Optional. The policy format version to be returned.

				Valid values are 0, 1, and 3. Requests specifying an invalid value will be
				rejected.

				Requests for policies with any conditional bindings must specify version 3.
				Policies without any conditional bindings may specify any valid value or
				leave the field unset.

			/* 3 unexporteds ... *//* 3 unexporteds: */
			sizeCache protoimpl.SizeCache
			state protoimpl.MessageState
			unknownFields protoimpl.UnknownFields
		Methods (total 6, all are exported)
			(*T) Descriptor() ([]byte, []int)
				Deprecated: Use GetPolicyOptions.ProtoReflect.Descriptor instead.

			(*T) GetRequestedPolicyVersion() int32
			(*T) ProtoMessage()
			(*T) ProtoReflect() protoreflect.Message
			(*T) Reset()
			(*T) String() string
		Implements (at least 7, in which 4 are exported)
			*T : google.golang.org/protobuf/reflect/protoreflect.ProtoMessage
			*T : google.golang.org/protobuf/runtime/protoiface.MessageV1
			*T : expvar.Var
			*T : fmt.Stringer
			/* 3+ unexporteds ... *//* 3+ unexporteds: */
			*T : google.golang.org/protobuf/internal/impl.messageV1
			*T : context.stringer
			*T : runtime.stringer
		As Outputs Of (at least one exported)
			func (*GetIamPolicyRequest).GetOptions() *GetPolicyOptions

	 type IAMPolicyClient (interface)
		IAMPolicyClient is the client API for IAMPolicy service.

		For semantics around ctx use and closing/ending streaming RPCs, please refer to https://godoc.org/google.golang.org/grpc#ClientConn.NewStream.

		Methods (total 3, all are exported)
			( T) GetIamPolicy(ctx context.Context, in *GetIamPolicyRequest, opts ...grpc.CallOption) (*Policy, error)
				Gets the access control policy for a resource.
				Returns an empty policy if the resource exists and does not have a policy
				set.

			( T) SetIamPolicy(ctx context.Context, in *SetIamPolicyRequest, opts ...grpc.CallOption) (*Policy, error)
				Sets the access control policy on the specified resource. Replaces any
				existing policy.

			( T) TestIamPermissions(ctx context.Context, in *TestIamPermissionsRequest, opts ...grpc.CallOption) (*TestIamPermissionsResponse, error)
				Returns permissions that a caller has on the specified resource.
				If the resource does not exist, this will return an empty set of
				permissions, not a NOT_FOUND error.

				Note: This operation is designed to be used for building permission-aware
				UIs and command-line tools, not for authorization checking. This operation
				may "fail open" without warning.

		Implemented By (at least 5, in which 2 are exported)
			 google.golang.org/genproto/googleapis/cloud/secretmanager/v1.SecretManagerServiceClient (interface)
			 google.golang.org/genproto/googleapis/cloud/tasks/v2.CloudTasksClient (interface)
			/* 3+ unexporteds ... *//* 3+ unexporteds: */
			*iAMPolicyClient
			*google.golang.org/genproto/googleapis/cloud/secretmanager/v1.secretManagerServiceClient
			*google.golang.org/genproto/googleapis/cloud/tasks/v2.cloudTasksClient
		As Outputs Of (at least one exported)
			func NewIAMPolicyClient(cc grpc.ClientConnInterface) IAMPolicyClient
		As Inputs Of (at least one exported)
			func cloud.google.com/go/iam.InternalNewHandleGRPCClient(c IAMPolicyClient, resource string) *iam.Handle

	 type IAMPolicyServer (interface)
		IAMPolicyServer is the server API for IAMPolicy service.

		Methods (total 3, all are exported)
			( T) GetIamPolicy(context.Context, *GetIamPolicyRequest) (*Policy, error)
				Gets the access control policy for a resource.
				Returns an empty policy if the resource exists and does not have a policy
				set.

			( T) SetIamPolicy(context.Context, *SetIamPolicyRequest) (*Policy, error)
				Sets the access control policy on the specified resource. Replaces any
				existing policy.

