public sealed class IamPolicySearchResult.Types.Explanation : IMessage<IamPolicySearchResult.Types.Explanation>, IEquatable<IamPolicySearchResult.Types.Explanation>, IDeepCloneable<IamPolicySearchResult.Types.Explanation>, IBufferMessage, IMessage
Reference documentation and code samples for the Google Cloud Asset Inventory v1 API class IamPolicySearchResult.Types.Explanation.
public MapField<string, IamPolicySearchResult.Types.Explanation.Types.Permissions> MatchedPermissions { get; }
The map from roles to their included permissions that match the
permission query (i.e., a query containing policy.role.permissions:).
Example: if query policy.role.permissions:compute.disk.get
matches a policy binding that contains owner role, the
matched_permissions will be {"roles/owner": ["compute.disk.get"]}. The
roles can also be found in the returned policy bindings. Note that the
map is populated only for requests with permission queries.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThe document provides reference documentation for the \u003ccode\u003eIamPolicySearchResult.Types.Explanation\u003c/code\u003e class within the Google Cloud Asset Inventory v1 API.\u003c/p\u003e\n"],["\u003cp\u003eThis class is used to provide explanations about the IAM policy search results, implementing various interfaces like \u003ccode\u003eIMessage\u003c/code\u003e, \u003ccode\u003eIEquatable\u003c/code\u003e, and \u003ccode\u003eIDeepCloneable\u003c/code\u003e.\u003c/p\u003e\n"],["\u003cp\u003eThe latest version available is 3.12.0, and it also includes the versions of the documentation available from 2.7.0 up until 3.12.0.\u003c/p\u003e\n"],["\u003cp\u003eThe class has two constructors, a default one and another that takes an \u003ccode\u003eIamPolicySearchResult.Types.Explanation\u003c/code\u003e instance as a parameter.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eMatchedPermissions\u003c/code\u003e property is a \u003ccode\u003eMapField\u003c/code\u003e that shows the matching permissions for a given role when a permission query is performed.\u003c/p\u003e\n"]]],[],null,["# Google Cloud Asset Inventory v1 API - Class IamPolicySearchResult.Types.Explanation (3.13.0)\n\nVersion latestkeyboard_arrow_down\n\n- [3.13.0 (latest)](/dotnet/docs/reference/Google.Cloud.Asset.V1/latest/Google.Cloud.Asset.V1.IamPolicySearchResult.Types.Explanation)\n- [3.12.0](/dotnet/docs/reference/Google.Cloud.Asset.V1/3.12.0/Google.Cloud.Asset.V1.IamPolicySearchResult.Types.Explanation)\n- [3.11.0](/dotnet/docs/reference/Google.Cloud.Asset.V1/3.11.0/Google.Cloud.Asset.V1.IamPolicySearchResult.Types.Explanation)\n- [3.10.0](/dotnet/docs/reference/Google.Cloud.Asset.V1/3.10.0/Google.Cloud.Asset.V1.IamPolicySearchResult.Types.Explanation)\n- [3.9.0](/dotnet/docs/reference/Google.Cloud.Asset.V1/3.9.0/Google.Cloud.Asset.V1.IamPolicySearchResult.Types.Explanation)\n- [3.8.0](/dotnet/docs/reference/Google.Cloud.Asset.V1/3.8.0/Google.Cloud.Asset.V1.IamPolicySearchResult.Types.Explanation)\n- [3.7.0](/dotnet/docs/reference/Google.Cloud.Asset.V1/3.7.0/Google.Cloud.Asset.V1.IamPolicySearchResult.Types.Explanation)\n- [3.6.0](/dotnet/docs/reference/Google.Cloud.Asset.V1/3.6.0/Google.Cloud.Asset.V1.IamPolicySearchResult.Types.Explanation)\n- [3.5.0](/dotnet/docs/reference/Google.Cloud.Asset.V1/3.5.0/Google.Cloud.Asset.V1.IamPolicySearchResult.Types.Explanation)\n- [3.4.0](/dotnet/docs/reference/Google.Cloud.Asset.V1/3.4.0/Google.Cloud.Asset.V1.IamPolicySearchResult.Types.Explanation)\n- [3.3.0](/dotnet/docs/reference/Google.Cloud.Asset.V1/3.3.0/Google.Cloud.Asset.V1.IamPolicySearchResult.Types.Explanation)\n- [3.2.0](/dotnet/docs/reference/Google.Cloud.Asset.V1/3.2.0/Google.Cloud.Asset.V1.IamPolicySearchResult.Types.Explanation)\n- [3.1.0](/dotnet/docs/reference/Google.Cloud.Asset.V1/3.1.0/Google.Cloud.Asset.V1.IamPolicySearchResult.Types.Explanation)\n- [3.0.0](/dotnet/docs/reference/Google.Cloud.Asset.V1/3.0.0/Google.Cloud.Asset.V1.IamPolicySearchResult.Types.Explanation)\n- [2.11.0](/dotnet/docs/