Assigned
Status Update
Comments
ai...@google.com <ai...@google.com>
ka...@google.com <ka...@google.com>
ka...@google.com <ka...@google.com> #2
Thanks for the report. I will route this to the appropriate internal team and update this when I hear back from them.
de...@simpleclub.com <de...@simpleclub.com> #3
One more detail, Data Layer event calls from the watch to the phone (running Android 13) do work on if the listener is in an Activity or Fragment.
ma...@google.com <ma...@google.com> #4 Restricted+
Restricted+
Comment has been deleted.
Description
Problem you have encountered:
The customers can set limits on the roles that a principal can grant and revoke with Identity and Access Management (IAM) Conditions and the
api.getAttribute('
There is an interest in adding limits on Member ( User , Group, Service Account).
For example, the below condition would limit IAM modifications (grant or revoke) to these members (a group, a service account, and a specific user):
*api.getAttribute('
[]).hasOnly(['group:some-group@example.com',
'serviceAccount:some-sa@project-number.iam.gserviceaccount.com',
'user:john@example.com'])*
What you expected to happen:
To have more options for IAM with conditions.
Steps to reproduce:
Other information (workarounds you have tried, documentation consulted, etc):