public sealed class Explanation : IMessage<IamPolicySearchResult.Types.Explanation>, IEquatable<IamPolicySearchResult.Types.Explanation>, IDeepCloneable<IamPolicySearchResult.Types.Explanation>, IBufferMessage, IMessage
Reference documentation and code samples for the Google Cloud Asset Inventory v1 API class IamPolicySearchResult.Types.Explanation.
public MapField<string, IamPolicySearchResult.Types.Explanation.Types.Permissions> MatchedPermissions { get; }
The map from roles to their included permissions that match the
permission query (i.e., a query containing policy.role.permissions:).
Example: if query policy.role.permissions:compute.disk.get
matches a policy binding that contains owner role, the
matched_permissions will be {"roles/owner": ["compute.disk.get"]}. The
roles can also be found in the returned policy bindings. Note that the
map is populated only for requests with permission queries.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThis webpage provides documentation for the \u003ccode\u003eIamPolicySearchResult.Types.Explanation\u003c/code\u003e class within the Google Cloud Asset Inventory v1 API, specifically for version 3.3.0, with links to other versions.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eExplanation\u003c/code\u003e class is used to detail the results of an IAM policy search, including explanations of the matched roles and their permissions.\u003c/p\u003e\n"],["\u003cp\u003eThe class implements several interfaces such as \u003ccode\u003eIMessage\u003c/code\u003e, \u003ccode\u003eIEquatable\u003c/code\u003e, \u003ccode\u003eIDeepCloneable\u003c/code\u003e, and \u003ccode\u003eIBufferMessage\u003c/code\u003e, and inherits members from the base \u003ccode\u003eObject\u003c/code\u003e class.\u003c/p\u003e\n"],["\u003cp\u003eIt includes constructors to create new \u003ccode\u003eExplanation\u003c/code\u003e objects, either empty or by cloning another \u003ccode\u003eExplanation\u003c/code\u003e object.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eMatchedPermissions\u003c/code\u003e property provides a map between roles and the permissions that match a specified permission query, allowing users to understand which permissions are granted by each role.\u003c/p\u003e\n"]]],[],null,[]]
