@swamp/gcp/cloudidentity
v2026.04.23.1
Google Cloud cloudidentity infrastructure models
Repository
https://github.com/systeminit/swamp-extensions
Labels
gcpgoogle-cloudcloudidentitycloudinfrastructure
Contents
Quality score
Verified by SwampHow well-documented and verifiable this extension is.
Grade A
- Has README or module doc2/2earned
- README has a code example1/1earned
- README is substantive1/1earned
- Most symbols documented1/1earned
- No slow types1/1earned
- Has description1/1earned
- At least one platform tag (or universal)1/1earned
- Two or more platform tags (or universal)1/1earned
- License declared1/1earned
- Verified public repository2/2earned
Install
$ swamp extension pull @swamp/gcp/cloudidentity@swamp/gcp/cloudidentity/customers-userinvitationsv2026.04.23.1customers_userinvitations.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| parent? | string | The parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456) |
getGet a userinvitations
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the userinvitations |
syncSync userinvitations state from GCP
cancelcancel
is_invitable_useris invitable user
sendsend
Resources
state(infinite)— The `UserInvitation` resource represents an email that can be sent to an unma...
@swamp/gcp/cloudidentity/devicesv2026.04.23.1devices.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| androidSpecificAttributes? | object | Resource representing the Android specific attributes of a Device. |
| assetTag? | string | Asset tag of the device. |
| deviceId? | string | Unique identifier for the device. |
| endpointVerificationSpecificAttributes? | object | Resource representing the [Endpoint Verification-specific attributes](https://cloud.google.com/endpoint-verification/docs/device-information) of a device. |
| hostname? | string | Host name of the device. |
| lastSyncTime? | string | Most recent time when device synced with this service. |
| serialNumber? | string | Serial Number of device. Example: HT82V1A01076. |
| wifiMacAddresses? | array | WiFi MAC addresses of device. |
| customer? | string | Optional. [Resource name](https://cloud.google.com/apis/design/resource_names) of the customer. If you're using this API for your own organization, use `customers/my_customer` If you're using this API to manage another organization, use `customers/{customer}`, where customer is the customer to whom the device belongs. |
createCreate a devices
getGet a devices
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the devices |
deleteDelete the devices
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the devices |
syncSync devices state from GCP
cancel_wipecancel wipe
| Argument | Type | Description |
|---|---|---|
| customer? | any |
wipewipe
| Argument | Type | Description |
|---|---|---|
| customer? | any |
Resources
state(infinite)— A Device within the Cloud Identity Devices API. Represents a Device known to ...
@swamp/gcp/cloudidentity/devices-deviceusersv2026.04.23.1devices_deviceusers.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| parent? | string | The parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456) |
getGet a deviceUsers
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the deviceUsers |
deleteDelete the deviceUsers
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the deviceUsers |
syncSync deviceUsers state from GCP
approveapprove
| Argument | Type | Description |
|---|---|---|
| customer? | any |
blockblock
| Argument | Type | Description |
|---|---|---|
| customer? | any |
cancel_wipecancel wipe
| Argument | Type | Description |
|---|---|---|
| customer? | any |
lookuplookup
wipewipe
| Argument | Type | Description |
|---|---|---|
| customer? | any |
Resources
state(infinite)— Represents a user's use of a Device in the Cloud Identity Devices API. A Devi...
@swamp/gcp/cloudidentity/devices-deviceusers-clientstatesv2026.04.23.1devices_deviceusers_clientstates.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| assetTags? | array | The caller can specify asset tags for this resource |
| complianceState? | enum | The compliance state of the resource as specified by the API client. |
| createTime? | string | Output only. The time the client state data was created. |
| customId? | string | This field may be used to store a unique identifier for the API resource within which these CustomAttributes are a field. |
| etag? | string | The token that needs to be passed back for concurrency control in updates. Token needs to be passed back in UpdateRequest |
| healthScore? | enum | The Health score of the resource. The Health score is the callers specification of the condition of the device from a usability point of view. For example, a third-party device management provider may specify a health score based on its compliance with organizational policies. |
| keyValuePairs? | record | The map of key-value attributes stored by callers specific to a device. The total serialized length of this map may not exceed 10KB. No limit is placed on the number of attributes in a map. |
| lastUpdateTime? | string | Output only. The time the client state data was last updated. |
| managed? | enum | The management state of the resource as specified by the API client. |
| name? | string | Output only. [Resource name](https://cloud.google.com/apis/design/resource_names) of the ClientState in format: `devices/{device}/deviceUsers/{device_user}/clientState/{partner}`, where partner corresponds to the partner storing the data. For partners belonging to the \ |
| ownerType? | enum | Output only. The owner of the ClientState |
| scoreReason? | string | A descriptive cause of the health score. |
| parent? | string | The parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456) |
getGet a clientStates
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the clientStates |
updateUpdate clientStates attributes
syncSync clientStates state from GCP
Resources
state(infinite)— Represents the state associated with an API client calling the Devices API. R...