			( T) TestIamPermissions(context.Context, *TestIamPermissionsRequest) (*TestIamPermissionsResponse, error)
				Returns permissions that a caller has on the specified resource.
				If the resource does not exist, this will return an empty set of
				permissions, not a NOT_FOUND error.

				Note: This operation is designed to be used for building permission-aware
				UIs and command-line tools, not for authorization checking. This operation
				may "fail open" without warning.

		Implemented By (at least 5, all are exported)
			*UnimplementedIAMPolicyServer
			 google.golang.org/genproto/googleapis/cloud/secretmanager/v1.SecretManagerServiceServer (interface)
			*google.golang.org/genproto/googleapis/cloud/secretmanager/v1.UnimplementedSecretManagerServiceServer
			 google.golang.org/genproto/googleapis/cloud/tasks/v2.CloudTasksServer (interface)
			*google.golang.org/genproto/googleapis/cloud/tasks/v2.UnimplementedCloudTasksServer
		As Inputs Of (at least one exported)
			func RegisterIAMPolicyServer(s *grpc.Server, srv IAMPolicyServer)

	 type Policy (struct)
		Defines an Identity and Access Management (IAM) policy. It is used to
		specify access control policies for Cloud Platform resources.

		A `Policy` is a collection of `bindings`. A `binding` binds one or more
		`members` to a single `role`. Members can be user accounts, service accounts,
		Google groups, and domains (such as G Suite). A `role` is a named list of
		permissions (defined by IAM or configured by users). A `binding` can
		optionally specify a `condition`, which is a logic expression that further
		constrains the role binding based on attributes about the request and/or
		target resource.

		**JSON Example**

		    {
		      "bindings": [
		        {
		          "role": "roles/resourcemanager.organizationAdmin",
		          "members": [
		            "user:mike@example.com",
		            "group:admins@example.com",
		            "domain:google.com",
		            "serviceAccount:my-project-id@appspot.gserviceaccount.com"
		          ]
		        },
		        {
		          "role": "roles/resourcemanager.organizationViewer",
		          "members": ["user:eve@example.com"],
		          "condition": {
		            "title": "expirable access",
		            "description": "Does not grant access after Sep 2020",
		            "expression": "request.time <
		            timestamp('2020-10-01T00:00:00.000Z')",
		          }
		        }
		      ]
		    }

		**YAML Example**

		    bindings:
		    - members:
		      - user:mike@example.com
		      - group:admins@example.com
		      - domain:google.com
		      - serviceAccount:my-project-id@appspot.gserviceaccount.com
		      role: roles/resourcemanager.organizationAdmin
		    - members:
		      - user:eve@example.com
		      role: roles/resourcemanager.organizationViewer
		      condition:
		        title: expirable access
		        description: Does not grant access after Sep 2020
		        expression: request.time < timestamp('2020-10-01T00:00:00.000Z')

		For a description of IAM and its features, see the
		[IAM developer's guide](https://cloud.google.com/iam/docs).

		Fields (total 6, in which 3 are exported)
			Bindings []*Binding
				Associates a list of `members` to a `role`. Optionally may specify a
				`condition` that determines when binding is in effect.
				`bindings` with no members will result in an error.

			Etag []byte
				`etag` is used for optimistic concurrency control as a way to help
				prevent simultaneous updates of a policy from overwriting each other.
				It is strongly suggested that systems make use of the `etag` in the
				read-modify-write cycle to perform policy updates in order to avoid race
				conditions: An `etag` is returned in the response to `getIamPolicy`, and
				systems are expected to put that etag in the request to `setIamPolicy` to
				ensure that their change will be applied to the same version of the policy.

				If no `etag` is provided in the call to `setIamPolicy`, then the existing
				policy is overwritten. Due to blind-set semantics of an etag-less policy,
				'setIamPolicy' will not fail even if the incoming policy version does not
				meet the requirements for modifying the stored policy.

			Version int32
				Specifies the format of the policy.

				Valid values are 0, 1, and 3. Requests specifying an invalid value will be
				rejected.

