Returns the deviceUsers Resource.
cancelWipe(name, body=None, x__xgafv=None)
Cancels an unfinished device wipe. This operation can be used to cancel device wipe in the gap between the wipe operation returning success and the device being wiped.
Close httplib2 connections.
create(body=None, x__xgafv=None)
Creates a device. Only company-owned device may be created. **Note**: This method is available only to customers who have one of the following SKUs: Enterprise Standard, Enterprise Plus, Enterprise for Education, and Cloud Identity Premium
delete(name, customer=None, x__xgafv=None)
Deletes the specified device.
get(name, customer=None, x__xgafv=None)
Retrieves the specified device.
Lists/Searches devices.
Retrieves the next page of results.
wipe(name, body=None, x__xgafv=None)
Wipes all data on the specified device.
cancelWipe(name, body=None, x__xgafv=None)
Cancels an unfinished device wipe. This operation can be used to cancel device wipe in the gap between the wipe operation returning success and the device being wiped.
Args:
name: string, Required. [Resource name](https://cloud.google.com/apis/design/resource_names) of the Device in format: `devices/{device_id}`, where device_id is the unique ID assigned to the Device. (required)
body: object, The request body.
The object takes the form of:
{ # Request message for cancelling an unfinished device wipe.
"customer": "A String", # Optional. [Resource name](https://cloud.google.com/apis/design/resource_names) of the customer. If you're using this API for your own organization, use `customers/my_customer` If you're using this API to manage another organization, use `customers/{customer_id}`, where customer_id is the customer to whom the device belongs.
}
x__xgafv: string, V1 error format.
Allowed values
1 - v1 error format
2 - v2 error format
Returns:
An object of the form:
{ # This resource represents a long-running operation that is the result of a network API call.
"done": True or False, # If the value is `false`, it means the operation is still in progress. If `true`, the operation is completed, and either `error` or `response` is available.
"error": { # The `Status` type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by [gRPC](https://github.com/grpc). Each `Status` message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the [API Design Guide](https://cloud.google.com/apis/design/errors). # The error result of the operation in case of failure or cancellation.
"code": 42, # The status code, which should be an enum value of google.rpc.Code.
"details": [ # A list of messages that carry the error details. There is a common set of message types for APIs to use.
{
"a_key": "", # Properties of the object. Contains field @type with type URL.
},
],
"message": "A String", # A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
},
"metadata": { # Service-specific metadata associated with the operation. It typically contains progress information and common metadata such as create time. Some services might not provide such metadata. Any method that returns a long-running operation should document the metadata type, if any.
"a_key": "", # Properties of the object. Contains field @type with type URL.
},
"name": "A String", # The server-assigned name, which is only unique within the same service that originally returns it. If you use the default HTTP mapping, the `name` should be a resource name ending with `operations/{unique_id}`.
"response": { # The normal, successful response of the operation. If the original method returns no data on success, such as `Delete`, the response is `google.protobuf.Empty`. If the original method is standard `Get`/`Create`/`Update`, the response should be the resource. For other methods, the response should have the type `XxxResponse`, where `Xxx` is the original method name. For example, if the original method name is `TakeSnapshot()`, the inferred response type is `TakeSnapshotResponse`.
"a_key": "", # Properties of the object. Contains field @type with type URL.
},
}
close()
Close httplib2 connections.
create(body=None, x__xgafv=None)
Creates a device. Only company-owned device may be created. **Note**: This method is available only to customers who have one of the following SKUs: Enterprise Standard, Enterprise Plus, Enterprise for Education, and Cloud Identity Premium
Args:
body: object, The request body.
The object takes the form of:
{ # Request message for creating a Company Owned device.
"customer": "A String", # Optional. [Resource name](https://cloud.google.com/apis/design/resource_names) of the customer. If you're using this API for your own organization, use `customers/my_customer` If you're using this API to manage another organization, use `customers/{customer_id}`, where customer_id is the customer to whom the device belongs.
