googleapis.com – cloudidentity

Tools (37)

Extracted live via the executor SDK.

• customers.cloudidentityCustomersUserinvitationsCancel

  Cancels a UserInvitation that was already sent.

• customers.cloudidentityCustomersUserinvitationsIsInvitableUser

  Verifies whether a user account is eligible to receive a UserInvitation (is an unmanaged account). Eligibility is based on the following criteria: * the email address is a consumer account and it's the primary email address of the account, and * the domain of the email address matches an existing verified Google Workspace or Cloud Identity domain If both conditions are met, the user is eligible. Note: This method is not supported for Workspace Essentials customers.

• customers.cloudidentityCustomersUserinvitationsList

  Retrieves a list of UserInvitation resources. Note: New consumer accounts with the customer's verified domain created within the previous 48 hours will not appear in the result. This delay also applies to newly-verified domains.

• customers.cloudidentityCustomersUserinvitationsSend

  Sends a UserInvitation to email. If the UserInvitation does not exist for this request and it is a valid request, the request creates a UserInvitation. Note: The get and list methods have a 48-hour delay where newly-created consumer accounts will not appear in the results. You can still send a UserInvitation to those accounts if you know the unmanaged email address and IsInvitableUser==True.

• devices.cloudidentityDevicesCreate

  Creates a device. Only company-owned device may be created. Note: This method is available only to customers who have one of the following SKUs: Enterprise Standard, Enterprise Plus, Enterprise for Education, and Cloud Identity Premium

• devices.cloudidentityDevicesDeviceUsersApprove

  Approves device to access user data.

• devices.cloudidentityDevicesDeviceUsersBlock

  Blocks device from accessing user data

• devices.cloudidentityDevicesDeviceUsersCancelWipe

  Cancels an unfinished user account wipe. This operation can be used to cancel device wipe in the gap between the wipe operation returning success and the device being wiped.

• devices.cloudidentityDevicesDeviceUsersClientStatesList

  Lists the client states for the given search query.

• devices.cloudidentityDevicesDeviceUsersList

  Lists/Searches DeviceUsers.

• devices.cloudidentityDevicesDeviceUsersLookup

  Looks up resource names of the DeviceUsers associated with the caller's credentials, as well as the properties provided in the request. This method must be called with end-user credentials with the scope: https://www.googleapis.com/auth/cloud-identity.devices.lookup If multiple properties are provided, only DeviceUsers having all of these properties are considered as matches - i.e. the query behaves like an AND. Different platforms require different amounts of information from the caller to ensure that the DeviceUser is uniquely identified. - iOS: No properties need to be passed, the caller's credentials are sufficient to identify the corresponding DeviceUser. - Android: Specifying the 'android_id' field is required. - Desktop: Specifying the 'raw_resource_id' field is required.

• devices.cloudidentityDevicesDeviceUsersWipe

  Wipes the user's account on a device. Other data on the device that is not associated with the user's work account is not affected. For example, if a Gmail app is installed on a device that is used for personal and work purposes, and the user is logged in to the Gmail app with their personal account as well as their work account, wiping the "deviceUser" by their work administrator will not affect their personal account within Gmail or other apps such as Photos.

• devices.cloudidentityDevicesList

  Lists/Searches devices.

• groups.cloudidentityGroupsCreate

  Creates a Group.

• groups.cloudidentityGroupsList

  Lists the Group resources under a customer or namespace.

• groups.cloudidentityGroupsLookup

  Looks up the resource name of a Group by its EntityKey.

• groups.cloudidentityGroupsMembershipsCheckTransitiveMembership

  Check a potential member for membership in a group. Note: This feature is only available to Google Workspace Enterprise Standard, Enterprise Plus, and Enterprise for Education; and Cloud Identity Premium accounts. If the account of the member is not one of these, a 403 (PERMISSION_DENIED) HTTP status code will be returned. A member has membership to a group as long as there is a single viewable transitive membership between the group and the member. The actor must have view permissions to at least one transitive membership between the member and group.

