public sealed class DenyRuleExplanation.Types.AnnotatedDenyPrincipalMatching : IMessage<DenyRuleExplanation.Types.AnnotatedDenyPrincipalMatching>, IEquatable<DenyRuleExplanation.Types.AnnotatedDenyPrincipalMatching>, IDeepCloneable<DenyRuleExplanation.Types.AnnotatedDenyPrincipalMatching>, IBufferMessage, IMessage
Reference documentation and code samples for the Policy Troubleshooter v3 API class DenyRuleExplanation.Types.AnnotatedDenyPrincipalMatching.
Details about whether the principal in the request is listed as a denied
principal in the deny rule, either directly or through membership in a
principal set.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThis document provides reference documentation for the \u003ccode\u003eDenyRuleExplanation.Types.AnnotatedDenyPrincipalMatching\u003c/code\u003e class within the Google Cloud Policy Troubleshooter v3 API.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eAnnotatedDenyPrincipalMatching\u003c/code\u003e class details whether a principal is directly or indirectly listed as denied in a deny rule.\u003c/p\u003e\n"],["\u003cp\u003eIt inherits from \u003ccode\u003eobject\u003c/code\u003e and implements several interfaces, including \u003ccode\u003eIMessage\u003c/code\u003e, \u003ccode\u003eIEquatable\u003c/code\u003e, \u003ccode\u003eIDeepCloneable\u003c/code\u003e, and \u003ccode\u003eIBufferMessage\u003c/code\u003e.\u003c/p\u003e\n"],["\u003cp\u003eThe class has two constructors: a default one and one that takes another \u003ccode\u003eAnnotatedDenyPrincipalMatching\u003c/code\u003e object, and it also includes properties like \u003ccode\u003eMembership\u003c/code\u003e and \u003ccode\u003eRelevance\u003c/code\u003e.\u003c/p\u003e\n"],["\u003cp\u003eThere are 3 documented versions available: 1.2.0 (latest), 1.1.0, and 1.0.0.\u003c/p\u003e\n"]]],[],null,["# Policy Troubleshooter v3 API - Class DenyRuleExplanation.Types.AnnotatedDenyPrincipalMatching (1.2.0)\n\nVersion latestkeyboard_arrow_down\n\n- [1.2.0 (latest)](/dotnet/docs/reference/Google.Cloud.PolicyTroubleshooter.Iam.V3/latest/Google.Cloud.PolicyTroubleshooter.Iam.V3.DenyRuleExplanation.Types.AnnotatedDenyPrincipalMatching)\n- [1.1.0](/dotnet/docs/reference/Google.Cloud.PolicyTroubleshooter.Iam.V3/1.1.0/Google.Cloud.PolicyTroubleshooter.Iam.V3.DenyRuleExplanation.Types.AnnotatedDenyPrincipalMatching)\n- [1.0.0](/dotnet/docs/reference/Google.Cloud.PolicyTroubleshooter.Iam.V3/1.0.0/Google.Cloud.PolicyTroubleshooter.Iam.V3.DenyRuleExplanation.Types.AnnotatedDenyPrincipalMatching) \n\n public sealed class DenyRuleExplanation.Types.AnnotatedDenyPrincipalMatching : IMessage\u003cDenyRuleExplanation.Types.AnnotatedDenyPrincipalMatching\u003e, IEquatable\u003cDenyRuleExplanation.Types.AnnotatedDenyPrincipalMatching\u003e, IDeepCloneable\u003cDenyRuleExplanation.Types.AnnotatedDenyPrincipalMatching\u003e, IBufferMessage, IMessage\n\nReference documentation and code samples for the Policy Troubleshooter v3 API class DenyRuleExplanation.Types.AnnotatedDenyPrincipalMatching.