"device": { # A Device within the Cloud Identity Devices API. Represents a Device known to Google Cloud, independent of the device ownership, type, and whether it is assigned or in use by a user. # Required. The device to be created. The name field within this device is ignored in the create method. A new name is created by the method, and returned within the response. Only the fields `device_type`, `serial_number` and `asset_tag` (if present) are used to create the device. All other fields are ignored. The `device_type` and `serial_number` fields are required.
"androidSpecificAttributes": { # Resource representing the Android specific attributes of a Device. # Output only. Attributes specific to Android devices.
"ctsProfileMatch": True or False, # Whether the device passes Android CTS compliance.
"enabledUnknownSources": True or False, # Whether applications from unknown sources can be installed on device.
"hasPotentiallyHarmfulApps": True or False, # Whether any potentially harmful apps were detected on the device.
"ownerProfileAccount": True or False, # Whether this account is on an owner/primary profile. For phones, only true for owner profiles. Android 4+ devices can have secondary or restricted user profiles.
"ownershipPrivilege": "A String", # Ownership privileges on device.
"supportsWorkProfile": True or False, # Whether device supports Android work profiles. If false, this service will not block access to corp data even if an administrator turns on the "Enforce Work Profile" policy.
"verifiedBoot": True or False, # Whether Android verified boot status is GREEN.
"verifyAppsEnabled": True or False, # Whether Google Play Protect Verify Apps is enabled.
},
"assetTag": "A String", # Asset tag of the device.
"basebandVersion": "A String", # Output only. Baseband version of the device.
"bootloaderVersion": "A String", # Output only. Device bootloader version. Example: 0.6.7.
"brand": "A String", # Output only. Device brand. Example: Samsung.
"buildNumber": "A String", # Output only. Build number of the device.
"clientTypes": [ # List of the clients the device is reporting to.
"A String",
],
"compromisedState": "A String", # Output only. Represents whether the Device is compromised.
"createTime": "A String", # Output only. When the Company-Owned device was imported. This field is empty for BYOD devices.
"deviceId": "A String", # Unique identifier for the device.
"deviceType": "A String", # Output only. Type of device.
"enabledDeveloperOptions": True or False, # Output only. Whether developer options is enabled on device.
"enabledUsbDebugging": True or False, # Output only. Whether USB debugging is enabled on device.
"encryptionState": "A String", # Output only. Device encryption state.
"endpointVerificationSpecificAttributes": { # Resource representing the [Endpoint Verification-specific attributes](https://cloud.google.com/endpoint-verification/docs/device-information) of a device. # Output only. Attributes specific to [Endpoint Verification](https://cloud.google.com/endpoint-verification/docs/overview) devices.
"additionalSignals": { # [Additional signals](https://cloud.google.com/endpoint-verification/docs/device-information) reported by Endpoint Verification. It includes the following attributes: * Non-configurable attributes: hotfixes, av_installed, av_enabled, windows_domain_name, is_os_native_firewall_enabled, and is_secure_boot_enabled. * [Configurable attributes](https://cloud.google.com/endpoint-verification/docs/collect-config-attributes): file, folder, and binary attributes; registry entries; and properties in a plist.
"a_key": "", # Properties of the object.
},
"browserAttributes": [ # Details of browser profiles reported by Endpoint Verification.
{ # Contains information about browser profiles reported by the [Endpoint Verification extension](https://chromewebstore.google.com/detail/endpoint-verification/callobklhcbilhphinckomhgkigmfocg?pli=1).
"chromeBrowserInfo": { # Browser-specific fields reported by the [Endpoint Verification extension](https://chromewebstore.google.com/detail/endpoint-verification/callobklhcbilhphinckomhgkigmfocg?pli=1). # Represents the current state of the [Chrome browser attributes](https://cloud.google.com/access-context-manager/docs/browser-attributes) sent by the [Endpoint Verification extension](https://chromewebstore.google.com/detail/endpoint-verification/callobklhcbilhphinckomhgkigmfocg?pli=1).
"browserManagementState": "A String", # Output only. Browser's management state.
"browserVersion": "A String", # Version of the request initiating browser. E.g. `91.0.4442.4`.