reference/Google.Cloud.Asset.V1/2.11.0/Google.Cloud.Asset.V1.IamPolicySearchResult.Types.Explanation)\n- [2.10.0](/dotnet/docs/reference/Google.Cloud.Asset.V1/2.10.0/Google.Cloud.Asset.V1.IamPolicySearchResult.Types.Explanation)\n- [2.9.0](/dotnet/docs/reference/Google.Cloud.Asset.V1/2.9.0/Google.Cloud.Asset.V1.IamPolicySearchResult.Types.Explanation)\n- [2.8.0](/dotnet/docs/reference/Google.Cloud.Asset.V1/2.8.0/Google.Cloud.Asset.V1.IamPolicySearchResult.Types.Explanation)\n- [2.7.0](/dotnet/docs/reference/Google.Cloud.Asset.V1/2.7.0/Google.Cloud.Asset.V1.IamPolicySearchResult.Types.Explanation) \n\n public sealed class IamPolicySearchResult.Types.Explanation : IMessage\u003cIamPolicySearchResult.Types.Explanation\u003e, IEquatable\u003cIamPolicySearchResult.Types.Explanation\u003e, IDeepCloneable\u003cIamPolicySearchResult.Types.Explanation\u003e, IBufferMessage, IMessage\n\nReference documentation and code samples for the Google Cloud Asset Inventory v1 API class IamPolicySearchResult.Types.Explanation.\n\nExplanation about the IAM policy search result. \n\nInheritance\n-----------\n\n[object](https://learn.microsoft.com/dotnet/api/system.object) \\\u003e IamPolicySearchResult.Types.Explanation \n\nImplements\n----------\n\n[IMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IMessage-1.html)[IamPolicySearchResult](/dotnet/docs/reference/Google.Cloud.Asset.V1/latest/Google.Cloud.Asset.V1.IamPolicySearchResult)[Types](/dotnet/docs/reference/Google.Cloud.Asset.V1/latest/Google.Cloud.Asset.V1.IamPolicySearchResult.Types)[Explanation](/dotnet/docs/reference/Google.Cloud.Asset.V1/latest/Google.Cloud.Asset.V1.IamPolicySearchResult.Types.Explanation), [IEquatable](https://learn.microsoft.com/dotnet/api/system.iequatable-1)[IamPolicySearchResult](/dotnet/docs/reference/Google.Cloud.Asset.V1/latest/Google.Cloud.Asset.V1.IamPolicySearchResult)[Types](/dotnet/docs/reference/Google.Cloud.Asset.V1/latest/Google.Cloud.Asset.V1.IamPolicySearchResult.Types)[Explanation](/dotnet/docs/reference/Google.Cloud.Asset.V1/latest/Google.Cloud.Asset.V1.IamPolicySearchResult.Types.Explanation), [IDeepCloneable](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IDeepCloneable-1.html)[IamPolicySearchResult](/dotnet/docs/reference/Google.Cloud.Asset.V1/latest/Google.Cloud.Asset.V1.IamPolicySearchResult)[Types](/dotnet/docs/reference/Google.Cloud.Asset.V1/latest/Google.Cloud.Asset.V1.IamPolicySearchResult.Types)[Explanation](/dotnet/docs/reference/Google.Cloud.Asset.V1/latest/Google.Cloud.Asset.V1.IamPolicySearchResult.Types.Explanation), [IBufferMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IBufferMessage.html), [IMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IMessage.html) \n\nInherited Members\n-----------------\n\n[object.GetHashCode()](https://learn.microsoft.com/dotnet/api/system.object.gethashcode) \n[object.GetType()](https://learn.microsoft.com/dotnet/api/system.object.gettype) \n[object.ToString()](https://learn.microsoft.com/dotnet/api/system.object.tostring)\n\nNamespace\n---------\n\n[Google.Cloud.Asset.V1](/dotnet/docs/reference/Google.Cloud.Asset.V1/latest/Google.Cloud.Asset.V1)\n\nAssembly\n--------\n\nGoogle.Cloud.Asset.V1.dll\n\nConstructors\n------------\n\n### Explanation()\n\n public Explanation()\n\n### Explanation(Explanation)\n\n public Explanation(IamPolicySearchResult.Types.Explanation other)\n\nProperties\n----------\n\n### MatchedPermissions\n\n public MapField\u003cstring, IamPolicySearchResult.Types.Explanation.Types.Permissions\u003e MatchedPermissions { get; }\n\nThe map from roles to their included permissions that match the\npermission query (i.e., a query containing `policy.role.permissions:`).\nExample: if query `policy.role.permissions:compute.disk.get`\nmatches a policy binding that contains owner role, the\nmatched_permissions will be `{\"roles/owner\": [\"compute.disk.get\"]}`. The\nroles can also be found in the returned `policy` bindings. Note that the\nmap is populated only for requests with permission queries."]]