@swamp/gcp/cloudidentity/groupsv2026.04.23.1groups.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| description? | string | An extended description to help users determine the purpose of a `Group`. Must not be longer than 4,096 characters. |
| displayName? | string | The display name of the `Group`. |
| dynamicGroupMetadata? | object | Dynamic group metadata like queries and status. |
| groupKey? | object | A unique identifier for an entity in the Cloud Identity Groups API. An entity can represent either a group with an optional `namespace` or a user without a `namespace`. The combination of `id` and `namespace` must be unique; however, the same `id` can be used with different `namespace`s. |
| labels? | record | Required. One or more label entries that apply to the Group. Labels contain a key with an empty value. Google Groups are the default type of group and have a label with a key of `cloudidentity.googleapis.com/groups.discussion_forum` and an empty value. Existing Google Groups can have an additional label with a key of `cloudidentity.googleapis.com/groups.security` and an empty value added to them. **This is an immutable change and the security label cannot be removed once added.** Dynamic groups |
| parent? | string | Required. Immutable. The resource name of the entity under which this `Group` resides in the Cloud Identity resource hierarchy. Must be of the form `identitysources/{identity_source}` for external [identity-mapped groups](https://support.google.com/a/answer/9039510) or `customers/{customer_id}` for Google Groups. The `customer_id` must begin with \ |
| initialGroupConfig? | string | Optional. The initial configuration option for the `Group`. |
createCreate a groups
getGet a groups
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the groups |
updateUpdate groups attributes
deleteDelete the groups
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the groups |
syncSync groups state from GCP
get_security_settingsget security settings
lookuplookup
searchsearch
update_security_settingsupdate security settings
| Argument | Type | Description |
|---|---|---|
| memberRestriction? | any | |
| name? | any |
Resources
state(infinite)— A group within the Cloud Identity Groups API. A `Group` is a collection of en...
@swamp/gcp/cloudidentity/groups-membershipsv2026.04.23.1groups_memberships.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| preferredMemberKey? | object | A unique identifier for an entity in the Cloud Identity Groups API. An entity can represent either a group with an optional `namespace` or a user without a `namespace`. The combination of `id` and `namespace` must be unique; however, the same `id` can be used with different `namespace`s. |
| roles? | array | The `MembershipRole`s that apply to the `Membership`. If unspecified, defaults to a single `MembershipRole` with `name` `MEMBER`. Must not contain duplicate `MembershipRole`s with the same `name`. |
| parent? | string | The parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456) |
createCreate a memberships
getGet a memberships
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the memberships |
deleteDelete the memberships
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the memberships |
syncSync memberships state from GCP
check_transitive_membershipcheck transitive membership
get_membership_graphget membership graph
lookuplookup
modify_membership_rolesmodify membership roles
| Argument | Type | Description |
|---|---|---|
| addRoles? | any | |
| removeRoles? | any | |
| updateRolesParams? | any |
search_direct_groupssearch direct groups
search_transitive_groupssearch transitive groups
search_transitive_membershipssearch transitive memberships
Resources
state(infinite)— A membership within the Cloud Identity Groups API. A `Membership` defines a r...
@swamp/gcp/cloudidentity/inboundoidcssoprofilesv2026.04.23.1inboundoidcssoprofiles.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| customer? | string | Immutable. The customer. For example: `customers/C0123abc`. |
| displayName? | string | Human-readable name of the OIDC SSO profile. |
| idpConfig? | object | OIDC IDP (identity provider) configuration. |
| rpConfig? | object | OIDC RP (relying party) configuration. |
createCreate a inboundOidcSsoProfiles
getGet a inboundOidcSsoProfiles
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the inboundOidcSsoProfiles |
updateUpdate inboundOidcSsoProfiles attributes
deleteDelete the inboundOidcSsoProfiles
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the inboundOidcSsoProfiles |
syncSync inboundOidcSsoProfiles state from GCP
Resources
state(infinite)— An [OIDC](https://openid.net/developers/how-connect-works/) federation betwee...
