class Google::Apis::BigqueryV2::Dataset::Access

Attributes

dataset[RW]
Pick one

A grant authorizing all resources of a particular type in a

particular dataset access to this dataset. Only views are supported for now. The role field is not required when this field is set. If that dataset is deleted and re-created, its access needs to be granted again via an update operation. Corresponds to the JSON property `dataset` @return [Google::Apis::BigqueryV2::DatasetAccessEntry]

domain[RW]
Pick one

A domain to grant access to. Any users signed in with the domain

specified will be granted the specified access. Example: “example.com”. Maps to IAM policy member “domain:DOMAIN”. Corresponds to the JSON property `domain` @return [String]

group_by_email[RW]
Pick one

An email address of a Google Group to grant access to. Maps to IAM

policy member “group:GROUP”. Corresponds to the JSON property `groupByEmail` @return [String]

iam_member[RW]
Pick one

Some other type of member that appears in the IAM Policy but isn't

a user, group, domain, or special group. Corresponds to the JSON property `iamMember` @return [String]

role[RW]
Required

An IAM role ID that should be granted to the user, group, or domain

specified in this access entry. The following legacy mappings will be applied: OWNER roles/bigquery.dataOwner WRITER roles/bigquery.dataEditor READER roles/bigquery.dataViewer This field will accept any of the above formats, but will return only the legacy format. For example, if you set this field to “ roles/bigquery.dataOwner”, it will be returned back as “OWNER”. Corresponds to the JSON property `role` @return [String]

routine[RW]
Pick one

A routine from a different dataset to grant access to. Queries

executed against that routine will have read access to views/tables/routines in this dataset. Only UDF is supported for now. The role field is not required when this field is set. If that routine is updated by any user, access to the routine needs to be granted again via an update operation. Corresponds to the JSON property `routine` @return [Google::Apis::BigqueryV2::RoutineReference]

special_group[RW]
Pick one

A special group to grant access to. Possible values include:

projectOwners: Owners of the enclosing project. projectReaders: Readers of the enclosing project. projectWriters: Writers of the enclosing project. allAuthenticatedUsers: All authenticated BigQuery users. Maps to similarly- named IAM members. Corresponds to the JSON property `specialGroup` @return [String]

user_by_email[RW]
Pick one

An email address of a user to grant access to. For example: fred@

example.com. Maps to IAM policy member “user:EMAIL” or “serviceAccount:EMAIL”. Corresponds to the JSON property `userByEmail` @return [String]

view[RW]
Pick one

A view from a different dataset to grant access to. Queries

executed against that view will have read access to tables in this dataset. The role field is not required when this field is set. If that view is updated by any user, access to the view needs to be granted again via an update operation. Corresponds to the JSON property `view` @return [Google::Apis::BigqueryV2::TableReference]

Public Class Methods

new(**args) click to toggle source
# File lib/google/apis/bigquery_v2/classes.rb, line 1719
def initialize(**args)
   update!(**args)
end

Public Instance Methods

update!(**args) click to toggle source

Update properties of this object

# File lib/google/apis/bigquery_v2/classes.rb, line 1724
def update!(**args)
  @dataset = args[:dataset] if args.key?(:dataset)
  @domain = args[:domain] if args.key?(:domain)
  @group_by_email = args[:group_by_email] if args.key?(:group_by_email)
  @iam_member = args[:iam_member] if args.key?(:iam_member)
  @role = args[:role] if args.key?(:role)
  @routine = args[:routine] if args.key?(:routine)
  @special_group = args[:special_group] if args.key?(:special_group)
  @user_by_email = args[:user_by_email] if args.key?(:user_by_email)
  @view = args[:view] if args.key?(:view)
end