The deny policy denies the principal the permission.
NotDenied
The deny policy doesn't deny the principal the permission.
UnknownConditional
The deny policy denies the principal the permission if a condition
expression evaluates to true. However, the sender of the request didn't
provide enough context for Policy Troubleshooter to evaluate the condition
expression.
UnknownInfo
The sender of the request does not have access to all of the deny policies
that Policy Troubleshooter needs to evaluate the principal's access.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThis document provides reference information for the \u003ccode\u003eDenyAccessState\u003c/code\u003e enum within the Google Cloud Policy Troubleshooter v3 API.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eDenyAccessState\u003c/code\u003e enum indicates whether IAM deny policies are currently preventing a principal from accessing a permission.\u003c/p\u003e\n"],["\u003cp\u003eThere are five possible states outlined within the enum: \u003ccode\u003eDenied\u003c/code\u003e, \u003ccode\u003eNotDenied\u003c/code\u003e, \u003ccode\u003eUnknownConditional\u003c/code\u003e, \u003ccode\u003eUnknownInfo\u003c/code\u003e, and \u003ccode\u003eUnspecified\u003c/code\u003e.\u003c/p\u003e\n"],["\u003cp\u003eThe document lists different versions of the documentation for the \u003ccode\u003eDenyAccessState\u003c/code\u003e enum, including 1.0.0, 1.1.0, and the latest version, 1.2.0.\u003c/p\u003e\n"]]],[],null,[]]