@swamp/gcp/cloudidentity/inboundsamlssoprofilesv2026.04.23.1inboundsamlssoprofiles.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| customer? | string | Immutable. The customer. For example: `customers/C0123abc`. |
| displayName? | string | Human-readable name of the SAML SSO profile. |
| idpConfig? | object | SAML IDP (identity provider) configuration. |
| spConfig? | object | SAML SP (service provider) configuration. |
createCreate a inboundSamlSsoProfiles
getGet a inboundSamlSsoProfiles
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the inboundSamlSsoProfiles |
updateUpdate inboundSamlSsoProfiles attributes
deleteDelete the inboundSamlSsoProfiles
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the inboundSamlSsoProfiles |
syncSync inboundSamlSsoProfiles state from GCP
Resources
state(infinite)— A [SAML 2.0](https://www.oasis-open.org/standards#samlv2.0) federation betwee...
@swamp/gcp/cloudidentity/inboundsamlssoprofiles-idpcredentialsv2026.04.23.1inboundsamlssoprofiles_idpcredentials.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| parent? | string | The parent resource name (e.g., projects/my-project/locations/us-central1, organizations/123, folders/456) |
getGet a idpCredentials
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the idpCredentials |
deleteDelete the idpCredentials
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the idpCredentials |
syncSync idpCredentials state from GCP
addadd
| Argument | Type | Description |
|---|---|---|
| pemData? | any |
Resources
state(infinite)— Credential for verifying signatures produced by the Identity Provider.
@swamp/gcp/cloudidentity/inboundssoassignmentsv2026.04.23.1inboundssoassignments.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| customer? | string | Immutable. The customer. For example: `customers/C0123abc`. |
| oidcSsoInfo? | object | Details that are applicable when `sso_mode` is set to `OIDC_SSO`. |
| rank? | number | Must be zero (which is the default value so it can be omitted) for assignments with `target_org_unit` set and must be greater-than-or-equal-to one for assignments with `target_group` set. |
| samlSsoInfo? | object | Details that are applicable when `sso_mode` == `SAML_SSO`. |
| signInBehavior? | object | Controls sign-in behavior. |
| ssoMode? | enum | Inbound SSO behavior. |
| targetGroup? | string | Immutable. Must be of the form `groups/{group}`. |
| targetOrgUnit? | string | Immutable. Must be of the form `orgUnits/{org_unit}`. |
createCreate a inboundSsoAssignments
getGet a inboundSsoAssignments
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the inboundSsoAssignments |
updateUpdate inboundSsoAssignments attributes
deleteDelete the inboundSsoAssignments
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the inboundSsoAssignments |
syncSync inboundSsoAssignments state from GCP
Resources
state(infinite)— Targets with "set" SSO assignments and their respective assignments.
@swamp/gcp/cloudidentity/policiesv2026.04.23.1policies.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
getGet a policies
| Argument | Type | Description |
|---|---|---|
| identifier | string | The name of the policies |
syncSync policies state from GCP
Resources
state(infinite)— A Policy resource binds an instance of a single Setting with the scope of a P...
2026.04.03.350.8 KBApr 3, 2026
Google Cloud cloudidentity infrastructure models
Release Notes
- Updated: customers_userinvitations, devices, devices_deviceusers, devices_deviceusers_clientstates, groups, groups_memberships, inboundoidcssoprofiles, inboundsamlssoprofiles, inboundsamlssoprofiles_idpcredentials, inboundssoassignments, policies
linux-x86_64linux-aarch64darwin-x86_64darwin-aarch64
gcpgoogle-cloudcloudidentitycloudinfrastructure
2026.04.03.150.0 KBApr 3, 2026
Google Cloud cloudidentity infrastructure models
Release Notes
- Updated: customers_userinvitations, devices, devices_deviceusers, devices_deviceusers_clientstates, groups, groups_memberships, inboundoidcssoprofiles, inboundsamlssoprofiles, inboundsamlssoprofiles_idpcredentials, inboundssoassignments, policies
linux-x86_64linux-aarch64darwin-x86_64darwin-aarch64
gcpgoogle-cloudcloudidentitycloudinfrastructure
2026.04.02.250.0 KBApr 2, 2026
Google Cloud cloudidentity infrastructure models
linux-x86_64linux-aarch64darwin-x86_64darwin-aarch64
gcpgoogle-cloudcloudidentitycloudinfrastructure
2026.03.27.151.1 KBMar 27, 2026
Google Cloud cloudidentity infrastructure models
Release Notes
- Added: customers_userinvitations, devices, devices_deviceusers, devices_deviceusers_clientstates, groups, groups_memberships, inboundoidcssoprofiles, inboundsamlssoprofiles, inboundsamlssoprofiles_idpcredentials, inboundssoassignments, policies
linux-x86_64linux-aarch64darwin-x86_64darwin-aarch64
gcpgoogle-cloudcloudidentitycloudinfrastructure