\n\nDetails about whether the principal in the request is listed as a denied\nprincipal in the deny rule, either directly or through membership in a\nprincipal set. \n\nInheritance\n-----------\n\n[object](https://learn.microsoft.com/dotnet/api/system.object) \\\u003e DenyRuleExplanation.Types.AnnotatedDenyPrincipalMatching \n\nImplements\n----------\n\n[IMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IMessage-1.html)[DenyRuleExplanation](/dotnet/docs/reference/Google.Cloud.PolicyTroubleshooter.Iam.V3/latest/Google.Cloud.PolicyTroubleshooter.Iam.V3.DenyRuleExplanation)[Types](/dotnet/docs/reference/Google.Cloud.PolicyTroubleshooter.Iam.V3/latest/Google.Cloud.PolicyTroubleshooter.Iam.V3.DenyRuleExplanation.Types)[AnnotatedDenyPrincipalMatching](/dotnet/docs/reference/Google.Cloud.PolicyTroubleshooter.Iam.V3/latest/Google.Cloud.PolicyTroubleshooter.Iam.V3.DenyRuleExplanation.Types.AnnotatedDenyPrincipalMatching), [IEquatable](https://learn.microsoft.com/dotnet/api/system.iequatable-1)[DenyRuleExplanation](/dotnet/docs/reference/Google.Cloud.PolicyTroubleshooter.Iam.V3/latest/Google.Cloud.PolicyTroubleshooter.Iam.V3.DenyRuleExplanation)[Types](/dotnet/docs/reference/Google.Cloud.PolicyTroubleshooter.Iam.V3/latest/Google.Cloud.PolicyTroubleshooter.Iam.V3.DenyRuleExplanation.Types)[AnnotatedDenyPrincipalMatching](/dotnet/docs/reference/Google.Cloud.PolicyTroubleshooter.Iam.V3/latest/Google.Cloud.PolicyTroubleshooter.Iam.V3.DenyRuleExplanation.Types.AnnotatedDenyPrincipalMatching), [IDeepCloneable](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IDeepCloneable-1.html)[DenyRuleExplanation](/dotnet/docs/reference/Google.Cloud.PolicyTroubleshooter.Iam.V3/latest/Google.Cloud.PolicyTroubleshooter.Iam.V3.DenyRuleExplanation)[Types](/dotnet/docs/reference/Google.Cloud.PolicyTroubleshooter.Iam.V3/latest/Google.Cloud.PolicyTroubleshooter.Iam.V3.DenyRuleExplanation.Types)[AnnotatedDenyPrincipalMatching](/dotnet/docs/reference/Google.Cloud.PolicyTroubleshooter.Iam.V3/latest/Google.Cloud.PolicyTroubleshooter.Iam.V3.DenyRuleExplanation.Types.AnnotatedDenyPrincipalMatching), [IBufferMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IBufferMessage.html), [IMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IMessage.html) \n\nInherited Members\n-----------------\n\n[object.GetHashCode()](https://learn.microsoft.com/dotnet/api/system.object.gethashcode) \n[object.GetType()](https://learn.microsoft.com/dotnet/api/system.object.gettype) \n[object.ToString()](https://learn.microsoft.com/dotnet/api/system.object.tostring)\n\nNamespace\n---------\n\n[Google.Cloud.PolicyTroubleshooter.Iam.V3](/dotnet/docs/reference/Google.Cloud.PolicyTroubleshooter.Iam.V3/latest/Google.Cloud.PolicyTroubleshooter.Iam.V3)\n\nAssembly\n--------\n\nGoogle.Cloud.PolicyTroubleshooter.Iam.V3.dll\n\nConstructors\n------------\n\n### AnnotatedDenyPrincipalMatching()\n\n public AnnotatedDenyPrincipalMatching()\n\n### AnnotatedDenyPrincipalMatching(AnnotatedDenyPrincipalMatching)\n\n public AnnotatedDenyPrincipalMatching(DenyRuleExplanation.Types.AnnotatedDenyPrincipalMatching other)\n\nProperties\n----------\n\n### Membership\n\n public MembershipMatchingState Membership { get; set; }\n\nIndicates whether the principal is listed as a denied principal in the\ndeny rule, either directly or through membership in a principal set.\n\n### Relevance\n\n public HeuristicRelevance Relevance { get; set; }\n\nThe relevance of the principal's status to the overall determination for\nthe role binding."]]
