FetchEffectiveSettingsResponse

The effective value of the settings at the given location resource, evaluated based on the crm resource hierarchy.

JSON representation 
{
  "parent": string,
  "serviceAccountApproverSettings": {
    object (ServiceAccountApproverSettings)
  },
  "emailNotificationSettings": {
    object (EmailNotificationSettings)
  }
}
Fields
parent

string

Output only. The resource on which the settings are effective. Possible formats:

  • projects/{project-number|project-id}/locations/{region}
  • folders/{folder-number}/locations/{region}
  • organizations/{organization-number}/locations/{region}
serviceAccountApproverSettings

object (ServiceAccountApproverSettings)

Output only. Effective settings for allowing service account as approvers.
emailNotificationSettings

object (EmailNotificationSettings)

Output only. EmailNotificationSettings defines effective node-wide email notification preferences for various PAM events.

ServiceAccountApproverSettings

This controls whether service accounts are allowed to approve grants or can be designated as approvers within PAM entitlements.

JSON representation 
{
  "enabled": boolean,
  "source": string
}
Fields
enabled

boolean

Output only. Indicates whether service account is allowed to grant approvals.
source

string

Output only. The resource from which the service account approver setting is inherited. This field remains empty if the setting is not defined at either the parent or resource level, in which case PAM's default behavior is applied.

EmailNotificationSettings

EmailNotificationSettings reflects the effective node-wide email notification settings.

JSON representation 
{
  "source": string,

  // Union field notification_behavior can be only one of the following:
  "disableAllNotifications": {
    object (DisableAllNotifications)
  },
  "customNotificationBehavior": {
    object (CustomNotificationBehavior)
  }
  // End of list of possible types for union field notification_behavior.
}
Fields
source

string

Output only. The name of the resource from which the notification behavior is inherited. This field remains empty if the setting is not defined at either the parent or resource level, in which case PAM's default behavior is applied.
Union field notification_behavior. Notification behavior. notification_behavior can be only one of the following:
disableAllNotifications

object (DisableAllNotifications)

Output only. Disable all notifications.
customNotificationBehavior

object (CustomNotificationBehavior)

Output only. Granular settings of notifications.

DisableAllNotifications

This type has no fields.

This option indicates that all email notifications are disabled.

CustomNotificationBehavior

CustomNotificationBehavior reflects the granular notification delivery settings for specific events and personas, as configured by the admin.

JSON representation 
{
  "requesterNotifications": {
    object (RequesterNotifications)
  },
  "adminNotifications": {
    object (AdminNotifications)
  },
  "approverNotifications": {
    object (ApproverNotifications)
  }
}
Fields
requesterNotifications

object (RequesterNotifications)

Output only. Requester email notifications.
adminNotifications

object (AdminNotifications)

Output only. Admin email notifications.
approverNotifications

object (ApproverNotifications)

Output only. Approver email notifications.

RequesterNotifications

Email notifications specific to Requesters.

JSON representation 
{
  "notifyEntitlementAssigned": boolean,
  "notifyGrantActivated": boolean,
  "notifyGrantDenied": boolean,
  "notifyGrantExpired": boolean,
  "notifyGrantEnded": boolean,
  "notifyGrantRevoked": boolean,
  "notifyGrantExternallyModified": boolean,
  "notifyGrantActivationFailed": boolean
}
Fields
notifyEntitlementAssigned

boolean

Output only. Notification delivery for entitlement assigned.
notifyGrantActivated

boolean

Output only. Notification delivery for grant activated.
notifyGrantDenied

boolean

Output only. Notification delivery for grant denied.
notifyGrantExpired

boolean

Output only. Notification delivery for grant request expired.
notifyGrantEnded

boolean

Output only. Notification delivery for grant ended.
notifyGrantRevoked

boolean

Output only. Notification delivery for grant revoked.
notifyGrantExternallyModified

boolean

Output only. Notification delivery for grant externally modified.
notifyGrantActivationFailed

boolean

Output only. Notification delivery for grant activation failed.

AdminNotifications

Email notifications specific to Admins.

JSON representation 
{
  "notifyGrantActivated": boolean,
  "notifyGrantEnded": boolean,
  "notifyGrantExternallyModified": boolean,
  "notifyGrantActivationFailed": boolean
}
Fields
notifyGrantActivated

boolean

Output only. Notification delivery for grant activated.
notifyGrantEnded

boolean

Output only. Notification delivery for grant ended.
notifyGrantExternallyModified

boolean

Output only. Notification delivery for grant externally modified.
notifyGrantActivationFailed

boolean

Output only. Notification delivery for grant activation failed.

ApproverNotifications

Email notifications specific to Approvers.

JSON representation 
{
  "notifyPendingApproval": boolean
}
Fields
notifyPendingApproval

boolean

Output only. Notification delivery for pending approval.