Package com.databricks.sdk.service.iam

Class AccountAccessControlProxyAPI

java.lang.Object

com.databricks.sdk.service.iam.AccountAccessControlProxyAPI

@Generated
public class AccountAccessControlProxyAPI
extends Object

These APIs manage access rules on resources in an account. Currently, only grant rules are supported. A grant rule specifies a role assigned to a set of principals. A list of rules attached to a resource is called a rule set. A workspace must belong to an account for these APIs to work.

Constructor Summary

Constructors

Constructor	Description
AccountAccessControlProxyAPI(ApiClient apiClient)	Regular-use constructor
AccountAccessControlProxyAPI(AccountAccessControlProxyService mock)	Constructor for mocks

Method Summary

Modifier and Type	Method	Description
GetAssignableRolesForResourceResponse	getAssignableRolesForResource(GetAssignableRolesForResourceRequest request)	Get assignable roles for a resource.
GetAssignableRolesForResourceResponse	getAssignableRolesForResource(String resource)
RuleSetResponse	getRuleSet(GetRuleSetRequest request)	Get a rule set.
RuleSetResponse	getRuleSet(String name, String etag)
AccountAccessControlProxyService	impl()
RuleSetResponse	updateRuleSet(UpdateRuleSetRequest request)	Update a rule set.
RuleSetResponse	updateRuleSet(String name, RuleSetUpdateRequest ruleSet)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AccountAccessControlProxyAPI

public AccountAccessControlProxyAPI(ApiClient apiClient)

Regular-use constructor

AccountAccessControlProxyAPI

public AccountAccessControlProxyAPI(AccountAccessControlProxyService mock)

Constructor for mocks

Method Detail

getAssignableRolesForResource

public GetAssignableRolesForResourceResponse getAssignableRolesForResource(String resource)

getAssignableRolesForResource

public GetAssignableRolesForResourceResponse getAssignableRolesForResource(GetAssignableRolesForResourceRequest request)

Get assignable roles for a resource.

Gets all the roles that can be granted on an account-level resource. A role is grantable if the rule set on the resource can contain an access rule of the role.

getRuleSet

public RuleSetResponse getRuleSet(String name,
                                  String etag)

getRuleSet

public RuleSetResponse getRuleSet(GetRuleSetRequest request)

Get a rule set.

Get a rule set by its name. A rule set is always attached to a resource and contains a list of access rules on the said resource. Currently only a default rule set for each resource is supported.

updateRuleSet

public RuleSetResponse updateRuleSet(String name,
                                     RuleSetUpdateRequest ruleSet)

updateRuleSet

public RuleSetResponse updateRuleSet(UpdateRuleSetRequest request)

Update a rule set.

Replace the rules of a rule set. First, use a GET rule set request to read the current version of the rule set before modifying it. This pattern helps prevent conflicts between concurrent updates.

impl

public AccountAccessControlProxyService impl()