				Operations affecting conditional bindings must specify version 3. This can
				be either setting a conditional policy, modifying a conditional binding,
				or removing a binding (conditional or unconditional) from the stored
				conditional policy.
				Operations on non-conditional policies may specify any valid value or
				leave the field unset.

				If no etag is provided in the call to `setIamPolicy`, version compliance
				checks against the stored policy is skipped.

			/* 3 unexporteds ... *//* 3 unexporteds: */
			sizeCache protoimpl.SizeCache
			state protoimpl.MessageState
			unknownFields protoimpl.UnknownFields
		Methods (total 8, all are exported)
			(*T) Descriptor() ([]byte, []int)
				Deprecated: Use Policy.ProtoReflect.Descriptor instead.

			(*T) GetBindings() []*Binding
			(*T) GetEtag() []byte
			(*T) GetVersion() int32
			(*T) ProtoMessage()
			(*T) ProtoReflect() protoreflect.Message
			(*T) Reset()
			(*T) String() string
		Implements (at least 7, in which 4 are exported)
			*T : google.golang.org/protobuf/reflect/protoreflect.ProtoMessage
			*T : google.golang.org/protobuf/runtime/protoiface.MessageV1
			*T : expvar.Var
			*T : fmt.Stringer
			/* 3+ unexporteds ... *//* 3+ unexporteds: */
			*T : google.golang.org/protobuf/internal/impl.messageV1
			*T : context.stringer
			*T : runtime.stringer
		As Outputs Of (at least 24, in which 23 are exported)
			func IAMPolicyClient.GetIamPolicy(ctx context.Context, in *GetIamPolicyRequest, opts ...grpc.CallOption) (*Policy, error)
			func IAMPolicyClient.SetIamPolicy(ctx context.Context, in *SetIamPolicyRequest, opts ...grpc.CallOption) (*Policy, error)
			func IAMPolicyServer.GetIamPolicy(context.Context, *GetIamPolicyRequest) (*Policy, error)
			func IAMPolicyServer.SetIamPolicy(context.Context, *SetIamPolicyRequest) (*Policy, error)
			func (*SetIamPolicyRequest).GetPolicy() *Policy
			func (*UnimplementedIAMPolicyServer).GetIamPolicy(context.Context, *GetIamPolicyRequest) (*Policy, error)
			func (*UnimplementedIAMPolicyServer).SetIamPolicy(context.Context, *SetIamPolicyRequest) (*Policy, error)
			func google.golang.org/genproto/googleapis/cloud/secretmanager/v1.SecretManagerServiceClient.GetIamPolicy(ctx context.Context, in *GetIamPolicyRequest, opts ...grpc.CallOption) (*Policy, error)
			func google.golang.org/genproto/googleapis/cloud/secretmanager/v1.SecretManagerServiceClient.SetIamPolicy(ctx context.Context, in *SetIamPolicyRequest, opts ...grpc.CallOption) (*Policy, error)
			func google.golang.org/genproto/googleapis/cloud/secretmanager/v1.SecretManagerServiceServer.GetIamPolicy(context.Context, *GetIamPolicyRequest) (*Policy, error)
			func google.golang.org/genproto/googleapis/cloud/secretmanager/v1.SecretManagerServiceServer.SetIamPolicy(context.Context, *SetIamPolicyRequest) (*Policy, error)
			func google.golang.org/genproto/googleapis/cloud/secretmanager/v1.(*UnimplementedSecretManagerServiceServer).GetIamPolicy(context.Context, *GetIamPolicyRequest) (*Policy, error)
			func google.golang.org/genproto/googleapis/cloud/secretmanager/v1.(*UnimplementedSecretManagerServiceServer).SetIamPolicy(context.Context, *SetIamPolicyRequest) (*Policy, error)
			func google.golang.org/genproto/googleapis/cloud/tasks/v2.CloudTasksClient.GetIamPolicy(ctx context.Context, in *GetIamPolicyRequest, opts ...grpc.CallOption) (*Policy, error)
			func google.golang.org/genproto/googleapis/cloud/tasks/v2.CloudTasksClient.SetIamPolicy(ctx context.Context, in *SetIamPolicyRequest, opts ...grpc.CallOption) (*Policy, error)
			func google.golang.org/genproto/googleapis/cloud/tasks/v2.CloudTasksServer.GetIamPolicy(context.Context, *GetIamPolicyRequest) (*Policy, error)
			func google.golang.org/genproto/googleapis/cloud/tasks/v2.CloudTasksServer.SetIamPolicy(context.Context, *SetIamPolicyRequest) (*Policy, error)
			func google.golang.org/genproto/googleapis/cloud/tasks/v2.(*UnimplementedCloudTasksServer).GetIamPolicy(context.Context, *GetIamPolicyRequest) (*Policy, error)
			func google.golang.org/genproto/googleapis/cloud/tasks/v2.(*UnimplementedCloudTasksServer).SetIamPolicy(context.Context, *SetIamPolicyRequest) (*Policy, error)
			func cloud.google.com/go/cloudtasks/apiv2.(*Client).GetIamPolicy(ctx context.Context, req *GetIamPolicyRequest, opts ...gax.CallOption) (*Policy, error)
			func cloud.google.com/go/cloudtasks/apiv2.(*Client).SetIamPolicy(ctx context.Context, req *SetIamPolicyRequest, opts ...gax.CallOption) (*Policy, error)
			func cloud.google.com/go/secretmanager/apiv1.(*Client).GetIamPolicy(ctx context.Context, req *GetIamPolicyRequest, opts ...gax.CallOption) (*Policy, error)
			func cloud.google.com/go/secretmanager/apiv1.(*Client).SetIamPolicy(ctx context.Context, req *SetIamPolicyRequest, opts ...gax.CallOption) (*Policy, error)
			/* at least one unexported ... *//* at least one unexported: */
			func cloud.google.com/go/storage.iamFromStoragePolicy(rp *raw.Policy) *Policy
		As Inputs Of (at least one unexported)
			/* at least one unexported ... *//* at least one unexported: */
			func cloud.google.com/go/storage.iamToStoragePolicy(ip *Policy) *raw.Policy