"isBuiltInDnsClientEnabled": True or False, # Current state of [built-in DNS client](https://chromeenterprise.google/policies/#BuiltInDnsClientEnabled).
"isBulkDataEntryAnalysisEnabled": True or False, # Current state of [bulk data analysis](https://chromeenterprise.google/policies/#OnBulkDataEntryEnterpriseConnector). Set to true if provider list from Chrome is non-empty.
"isChromeCleanupEnabled": True or False, # Current state of [Chrome Cleanup](https://chromeenterprise.google/policies/#ChromeCleanupEnabled).
"isChromeRemoteDesktopAppBlocked": True or False, # Current state of [Chrome Remote Desktop app](https://chromeenterprise.google/policies/#URLBlocklist).
"isFileDownloadAnalysisEnabled": True or False, # Current state of [file download analysis](https://chromeenterprise.google/policies/#OnFileDownloadedEnterpriseConnector). Set to true if provider list from Chrome is non-empty.
"isFileUploadAnalysisEnabled": True or False, # Current state of [file upload analysis](https://chromeenterprise.google/policies/#OnFileAttachedEnterpriseConnector). Set to true if provider list from Chrome is non-empty.
"isRealtimeUrlCheckEnabled": True or False, # Current state of [real-time URL check](https://chromeenterprise.google/policies/#EnterpriseRealTimeUrlCheckMode). Set to true if provider list from Chrome is non-empty.
"isSecurityEventAnalysisEnabled": True or False, # Current state of [security event analysis](https://chromeenterprise.google/policies/#OnSecurityEventEnterpriseConnector). Set to true if provider list from Chrome is non-empty.
"isSiteIsolationEnabled": True or False, # Current state of [site isolation](https://chromeenterprise.google/policies/?policy=IsolateOrigins).
"isThirdPartyBlockingEnabled": True or False, # Current state of [third-party blocking](https://chromeenterprise.google/policies/#ThirdPartyBlockingEnabled).
"passwordProtectionWarningTrigger": "A String", # Current state of [password protection trigger](https://chromeenterprise.google/policies/#PasswordProtectionWarningTrigger).
"safeBrowsingProtectionLevel": "A String", # Current state of [Safe Browsing protection level](https://chromeenterprise.google/policies/#SafeBrowsingProtectionLevel).
},
"chromeProfileId": "A String", # Chrome profile ID that is exposed by the Chrome API. It is unique for each device.
"lastProfileSyncTime": "A String", # Timestamp in milliseconds since the Unix epoch when the profile/gcm id was last synced.
},
],
"certificateAttributes": [ # Details of certificates.
{ # Stores information about a certificate.
"certificateTemplate": { # CertificateTemplate (v3 Extension in X.509). # The X.509 extension for CertificateTemplate.
"id": "A String", # The template id of the template. Example: "1.3.6.1.4.1.311.21.8.15608621.11768144.5720724.16068415.6889630.81.2472537.7784047".
"majorVersion": 42, # The Major version of the template. Example: 100.
"minorVersion": 42, # The minor version of the template. Example: 12.
},
"fingerprint": "A String", # The encoded certificate fingerprint.
"issuer": "A String", # The name of the issuer of this certificate.
"serialNumber": "A String", # Serial number of the certificate, Example: "123456789".
"subject": "A String", # The subject name of this certificate.
"thumbprint": "A String", # The certificate thumbprint.
"validationState": "A String", # Validation state of this certificate.
"validityExpirationTime": "A String", # Certificate not valid at or after this timestamp.
"validityStartTime": "A String", # Certificate not valid before this timestamp.
},
],
},
"hostname": "A String", # Host name of the device.
"imei": "A String", # Output only. IMEI number of device if GSM device; empty otherwise.
"kernelVersion": "A String", # Output only. Kernel version of the device.
"lastSyncTime": "A String", # Most recent time when device synced with this service.
"managementState": "A String", # Output only. Management state of the device
"manufacturer": "A String", # Output only. Device manufacturer. Example: Motorola.
