Policy
透過集合功能整理內容
你可以依據偏好儲存及分類內容。
JSON 表示法 |
{
"assignments": [
{
object (Assignment )
}
],
"etag": string
} |
指派項目
JSON 表示法 |
{
"role": string,
"members": [
string
]
} |
欄位 |
role |
string
必要欄位。指派給 members 的角色。
|
members[] |
string
指派角色的身分。可能具有下列值:
|
除非另有註明,否則本頁面中的內容是採用創用 CC 姓名標示 4.0 授權,程式碼範例則為阿帕契 2.0 授權。詳情請參閱《Google Developers 網站政策》。Java 是 Oracle 和/或其關聯企業的註冊商標。
上次更新時間:2025-07-25 (世界標準時間)。
[null,null,["上次更新時間:2025-07-25 (世界標準時間)。"],[[["\u003cp\u003eThis document defines an access control policy for resources, utilizing JSON for representation.\u003c/p\u003e\n"],["\u003cp\u003eThe policy includes assignments which associate members with specific roles.\u003c/p\u003e\n"],["\u003cp\u003eRoles determine the level of access granted to assigned members, which can be individuals or groups.\u003c/p\u003e\n"],["\u003cp\u003eAn \u003ccode\u003eetag\u003c/code\u003e is used for optimistic concurrency control, preventing simultaneous updates from overwriting each other.\u003c/p\u003e\n"]]],["The content defines access control policies for resources using JSON. A policy includes an array of \"assignments\" and an \"etag\" for concurrency control. Assignments link \"members\" to a specified \"role,\" with members being Google account emails or group emails. Systems use the etag in read-modify-write cycles to prevent overwriting. The \"role\" field is a required string, and members represent identities granted the specified role.\n"],null,["# Policy\n\n- [JSON representation](#SCHEMA_REPRESENTATION)\n- [Assignment](#Assignment)\n - [JSON representation](#Assignment.SCHEMA_REPRESENTATION)\n\nDefines an access control policy to the resources.\n\n| JSON representation |\n|-------------------------------------------------------------------------------------------------------------------------------|\n| ``` { \"assignments\": [ { object (/spectrum-access-system/reference/rest/v1alpha1/Policy#Assignment) } ], \"etag\": string } ``` |\n\n| Fields ||\n|-----------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| `assignments[]` | `object (`[Assignment](/spectrum-access-system/reference/rest/v1alpha1/Policy#Assignment)`)` List of [assignments](/spectrum-access-system/reference/rest/v1alpha1/Policy#Assignment) |\n| `etag` | `string (`[bytes](https://developers.google.com/discovery/v1/type-format)` format)` The etag is used for optimistic concurrency control as a way to help prevent simultaneous updates of a policy from overwriting each other. It is strongly suggested that systems make use of the etag in the read-modify-write cycle to perform policy updates in order to avoid race conditions: An etag is returned in the response to [policies.get](/spectrum-access-system/reference/rest/v1alpha1/policies/get#spectrum.sas.portal.v1alpha1.PolicyService.GetPolicy), and systems are expected to put that etag in the request to [policies.set](/spectrum-access-system/reference/rest/v1alpha1/policies/set#spectrum.sas.portal.v1alpha1.PolicyService.SetPolicy) to ensure that their change will be applied to the same version of the policy. If no etag is provided in the call to [policies.get](/spectrum-access-system/reference/rest/v1alpha1/policies/get#spectrum.sas.portal.v1alpha1.PolicyService.GetPolicy), then the existing policy is overwritten blindly. A base64-encoded string. |\n\nAssignment\n----------\n\nAssociates `members` with a `role`.\n\n| JSON representation |\n|---------------------------------------------------|\n| ``` { \"role\": string, \"members\": [ string ] } ``` |\n\n| Fields ||\n|-------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| `role` | `string` Required. Role that is assigned to `members`. |\n| `members[]` | `string` The identities the role is assigned to. It can have the following values: - `{user_email}`: An email address that represents a specific Google account. For example: `alice@gmail.com`. - `{group_email}`: An email address that represents a Google group. For example, `viewers@gmail.com`. |"]]