	 type PolicyDelta (struct)
		The difference delta between two policies.

		Fields (total 5, in which 2 are exported)
			AuditConfigDeltas []*AuditConfigDelta
				The delta for AuditConfigs between two policies.

			BindingDeltas []*BindingDelta
				The delta for Bindings between two policies.

			/* 3 unexporteds ... *//* 3 unexporteds: */
			sizeCache protoimpl.SizeCache
			state protoimpl.MessageState
			unknownFields protoimpl.UnknownFields
		Methods (total 7, all are exported)
			(*T) Descriptor() ([]byte, []int)
				Deprecated: Use PolicyDelta.ProtoReflect.Descriptor instead.

			(*T) GetAuditConfigDeltas() []*AuditConfigDelta
			(*T) GetBindingDeltas() []*BindingDelta
			(*T) ProtoMessage()
			(*T) ProtoReflect() protoreflect.Message
			(*T) Reset()
			(*T) String() string
		Implements (at least 7, in which 4 are exported)
			*T : google.golang.org/protobuf/reflect/protoreflect.ProtoMessage
			*T : google.golang.org/protobuf/runtime/protoiface.MessageV1
			*T : expvar.Var
			*T : fmt.Stringer
			/* 3+ unexporteds ... *//* 3+ unexporteds: */
			*T : google.golang.org/protobuf/internal/impl.messageV1
			*T : context.stringer
			*T : runtime.stringer

	 type SetIamPolicyRequest (struct)
		Request message for `SetIamPolicy` method.

		Fields (total 5, in which 2 are exported)
			Policy *Policy
				REQUIRED: The complete policy to be applied to the `resource`. The size of
				the policy is limited to a few 10s of KB. An empty policy is a
				valid policy but certain Cloud Platform services (such as Projects)
				might reject them.

			Resource string
				REQUIRED: The resource for which the policy is being specified.
				See the operation documentation for the appropriate value for this field.

			/* 3 unexporteds ... *//* 3 unexporteds: */
			sizeCache protoimpl.SizeCache
			state protoimpl.MessageState
			unknownFields protoimpl.UnknownFields
		Methods (total 7, all are exported)
			(*T) Descriptor() ([]byte, []int)
				Deprecated: Use SetIamPolicyRequest.ProtoReflect.Descriptor instead.