"meid": "A String", # Output only. MEID number of device if CDMA device; empty otherwise.
"model": "A String", # Output only. Model name of device. Example: Pixel 3.
"name": "A String", # Output only. [Resource name](https://cloud.google.com/apis/design/resource_names) of the Device in format: `devices/{device_id}`, where device_id is the unique id assigned to the Device.
"networkOperator": "A String", # Output only. Mobile or network operator of device, if available.
"osVersion": "A String", # Output only. OS version of the device. Example: Android 8.1.0.
"otherAccounts": [ # Output only. Domain name for Google accounts on device. Type for other accounts on device. On Android, will only be populated if |ownership_privilege| is |PROFILE_OWNER| or |DEVICE_OWNER|. Does not include the account signed in to the device policy app if that account's domain has only one account. Examples: "com.example", "xyz.com".
"A String",
],
"ownerType": "A String", # Output only. Whether the device is owned by the company or an individual
"releaseVersion": "A String", # Output only. OS release version. Example: 6.0.
"securityPatchTime": "A String", # Output only. OS security patch update time on device.
"serialNumber": "A String", # Serial Number of device. Example: HT82V1A01076.
"unifiedDeviceId": "A String", # Output only. Unified device id of the device.
"wifiMacAddresses": [ # WiFi MAC addresses of device.
"A String",
],
},
}
x__xgafv: string, V1 error format.
Allowed values
1 - v1 error format
2 - v2 error format
Returns:
An object of the form:
{ # This resource represents a long-running operation that is the result of a network API call.
"done": True or False, # If the value is `false`, it means the operation is still in progress. If `true`, the operation is completed, and either `error` or `response` is available.
"error": { # The `Status` type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by [gRPC](https://github.com/grpc). Each `Status` message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the [API Design Guide](https://cloud.google.com/apis/design/errors). # The error result of the operation in case of failure or cancellation.
"code": 42, # The status code, which should be an enum value of google.rpc.Code.
"details": [ # A list of messages that carry the error details. There is a common set of message types for APIs to use.
{
"a_key": "", # Properties of the object. Contains field @type with type URL.
},
],
"message": "A String", # A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
},
"metadata": { # Service-specific metadata associated with the operation. It typically contains progress information and common metadata such as create time. Some services might not provide such metadata. Any method that returns a long-running operation should document the metadata type, if any.
"a_key": "", # Properties of the object. Contains field @type with type URL.
},
"name": "A String", # The server-assigned name, which is only unique within the same service that originally returns it. If you use the default HTTP mapping, the `name` should be a resource name ending with `operations/{unique_id}`.
"response": { # The normal, successful response of the operation. If the original method returns no data on success, such as `Delete`, the response is `google.protobuf.Empty`. If the original method is standard `Get`/`Create`/`Update`, the response should be the resource. For other methods, the response should have the type `XxxResponse`, where `Xxx` is the original method name. For example, if the original method name is `TakeSnapshot()`, the inferred response type is `TakeSnapshotResponse`.
"a_key": "", # Properties of the object. Contains field @type with type URL.
},
}
delete(name, customer=None, x__xgafv=None)
Deletes the specified device.
Args:
name: string, Required. [Resource name](https://cloud.google.com/apis/design/resource_names) of the Device in format: `devices/{device_id}`, where device_id is the unique ID assigned to the Device. (required)
customer: string, Optional. [Resource name](https://cloud.google.com/apis/design/resource_names) of the customer. If you're using this API for your own organization, use `customers/my_customer` If you're using this API to manage another organization, use `customers/{customer_id}`, where customer_id is the customer to whom the device belongs.
x__xgafv: string, V1 error format.
Allowed values
1 - v1 error format
2 - v2 error format
Returns:
An object of the form:
{ # This resource represents a long-running operation that is the result of a network API call.
"done": True or False, # If the value is `false`, it means the operation is still in progress. If `true`, the operation is completed, and either `error` or `response` is available.
"error": { # The `Status` type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by [gRPC](https://github.com/grpc). Each `Status` message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the [API Design Guide](https://cloud.google.com/apis/design/errors). # The error result of the operation in case of failure or cancellation.
