scopes property
The scopes of the AccessPolicy.
Scopes define which resources a policy can restrict and where its
resources can be referenced. For example, policy A with
scopes=["folders/123"]
has the following behavior: - ServicePerimeter
can only restrict projects within folders/123
. - ServicePerimeter within
policy A can only reference access levels defined within policy A. - Only
one policy can include a given scope; thus, attempting to create a second
policy which includes folders/123
will result in an error. If no scopes
are provided, then any resource within the organization can be restricted.
Scopes cannot be modified after a policy is created. Policies can only
have a single scope. Format: list of folders/{folder_number}
or
projects/{project_number}
Implementation
core.List<core.String>? scopes;