REST Resource: accessPolicies.accessLevels

Resource: AccessLevel

An AccessLevel is a label that can be applied to requests to Google Cloud services, along with a list of requirements necessary for the label to be applied.

JSON representation 
{
  "name": string,
  "title": string,
  "description": string,

  // Union field level can be only one of the following:
  "basic": {
    object (BasicLevel)
  },
  "custom": {
    object (CustomLevel)
  }
  // End of list of possible types for union field level.
}
Fields
name

string

Identifier. Resource name for the AccessLevel. Format: accessPolicies/{access_policy}/accessLevels/{accessLevel}.

The accessLevel component must begin with a letter, followed by alphanumeric characters or _. Its maximum length is 50 characters.

After you create an AccessLevel, you cannot change its name.
title

string

Human readable title. Must be unique within the Policy.
description

string

Description of the AccessLevel and its use. Does not affect behavior.
Union field level. Required. Describes the necessary conditions for the level to apply. level can be only one of the following:
basic

object (BasicLevel)

A BasicLevel composed of Conditions.
custom

object (CustomLevel)

A CustomLevel written in the Common Expression Language.

BasicLevel

BasicLevel is an AccessLevel using a set of recommended features.

JSON representation 
{
  "conditions": [
    {
      object (Condition)
    }
  ],
  "combiningFunction": enum (ConditionCombiningFunction)
}
Fields
conditions[]

object (Condition)

Required. A list of requirements for the AccessLevel to be granted.
combiningFunction

enum (ConditionCombiningFunction)

How the conditions list should be combined to determine if a request is granted this AccessLevel. If AND is used, each Condition in conditions must be satisfied for the AccessLevel to be applied. If OR is used, at least one Condition in conditions must be satisfied for the AccessLevel to be applied. Default behavior is AND.

Condition

A condition necessary for an AccessLevel to be granted. The Condition is an AND over its fields. So a Condition is true if: 1) the request IP is from one of the listed subnetworks AND 2) the originating device complies with the listed device policy AND 3) all listed access levels are granted AND 4) the request was sent at a time allowed by the DateTimeRestriction.