exceptionPrincipals property
The identities that are excluded from the deny rule, even if they are
listed in the denied_principals
.
For example, you could add a Google group to the denied_principals
, then
exclude specific users who belong to that group. This field can contain
the same values as the denied_principals
field, excluding
principalSet://goog/public:all
, which represents all users on the
internet.
Implementation
core.List<core.String>? exceptionPrincipals;