The Access Context Manager API lets you create, list, update, and delete AccessPolicies, their Access Levels, and Service Perimeters within a Google Cloud organization, using long‑running operations to track provisioning and removal of these resources.
pageSize(query, limit) — Number of AccessPolicy instances to include in the list. Default 100.
pageToken(query) — Next page token for the next batch of AccessPolicy instances. Defaults to the first page of results.
parent(query) — Required. Resource name for the container to list AccessPolicy instances from. Format: `organizations/{org_id}`
POST
/v1beta/accessPolicies
Create an `AccessPolicy`. Fails if this organization already has a `AccessPolicy`. The longrunning Operation will have a successful status once the `AccessPolicy` has propagated to long-lasting storage. Syntactic and basic semantic errors will be returned in `metadata` as a BadRequest proto.
DELETE
/v1beta/{name}
Delete a Service Perimeter by resource name. The longrunning operation from this RPC will have a successful status once the Service Perimeter has been removed from long-lasting storage.
name(path, required) — Required. Resource name for the Service Perimeter. Format: `accessPolicies/{policy_id}/servicePerimeters/{service_perimeter_id}`
GET
/v1beta/{name}
Gets the latest state of a long-running operation. Clients can use this method to poll the operation result at intervals as recommended by the API service.
name(path, required) — The name of the operation resource.
accessLevelFormat(query) — Whether to return `BasicLevels` in the Cloud Common Expression Language rather than as `BasicLevels`. Defaults to AS_DEFINED, where Access Levels are returned as `BasicLevels` or `CustomLevels` based on how they were created. If set to CEL, all Access Levels are returned as `CustomLevels`. In the CEL case, `BasicLevels` are translated to equivalent `CustomLevels`.
PATCH
/v1beta/{name}
Update a Service Perimeter. The longrunning operation from this RPC will have a successful status once the changes to the Service Perimeter have propagated to long-lasting storage. Service Perimeter containing errors will result in an error response for the first error encountered.
name(path, required) — Resource name for the `ServicePerimeter`. Format: `accessPolicies/{access_policy}/servicePerimeters/{service_perimeter}`. The `service_perimeter` component must begin with a letter, followed by alphanumeric characters or `_`. After you create a `ServicePerimeter`, you cannot change its `name`.
updateMask(query) — Required. Mask to control which fields get updated. Must be non-empty.
GET
/v1beta/{parent}/accessLevels
List all Access Levels for an access policy.
parent(path, required) — Required. Resource name for the access policy to list Access Levels from. Format: `accessPolicies/{policy_id}`
accessLevelFormat(query) — Whether to return `BasicLevels` in the Cloud Common Expression language, as `CustomLevels`, rather than as `BasicLevels`. Defaults to returning `AccessLevels` in the format they were defined.
pageSize(query, limit) — Number of Access Levels to include in the list. Default 100.
pageToken(query) — Next page token for the next batch of Access Level instances. Defaults to the first page of results.
POST
/v1beta/{parent}/accessLevels
Create an Access Level. The longrunning operation from this RPC will have a successful status once the Access Level has propagated to long-lasting storage. Access Levels containing errors will result in an error response for the first error encountered.
parent(path, required) — Required. Resource name for the access policy which owns this Access Level. Format: `accessPolicies/{policy_id}`
GET
/v1beta/{parent}/servicePerimeters
List all Service Perimeters for an access policy.
parent(path, required) — Required. Resource name for the access policy to list Service Perimeters from. Format: `accessPolicies/{policy_id}`
pageSize(query, limit) — Number of Service Perimeters to include in the list. Default 100.
pageToken(query) — Next page token for the next batch of Service Perimeter instances. Defaults to the first page of results.
POST
/v1beta/{parent}/servicePerimeters
Create a Service Perimeter. The longrunning operation from this RPC will have a successful status once the Service Perimeter has propagated to long-lasting storage. Service Perimeters containing errors will result in an error response for the first error encountered.
parent(path, required) — Required. Resource name for the access policy which owns this Service Perimeter. Format: `accessPolicies/{policy_id}`
9 endpoints auto-detected
Authentication
This API requires authentication: OAuth.
curl -X GET \
"https://accesscontextmanager.googleapis.com/v1beta/accessPolicies"