• groups.cloudidentityGroupsMembershipsCreate

  Creates a Membership.

• groups.cloudidentityGroupsMembershipsGetMembershipGraph

  Get a membership graph of just a member or both a member and a group. Note: This feature is only available to Google Workspace Enterprise Standard, Enterprise Plus, and Enterprise for Education; and Cloud Identity Premium accounts. If the account of the member is not one of these, a 403 (PERMISSION_DENIED) HTTP status code will be returned. Given a member, the response will contain all membership paths from the member. Given both a group and a member, the response will contain all membership paths between the group and the member.

• groups.cloudidentityGroupsMembershipsList

  Lists the Memberships within a Group.

• groups.cloudidentityGroupsMembershipsLookup

  Looks up the resource name of a Membership by its EntityKey.

• groups.cloudidentityGroupsMembershipsModifyMembershipRoles

  Modifies the MembershipRoles of a Membership.

• groups.cloudidentityGroupsMembershipsSearchDirectGroups

  Searches direct groups of a member.

• groups.cloudidentityGroupsMembershipsSearchTransitiveGroups

  Search transitive groups of a member. Note: This feature is only available to Google Workspace Enterprise Standard, Enterprise Plus, and Enterprise for Education; and Cloud Identity Premium accounts. If the account of the member is not one of these, a 403 (PERMISSION_DENIED) HTTP status code will be returned. A transitive group is any group that has a direct or indirect membership to the member. Actor must have view permissions all transitive groups.

• groups.cloudidentityGroupsMembershipsSearchTransitiveMemberships

  Search transitive memberships of a group. Note: This feature is only available to Google Workspace Enterprise Standard, Enterprise Plus, and Enterprise for Education; and Cloud Identity Premium accounts. If the account of the group is not one of these, a 403 (PERMISSION_DENIED) HTTP status code will be returned. A transitive membership is any direct or indirect membership of a group. Actor must have view permissions to all transitive memberships.

• groups.cloudidentityGroupsSearch

  Searches for Group resources matching a specified query.

• inboundSamlSsoProfiles.cloudidentityInboundSamlSsoProfilesCreate

  Creates an InboundSamlSsoProfile for a customer.

• inboundSamlSsoProfiles.cloudidentityInboundSamlSsoProfilesIdpCredentialsAdd

  Adds an IdpCredential. Up to 2 credentials are allowed.

• inboundSamlSsoProfiles.cloudidentityInboundSamlSsoProfilesIdpCredentialsList

  Returns a list of IdpCredentials in an InboundSamlSsoProfile.

• inboundSamlSsoProfiles.cloudidentityInboundSamlSsoProfilesList

  Lists InboundSamlSsoProfiles for a customer.

• inboundSsoAssignments.cloudidentityInboundSsoAssignmentsCreate

  Creates an InboundSsoAssignment for users and devices in a Customer under a given Group or OrgUnit.

• inboundSsoAssignments.cloudidentityInboundSsoAssignmentsDelete

  Deletes an InboundSsoAssignment. To disable SSO, Create (or Update) an assignment that has sso_mode == SSO_OFF.

• inboundSsoAssignments.cloudidentityInboundSsoAssignmentsGet

  Gets an InboundSsoAssignment.

• inboundSsoAssignments.cloudidentityInboundSsoAssignmentsList

  Lists the InboundSsoAssignments for a Customer.

• inboundSsoAssignments.cloudidentityInboundSsoAssignmentsPatch

  Updates an InboundSsoAssignment. The body of this request is the inbound_sso_assignment field and the update_mask is relative to that. For example: a PATCH to /v1/inboundSsoAssignments/0abcdefg1234567&update_mask=rank with a body of { "rank": 1 } moves that (presumably group-targeted) SSO assignment to the highest priority and shifts any other group-targeted assignments down in priority.

• openapi.previewSpec

  Preview an OpenAPI document before adding it as a source

• openapi.addSource

  Add an OpenAPI source and register its operations as tools