			(*T) GetPolicy() *Policy
			(*T) GetResource() string
			(*T) ProtoMessage()
			(*T) ProtoReflect() protoreflect.Message
			(*T) Reset()
			(*T) String() string
		Implements (at least 7, in which 4 are exported)
			*T : google.golang.org/protobuf/reflect/protoreflect.ProtoMessage
			*T : google.golang.org/protobuf/runtime/protoiface.MessageV1
			*T : expvar.Var
			*T : fmt.Stringer
			/* 3+ unexporteds ... *//* 3+ unexporteds: */
			*T : google.golang.org/protobuf/internal/impl.messageV1
			*T : context.stringer
			*T : runtime.stringer
		As Inputs Of (at least 11, all are exported)
			func IAMPolicyClient.SetIamPolicy(ctx context.Context, in *SetIamPolicyRequest, opts ...grpc.CallOption) (*Policy, error)
			func IAMPolicyServer.SetIamPolicy(context.Context, *SetIamPolicyRequest) (*Policy, error)
			func (*UnimplementedIAMPolicyServer).SetIamPolicy(context.Context, *SetIamPolicyRequest) (*Policy, error)
			func google.golang.org/genproto/googleapis/cloud/secretmanager/v1.SecretManagerServiceClient.SetIamPolicy(ctx context.Context, in *SetIamPolicyRequest, opts ...grpc.CallOption) (*Policy, error)
			func google.golang.org/genproto/googleapis/cloud/secretmanager/v1.SecretManagerServiceServer.SetIamPolicy(context.Context, *SetIamPolicyRequest) (*Policy, error)
			func google.golang.org/genproto/googleapis/cloud/secretmanager/v1.(*UnimplementedSecretManagerServiceServer).SetIamPolicy(context.Context, *SetIamPolicyRequest) (*Policy, error)
			func google.golang.org/genproto/googleapis/cloud/tasks/v2.CloudTasksClient.SetIamPolicy(ctx context.Context, in *SetIamPolicyRequest, opts ...grpc.CallOption) (*Policy, error)
			func google.golang.org/genproto/googleapis/cloud/tasks/v2.CloudTasksServer.SetIamPolicy(context.Context, *SetIamPolicyRequest) (*Policy, error)
			func google.golang.org/genproto/googleapis/cloud/tasks/v2.(*UnimplementedCloudTasksServer).SetIamPolicy(context.Context, *SetIamPolicyRequest) (*Policy, error)
			func cloud.google.com/go/cloudtasks/apiv2.(*Client).SetIamPolicy(ctx context.Context, req *SetIamPolicyRequest, opts ...gax.CallOption) (*Policy, error)
			func cloud.google.com/go/secretmanager/apiv1.(*Client).SetIamPolicy(ctx context.Context, req *SetIamPolicyRequest, opts ...gax.CallOption) (*Policy, error)

	 type TestIamPermissionsRequest (struct)
		Request message for `TestIamPermissions` method.

		Fields (total 5, in which 2 are exported)
			Permissions []string
				The set of permissions to check for the `resource`. Permissions with
				wildcards (such as '*' or 'storage.*') are not allowed. For more
				information see
				[IAM Overview](https://cloud.google.com/iam/docs/overview#permissions).

			Resource string
				REQUIRED: The resource for which the policy detail is being requested.
				See the operation documentation for the appropriate value for this field.

			/* 3 unexporteds ... *//* 3 unexporteds: */
			sizeCache protoimpl.SizeCache
			state protoimpl.MessageState
			unknownFields protoimpl.UnknownFields
		Methods (total 7, all are exported)
			(*T) Descriptor() ([]byte, []int)
				Deprecated: Use TestIamPermissionsRequest.ProtoReflect.Descriptor instead.

