public sealed class AllowPolicyExplanation : IMessage<AllowPolicyExplanation>, IEquatable<AllowPolicyExplanation>, IDeepCloneable<AllowPolicyExplanation>, IBufferMessage, IMessage
Reference documentation and code samples for the Policy Troubleshooter v3 API class AllowPolicyExplanation.
Details about how the relevant IAM allow policies affect the final access
state.
public RepeatedField<ExplainedAllowPolicy> ExplainedPolicies { get; }
List of IAM allow policies that were evaluated to check the principal's
permissions, with annotations to indicate how each policy contributed to
the final result.
The list of policies includes the policy for the resource itself, as well
as allow policies that are inherited from higher levels of the resource
hierarchy, including the organization, the folder, and the project.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThe \u003ccode\u003eAllowPolicyExplanation\u003c/code\u003e class in the Policy Troubleshooter v3 API provides details on how IAM allow policies affect access state.\u003c/p\u003e\n"],["\u003cp\u003eThis class inherits from \u003ccode\u003eobject\u003c/code\u003e and implements \u003ccode\u003eIMessage\u003c/code\u003e, \u003ccode\u003eIEquatable\u003c/code\u003e, \u003ccode\u003eIDeepCloneable\u003c/code\u003e, and \u003ccode\u003eIBufferMessage\u003c/code\u003e.\u003c/p\u003e\n"],["\u003cp\u003eIt includes properties such as \u003ccode\u003eAllowAccessState\u003c/code\u003e, indicating whether a principal has the specified permission, \u003ccode\u003eExplainedPolicies\u003c/code\u003e, listing evaluated IAM allow policies, and \u003ccode\u003eRelevance\u003c/code\u003e, showing the relevance of the allow policy type to the overall access state.\u003c/p\u003e\n"],["\u003cp\u003eThere are two constructors available: one default and one that takes another \u003ccode\u003eAllowPolicyExplanation\u003c/code\u003e instance as a parameter.\u003c/p\u003e\n"],["\u003cp\u003eThe class is part of the \u003ccode\u003eGoogle.Cloud.PolicyTroubleshooter.Iam.V3\u003c/code\u003e namespace and resides in the \u003ccode\u003eGoogle.Cloud.PolicyTroubleshooter.Iam.V3.dll\u003c/code\u003e assembly.\u003c/p\u003e\n"]]],[],null,[]]
