Required. The full resource name that identifies the resource. For example,
//compute.googleapis.com/projects/my-project/zones/us-central1-a/instances/my-instance.
Required. The principal whose access you want to check, in the form of
the email address that represents that principal. For example,
alice@example.com or
my-service-account@my-project.iam.gserviceaccount.com.
The principal must be a Google Account or a service account. Other types of
principals are not supported.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThe latest version of the \u003ccode\u003eAccessTuple\u003c/code\u003e class for the Policy Troubleshooter v1 API is 2.5.0, with older versions available for review.\u003c/p\u003e\n"],["\u003cp\u003e\u003ccode\u003eAccessTuple\u003c/code\u003e is a class used in the Policy Troubleshooter v1 API to check the principal, resource, and permission for access.\u003c/p\u003e\n"],["\u003cp\u003eThis \u003ccode\u003eAccessTuple\u003c/code\u003e class implements several interfaces such as \u003ccode\u003eIMessage\u003c/code\u003e, \u003ccode\u003eIEquatable\u003c/code\u003e, \u003ccode\u003eIDeepCloneable\u003c/code\u003e, and \u003ccode\u003eIBufferMessage\u003c/code\u003e.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eAccessTuple\u003c/code\u003e class has three main properties: \u003ccode\u003eFullResourceName\u003c/code\u003e, \u003ccode\u003ePermission\u003c/code\u003e, and \u003ccode\u003ePrincipal\u003c/code\u003e, each of which are strings and are required to define the resource, the permission and the principal.\u003c/p\u003e\n"],["\u003cp\u003eThe namespace of this class is \u003ccode\u003eGoogle.Cloud.PolicyTroubleshooter.V1\u003c/code\u003e, and it's found in the \u003ccode\u003eGoogle.Cloud.PolicyTroubleshooter.V1.dll\u003c/code\u003e assembly.\u003c/p\u003e\n"]]],[],null,["# Policy Troubleshooter v1 API - Class AccessTuple (2.5.0)\n\nVersion latestkeyboard_arrow_down\n\n- [2.5.0 (latest)](/dotnet/docs/reference/Google.Cloud.PolicyTroubleshooter.V1/latest/Google.Cloud.PolicyTroubleshooter.V1.AccessTuple)\n- [2.4.0](/dotnet/docs/reference/Google.Cloud.PolicyTroubleshooter.V1/2.4.0/Google.Cloud.PolicyTroubleshooter.V1.AccessTuple)\n- [2.3.0](/dotnet/docs/reference/Google.Cloud.PolicyTroubleshooter.V1/2.3.0/Google.Cloud.PolicyTroubleshooter.V1.AccessTuple)\n- [2.2.0](/dotnet/docs/reference/Google.Cloud.PolicyTroubleshooter.V1/2.2.0/Google.Cloud.PolicyTroubleshooter.V1.AccessTuple)\n- [2.1.0](/dotnet/docs/reference/Google.Cloud.PolicyTroubleshooter.V1/2.1.0/Google.Cloud.PolicyTroubleshooter.V1.AccessTuple)\n- [2.0.0](/dotnet/docs/reference/Google.Cloud.PolicyTroubleshooter.V1/2.0.0/Google.Cloud.PolicyTroubleshooter.V1.AccessTuple)\n- [1.2.0](/dotnet/docs/reference/Google.Cloud.PolicyTroubleshooter.V1/1.2.0/Google.Cloud.PolicyTroubleshooter.V1.AccessTuple)\n- [1.1.0](/dotnet/docs/reference/Google.Cloud.PolicyTroubleshooter.V1/1.1.0/Google.Cloud.PolicyTroubleshooter.V1.AccessTuple) \n\n public sealed class AccessTuple : IMessage\u003cAccessTuple\u003e, IEquatable\u003cAccessTuple\u003e, IDeepCloneable\u003cAccessTuple\u003e, IBufferMessage, IMessage\n\nReference documentation and code samples for the Policy Troubleshooter v1 API class AccessTuple.\n\nInformation about the principal, resource, and permission to check. \n\nInheritance\n-----------\n\n[object](https://learn.microsoft.com/dotnet/api/system.object) \\\u003e AccessTuple \n\nImplements\n----------\n\n[IMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IMessage-1.html)[AccessTuple](/dotnet/docs/reference/Google.Cloud.PolicyTroubleshooter.V1/latest/Google.Cloud.PolicyTroubleshooter.V1.AccessTuple), [IEquatable](https://learn.microsoft.com/dotnet/api/system.iequatable-1)[AccessTuple](/dotnet/docs/reference/Google.Cloud.PolicyTroubleshooter.V1/latest/Google.Cloud.PolicyTroubleshooter.V1.AccessTuple), [IDeepCloneable](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IDeepCloneable-1.html)[AccessTuple](/dotnet/docs/reference/Google.Cloud.PolicyTroubleshooter.V1/latest/Google.Cloud.PolicyTroubleshooter.V1.AccessTuple), [IBufferMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IBufferMessage.html), [IMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IMessage.html) \n\nInherited Members\n-----------------\n\n[object.GetHashCode()](https://learn.microsoft.com/dotnet/api/system.object.gethashcode) \n[object.GetType()](https://learn.microsoft.com/dotnet/api/system.object.gettype) \n[object.ToString()](https://learn.microsoft.com/dotnet/api/system.object.tostring)\n\nNamespace\n---------\n\n[Google.Cloud.PolicyTroubleshooter.V1](/dotnet/docs/reference/Google.Cloud.PolicyTroubleshooter.V1/latest/Google.Cloud.PolicyTroubleshooter.V1)\n\nAssembly\n--------\n\nGoogle.Cloud.PolicyTroubleshooter.V1.dll\n\nConstructors\n------------\n\n### AccessTuple()\n\n public AccessTuple()\n\n### AccessTuple(AccessTuple)\n\n public AccessTuple(AccessTuple other)\n\nProperties\n----------\n\n### FullResourceName\n\n public string FullResourceName { get; set; }\n\nRequired. The full resource name that identifies the resource. For example,\n`//compute.googleapis.com/projects/my-project/zones/us-central1-a/instances/my-instance`.\n\nFor examples of full resource names for Google Cloud services, see\n\u003chttps://cloud.google.com/iam/help/troubleshooter/full-resource-names\u003e.\n\n### Permission\n\n public string Permission { get; set; }\n\nRequired. The IAM permission to check for the specified principal and\nresource.\n\nFor a complete list of IAM permissions, see\n\u003chttps://cloud.google.com/iam/help/permissions/reference\u003e.\n\nFor a complete list of predefined IAM roles and the permissions in each\nrole, see \u003chttps://cloud.google.com/iam/help/roles/reference\u003e.\n\n### Principal\n\n public string Principal { get; set; }\n\nRequired. The principal whose access you want to check, in the form of\nthe email address that represents that principal. For example,\n`alice@example.com` or\n`my-service-account@my-project.iam.gserviceaccount.com`.\n\nThe principal must be a Google Account or a service account. Other types of\nprincipals are not supported."]]