			(*T) GetPermissions() []string
			(*T) GetResource() string
			(*T) ProtoMessage()
			(*T) ProtoReflect() protoreflect.Message
			(*T) Reset()
			(*T) String() string
		Implements (at least 7, in which 4 are exported)
			*T : google.golang.org/protobuf/reflect/protoreflect.ProtoMessage
			*T : google.golang.org/protobuf/runtime/protoiface.MessageV1
			*T : expvar.Var
			*T : fmt.Stringer
			/* 3+ unexporteds ... *//* 3+ unexporteds: */
			*T : google.golang.org/protobuf/internal/impl.messageV1
			*T : context.stringer
			*T : runtime.stringer
		As Inputs Of (at least 11, all are exported)
			func IAMPolicyClient.TestIamPermissions(ctx context.Context, in *TestIamPermissionsRequest, opts ...grpc.CallOption) (*TestIamPermissionsResponse, error)
			func IAMPolicyServer.TestIamPermissions(context.Context, *TestIamPermissionsRequest) (*TestIamPermissionsResponse, error)
			func (*UnimplementedIAMPolicyServer).TestIamPermissions(context.Context, *TestIamPermissionsRequest) (*TestIamPermissionsResponse, error)
			func google.golang.org/genproto/googleapis/cloud/secretmanager/v1.SecretManagerServiceClient.TestIamPermissions(ctx context.Context, in *TestIamPermissionsRequest, opts ...grpc.CallOption) (*TestIamPermissionsResponse, error)
			func google.golang.org/genproto/googleapis/cloud/secretmanager/v1.SecretManagerServiceServer.TestIamPermissions(context.Context, *TestIamPermissionsRequest) (*TestIamPermissionsResponse, error)
			func google.golang.org/genproto/googleapis/cloud/secretmanager/v1.(*UnimplementedSecretManagerServiceServer).TestIamPermissions(context.Context, *TestIamPermissionsRequest) (*TestIamPermissionsResponse, error)
			func google.golang.org/genproto/googleapis/cloud/tasks/v2.CloudTasksClient.TestIamPermissions(ctx context.Context, in *TestIamPermissionsRequest, opts ...grpc.CallOption) (*TestIamPermissionsResponse, error)
			func google.golang.org/genproto/googleapis/cloud/tasks/v2.CloudTasksServer.TestIamPermissions(context.Context, *TestIamPermissionsRequest) (*TestIamPermissionsResponse, error)
			func google.golang.org/genproto/googleapis/cloud/tasks/v2.(*UnimplementedCloudTasksServer).TestIamPermissions(context.Context, *TestIamPermissionsRequest) (*TestIamPermissionsResponse, error)
			func cloud.google.com/go/cloudtasks/apiv2.(*Client).TestIamPermissions(ctx context.Context, req *TestIamPermissionsRequest, opts ...gax.CallOption) (*TestIamPermissionsResponse, error)
			func cloud.google.com/go/secretmanager/apiv1.(*Client).TestIamPermissions(ctx context.Context, req *TestIamPermissionsRequest, opts ...gax.CallOption) (*TestIamPermissionsResponse, error)

	 type TestIamPermissionsResponse (struct)
		Response message for `TestIamPermissions` method.

		Fields (total 4, in which 1 are exported)
			Permissions []string
				A subset of `TestPermissionsRequest.permissions` that the caller is
				allowed.

			/* 3 unexporteds ... *//* 3 unexporteds: */
			sizeCache protoimpl.SizeCache
			state protoimpl.MessageState
			unknownFields protoimpl.UnknownFields
		Methods (total 6, all are exported)
			(*T) Descriptor() ([]byte, []int)
				Deprecated: Use TestIamPermissionsResponse.ProtoReflect.Descriptor instead.

