IamService

platform.v1.IamService

RPCs

`ListOrganizations`

Request: ListOrganizationsRequest
Response: ListOrganizationsResponse
REST mapping: GET /v1/organizations

`ListApps`

Request: ListAppsRequest
Response: ListAppsResponse
REST mapping: GET /v1/apps

`GetApp`

Request: GetAppRequest
Response: App
REST mapping: GET /v1/apps/{id}

`CreateApp`

Request: CreateAppRequest
Response: CreateAppResponse
REST mapping: POST /v1/apps

`UpdateApp`

Request: UpdateAppRequest
Response: App
REST mapping: PATCH /v1/apps/{id}

`DeleteApp`

DeleteApp is refused while the app holds resources or other apps.

Request: DeleteAppRequest
Response: DeleteAppResponse
REST mapping: DELETE /v1/apps/{id}

`MoveResources`

Request: MoveResourcesRequest
Response: MoveResourcesResponse
REST mapping: POST /v1/apps/{app_id}:moveResources

`ListRoles`

Request: ListRolesRequest
Response: ListRolesResponse
REST mapping: GET /v1/roles

`ListMembers`

Request: ListMembersRequest
Response: ListMembersResponse
REST mapping: GET /v1/members

`CheckPermission`

Request: CheckPermissionRequest
Response: CheckPermissionResponse
REST mapping: POST /v1/iam:checkPermission

Messages

`App`

App groups a tenant’s resources. Apps nest; a view of an app includes the apps below it, and a role held on an app applies to them as well.

Field	Type	#	Notes
`id`	`string`	1	app_… (proj_… for apps created as projects)
`org`	`string`	2
`name`	`string`	3
`parent_id`	`string`	4	empty for a top-level app
`description`	`string`	5
`template_id`	`string`	6	the template the app was created from, if any

`CheckPermissionRequest`

CheckPermission powers the “test this permission” simulator in the IAM UI.

Field	Type	#
`principal`	`string`	1
`permission`	`string`	2
`scope`	`string`	3

`CheckPermissionResponse`

Field	Type	#	Notes
`allowed`	`bool`	1
`reason`	`string`	2

`CreateAppRequest`

Field	Type	#	Notes
`org`	`string`	1	the tenant; defaults to the caller’s
`name`	`string`	2
`parent_id`	`string`	3	empty for a top-level app
`description`	`string`	4
`attach_ids`	`string`	5	existing resources to move into the new app
`template_id`	`string`	6	launch the template’s items into the app

`CreateAppResponse`

Field	Type	#	Notes
`app`	`App`	1
`operations`	`Operation`	2	One operation per template item. A failed item leaves the others running.

`DeleteAppRequest`

Field	Type	#	Notes
`id`	`string`	1

`DeleteAppResponse`

No fields.

`GetAppRequest`

Field	Type	#	Notes
`id`	`string`	1

`ListAppsRequest`

Field	Type	#	Notes
`org`	`string`	1

`ListAppsResponse`

Field	Type	#	Notes
`apps`	`App`	1

`ListMembersRequest`

Field	Type	#	Notes
`scope`	`string`	1

`ListMembersResponse`

Field	Type	#	Notes
`members`	`Member`	1

`ListOrganizationsRequest`

No fields.

`ListOrganizationsResponse`

Field	Type	#	Notes
`organizations`	`Organization`	1

`ListRolesRequest`

No fields.

`ListRolesResponse`

Field	Type	#	Notes
`roles`	`Role`	1

`MoveResourcesRequest`

Field	Type	#	Notes
`app_id`	`string`	1	the destination
`resource_ids`	`string`	2

`MoveResourcesResponse`

Field	Type	#	Notes
`moved`	`string`	1

`UpdateAppRequest`

Field	Type	#	Notes
`id`	`string`	1
`name`	`string`	2
`description`	`string`	3
`parent_id`	`string`	4	"" moves the app to the top level