APIHub
Back to Explore

Access Context Manager API

The Access Context Manager API lets you create, list, update, and delete AccessPolicies, their Access Levels, and Service Perimeters within a Google Cloud organization, using long‑running operations to track provisioning and removal of these resources.

Analytics
OAuth
HTTPS
CORS: Unknown
Description enriched
Visit official documentation

Latency

143ms p95

Uptime

100.0% 30d

Playground

Verified

live

Endpoints

REST · JSON
GET

/v1beta/accessPolicies

List all AccessPolicies under a container.

  • pageSize (query, limit) — Number of AccessPolicy instances to include in the list. Default 100.
  • pageToken (query) — Next page token for the next batch of AccessPolicy instances. Defaults to the first page of results.
  • parent (query) — Required. Resource name for the container to list AccessPolicy instances from. Format: `organizations/{org_id}`
POST

/v1beta/accessPolicies

Create an `AccessPolicy`. Fails if this organization already has a `AccessPolicy`. The longrunning Operation will have a successful status once the `AccessPolicy` has propagated to long-lasting storage. Syntactic and basic semantic errors will be returned in `metadata` as a BadRequest proto.

DELETE

/v1beta/{name}

Delete a Service Perimeter by resource name. The longrunning operation from this RPC will have a successful status once the Service Perimeter has been removed from long-lasting storage.

  • name (path, required) — Required. Resource name for the Service Perimeter. Format: `accessPolicies/{policy_id}/servicePerimeters/{service_perimeter_id}`
GET

/v1beta/{name}

Gets the latest state of a long-running operation. Clients can use this method to poll the operation result at intervals as recommended by the API service.

  • name (path, required) — The name of the operation resource.
  • accessLevelFormat (query) — Whether to return `BasicLevels` in the Cloud Common Expression Language rather than as `BasicLevels`. Defaults to AS_DEFINED, where Access Levels are returned as `BasicLevels` or `CustomLevels` based on how they were created. If set to CEL, all Access Levels are returned as `CustomLevels`. In the CEL case, `BasicLevels` are translated to equivalent `CustomLevels`.
PATCH

/v1beta/{name}

Update a Service Perimeter. The longrunning operation from this RPC will have a successful status once the changes to the Service Perimeter have propagated to long-lasting storage. Service Perimeter containing errors will result in an error response for the first error encountered.

  • name (path, required) — Resource name for the `ServicePerimeter`. Format: `accessPolicies/{access_policy}/servicePerimeters/{service_perimeter}`. The `service_perimeter` component must begin with a letter, followed by alphanumeric characters or `_`. After you create a `ServicePerimeter`, you cannot change its `name`.
  • updateMask (query) — Required. Mask to control which fields get updated. Must be non-empty.
GET

/v1beta/{parent}/accessLevels

List all Access Levels for an access policy.

  • parent (path, required) — Required. Resource name for the access policy to list Access Levels from. Format: `accessPolicies/{policy_id}`
  • accessLevelFormat (query) — Whether to return `BasicLevels` in the Cloud Common Expression language, as `CustomLevels`, rather than as `BasicLevels`. Defaults to returning `AccessLevels` in the format they were defined.
  • pageSize (query, limit) — Number of Access Levels to include in the list. Default 100.
  • pageToken (query) — Next page token for the next batch of Access Level instances. Defaults to the first page of results.
POST

/v1beta/{parent}/accessLevels

Create an Access Level. The longrunning operation from this RPC will have a successful status once the Access Level has propagated to long-lasting storage. Access Levels containing errors will result in an error response for the first error encountered.

  • parent (path, required) — Required. Resource name for the access policy which owns this Access Level. Format: `accessPolicies/{policy_id}`
GET

/v1beta/{parent}/servicePerimeters

List all Service Perimeters for an access policy.

  • parent (path, required) — Required. Resource name for the access policy to list Service Perimeters from. Format: `accessPolicies/{policy_id}`
  • pageSize (query, limit) — Number of Service Perimeters to include in the list. Default 100.
  • pageToken (query) — Next page token for the next batch of Service Perimeter instances. Defaults to the first page of results.
POST

/v1beta/{parent}/servicePerimeters

Create a Service Perimeter. The longrunning operation from this RPC will have a successful status once the Service Perimeter has propagated to long-lasting storage. Service Perimeters containing errors will result in an error response for the first error encountered.

  • parent (path, required) — Required. Resource name for the access policy which owns this Service Perimeter. Format: `accessPolicies/{policy_id}`

9 endpoints auto-detected

Authentication

This API requires authentication: OAuth.

curl -X GET \
  "https://accesscontextmanager.googleapis.com/v1beta/accessPolicies"

accesscontextmanager.googleapis.com · HTTPS only