			(*T) GetPermissions() []string
			(*T) ProtoMessage()
			(*T) ProtoReflect() protoreflect.Message
			(*T) Reset()
			(*T) String() string
		Implements (at least 7, in which 4 are exported)
			*T : google.golang.org/protobuf/reflect/protoreflect.ProtoMessage
			*T : google.golang.org/protobuf/runtime/protoiface.MessageV1
			*T : expvar.Var
			*T : fmt.Stringer
			/* 3+ unexporteds ... *//* 3+ unexporteds: */
			*T : google.golang.org/protobuf/internal/impl.messageV1
			*T : context.stringer
			*T : runtime.stringer
		As Outputs Of (at least 11, all are exported)
			func IAMPolicyClient.TestIamPermissions(ctx context.Context, in *TestIamPermissionsRequest, opts ...grpc.CallOption) (*TestIamPermissionsResponse, error)
			func IAMPolicyServer.TestIamPermissions(context.Context, *TestIamPermissionsRequest) (*TestIamPermissionsResponse, error)
			func (*UnimplementedIAMPolicyServer).TestIamPermissions(context.Context, *TestIamPermissionsRequest) (*TestIamPermissionsResponse, error)
			func google.golang.org/genproto/googleapis/cloud/secretmanager/v1.SecretManagerServiceClient.TestIamPermissions(ctx context.Context, in *TestIamPermissionsRequest, opts ...grpc.CallOption) (*TestIamPermissionsResponse, error)
			func google.golang.org/genproto/googleapis/cloud/secretmanager/v1.SecretManagerServiceServer.TestIamPermissions(context.Context, *TestIamPermissionsRequest) (*TestIamPermissionsResponse, error)
			func google.golang.org/genproto/googleapis/cloud/secretmanager/v1.(*UnimplementedSecretManagerServiceServer).TestIamPermissions(context.Context, *TestIamPermissionsRequest) (*TestIamPermissionsResponse, error)
			func google.golang.org/genproto/googleapis/cloud/tasks/v2.CloudTasksClient.TestIamPermissions(ctx context.Context, in *TestIamPermissionsRequest, opts ...grpc.CallOption) (*TestIamPermissionsResponse, error)
			func google.golang.org/genproto/googleapis/cloud/tasks/v2.CloudTasksServer.TestIamPermissions(context.Context, *TestIamPermissionsRequest) (*TestIamPermissionsResponse, error)
			func google.golang.org/genproto/googleapis/cloud/tasks/v2.(*UnimplementedCloudTasksServer).TestIamPermissions(context.Context, *TestIamPermissionsRequest) (*TestIamPermissionsResponse, error)
			func cloud.google.com/go/cloudtasks/apiv2.(*Client).TestIamPermissions(ctx context.Context, req *TestIamPermissionsRequest, opts ...gax.CallOption) (*TestIamPermissionsResponse, error)
			func cloud.google.com/go/secretmanager/apiv1.(*Client).TestIamPermissions(ctx context.Context, req *TestIamPermissionsRequest, opts ...gax.CallOption) (*TestIamPermissionsResponse, error)

	 type UnimplementedIAMPolicyServer (struct)
		UnimplementedIAMPolicyServer can be embedded to have forward compatible implementations.

		Methods (total 3, all are exported)
			(*T) GetIamPolicy(context.Context, *GetIamPolicyRequest) (*Policy, error)
			(*T) SetIamPolicy(context.Context, *SetIamPolicyRequest) (*Policy, error)
			(*T) TestIamPermissions(context.Context, *TestIamPermissionsRequest) (*TestIamPermissionsResponse, error)
		Implements (at least one exported)
			*T : IAMPolicyServer

	/* one unexported ... *//* one unexported: */
	 type iAMPolicyClient (struct)

		Fields (only one, which is unexported)
			/* one unexported ... *//* one unexported: */
			cc grpc.ClientConnInterface
		Methods (total 3, all are exported)
			(*T) GetIamPolicy(ctx context.Context, in *GetIamPolicyRequest, opts ...grpc.CallOption) (*Policy, error)
			(*T) SetIamPolicy(ctx context.Context, in *SetIamPolicyRequest, opts ...grpc.CallOption) (*Policy, error)
			(*T) TestIamPermissions(ctx context.Context, in *TestIamPermissionsRequest, opts ...grpc.CallOption) (*TestIamPermissionsResponse, error)
		Implements (at least one exported)
			*T : IAMPolicyClient


Package-Level Functions (total 14, in which 2 are exported)

	 func NewIAMPolicyClient(cc grpc.ClientConnInterface) IAMPolicyClient
	 func RegisterIAMPolicyServer(s *grpc.Server, srv IAMPolicyServer)
	/* 12 unexporteds ... *//* 12 unexporteds: */
	 func _IAMPolicy_GetIamPolicy_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error)
	 func _IAMPolicy_SetIamPolicy_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error)
	 func _IAMPolicy_TestIamPermissions_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error)
	 func file_google_iam_v1_iam_policy_proto_init()
	 func file_google_iam_v1_iam_policy_proto_rawDescGZIP() []byte
	 func file_google_iam_v1_options_proto_init()
	 func file_google_iam_v1_options_proto_rawDescGZIP() []byte
	 func file_google_iam_v1_policy_proto_init()
	 func file_google_iam_v1_policy_proto_rawDescGZIP() []byte
	 func init()
	 func init()
	 func init()
Package-Level Variables (total 27, in which 7 are exported)

	  var AuditConfigDelta_Action_name map[int32]string
		Enum value maps for AuditConfigDelta_Action.

	  var AuditConfigDelta_Action_value map[string]int32
		Enum value maps for AuditConfigDelta_Action.

	  var BindingDelta_Action_name map[int32]string
		Enum value maps for BindingDelta_Action.

	  var BindingDelta_Action_value map[string]int32
		Enum value maps for BindingDelta_Action.

	  var File_google_iam_v1_iam_policy_proto protoreflect.FileDescriptor
	  var File_google_iam_v1_options_proto protoreflect.FileDescriptor
	  var File_google_iam_v1_policy_proto protoreflect.FileDescriptor
	/* 20 unexporteds ... *//* 20 unexporteds: */
	  var _IAMPolicy_serviceDesc grpc.ServiceDesc
	  var file_google_iam_v1_iam_policy_proto_depIdxs []int32
	  var file_google_iam_v1_iam_policy_proto_goTypes []interface{}
	  var file_google_iam_v1_iam_policy_proto_msgTypes []impl.MessageInfo
	  var file_google_iam_v1_iam_policy_proto_rawDesc []byte
	  var file_google_iam_v1_iam_policy_proto_rawDescData []byte
	  var file_google_iam_v1_iam_policy_proto_rawDescOnce sync.Once
	  var file_google_iam_v1_options_proto_depIdxs []int32
	  var file_google_iam_v1_options_proto_goTypes []interface{}
	  var file_google_iam_v1_options_proto_msgTypes []impl.MessageInfo
	  var file_google_iam_v1_options_proto_rawDesc []byte
	  var file_google_iam_v1_options_proto_rawDescData []byte
	  var file_google_iam_v1_options_proto_rawDescOnce sync.Once
	  var file_google_iam_v1_policy_proto_depIdxs []int32
	  var file_google_iam_v1_policy_proto_enumTypes []impl.EnumInfo
	  var file_google_iam_v1_policy_proto_goTypes []interface{}
	  var file_google_iam_v1_policy_proto_msgTypes []impl.MessageInfo
	  var file_google_iam_v1_policy_proto_rawDesc []byte
	  var file_google_iam_v1_policy_proto_rawDescData []byte
	  var file_google_iam_v1_policy_proto_rawDescOnce sync.Once
Package-Level Constants (total 6, all are exported)

	const AuditConfigDelta_ACTION_UNSPECIFIED AuditConfigDelta_Action = 0
		Unspecified.

	const AuditConfigDelta_ADD AuditConfigDelta_Action = 1
		Addition of an audit configuration.

	const AuditConfigDelta_REMOVE AuditConfigDelta_Action = 2
		Removal of an audit configuration.

	const BindingDelta_ACTION_UNSPECIFIED BindingDelta_Action = 0
		Unspecified.

	const BindingDelta_ADD BindingDelta_Action = 1
		Addition of a Binding.

	const BindingDelta_REMOVE BindingDelta_Action = 2
		Removal of a Binding.

The pages are generated with Golds v0.3.2-preview. (GOOS=darwin GOARCH=amd64)
Golds is a Go 101 project developed by Tapir Liu.
PR and bug reports are welcome and can be submitted to the issue list.
Please follow @Go100and1 (reachable from the left QR code) to get the latest news of Golds.