"code": 42, # The status code, which should be an enum value of google.rpc.Code.
"details": [ # A list of messages that carry the error details. There is a common set of message types for APIs to use.
{
"a_key": "", # Properties of the object. Contains field @type with type URL.
},
],
"message": "A String", # A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
},
"metadata": { # Service-specific metadata associated with the operation. It typically contains progress information and common metadata such as create time. Some services might not provide such metadata. Any method that returns a long-running operation should document the metadata type, if any.
"a_key": "", # Properties of the object. Contains field @type with type URL.
},
"name": "A String", # The server-assigned name, which is only unique within the same service that originally returns it. If you use the default HTTP mapping, the `name` should be a resource name ending with `operations/{unique_id}`.
"response": { # The normal, successful response of the operation. If the original method returns no data on success, such as `Delete`, the response is `google.protobuf.Empty`. If the original method is standard `Get`/`Create`/`Update`, the response should be the resource. For other methods, the response should have the type `XxxResponse`, where `Xxx` is the original method name. For example, if the original method name is `TakeSnapshot()`, the inferred response type is `TakeSnapshotResponse`.
"a_key": "", # Properties of the object. Contains field @type with type URL.
},
}
get(name, customer=None, x__xgafv=None)
Retrieves the specified device.
Args:
name: string, Required. [Resource name](https://cloud.google.com/apis/design/resource_names) of the Device in format: `devices/{device_id}`, where device_id is the unique ID assigned to the Device. (required)
customer: string, Optional. [Resource name](https://cloud.google.com/apis/design/resource_names) of the Customer in format: `customers/{customer_id}`, where customer_id is the customer to whom the device belongs.
x__xgafv: string, V1 error format.
Allowed values
1 - v1 error format
2 - v2 error format
Returns:
An object of the form:
{ # A Device within the Cloud Identity Devices API. Represents a Device known to Google Cloud, independent of the device ownership, type, and whether it is assigned or in use by a user.
"androidSpecificAttributes": { # Resource representing the Android specific attributes of a Device. # Output only. Attributes specific to Android devices.
"ctsProfileMatch": True or False, # Whether the device passes Android CTS compliance.
"enabledUnknownSources": True or False, # Whether applications from unknown sources can be installed on device.
"hasPotentiallyHarmfulApps": True or False, # Whether any potentially harmful apps were detected on the device.
"ownerProfileAccount": True or False, # Whether this account is on an owner/primary profile. For phones, only true for owner profiles. Android 4+ devices can have secondary or restricted user profiles.
"ownershipPrivilege": "A String", # Ownership privileges on device.
"supportsWorkProfile": True or False, # Whether device supports Android work profiles. If false, this service will not block access to corp data even if an administrator turns on the "Enforce Work Profile" policy.
"verifiedBoot": True or False, # Whether Android verified boot status is GREEN.
"verifyAppsEnabled": True or False, # Whether Google Play Protect Verify Apps is enabled.
},
"assetTag": "A String", # Asset tag of the device.
"basebandVersion": "A String", # Output only. Baseband version of the device.
"bootloaderVersion": "A String", # Output only. Device bootloader version. Example: 0.6.7.
"brand": "A String", # Output only. Device brand. Example: Samsung.
"buildNumber": "A String", # Output only. Build number of the device.
"clientTypes": [ # List of the clients the device is reporting to.
"A String",
],
"compromisedState": "A String", # Output only. Represents whether the Device is compromised.
"createTime": "A String", # Output only. When the Company-Owned device was imported. This field is empty for BYOD devices.
"deviceId": "A String", # Unique identifier for the device.
"deviceType": "A String", # Output only. Type of device.
"enabledDeveloperOptions": True or False, # Output only. Whether developer options is enabled on device.
"enabledUsbDebugging": True or False, # Output only. Whether USB debugging is enabled on device.
"encryptionState": "A String", # Output only. Device encryption state.
"endpointVerificationSpecificAttributes": { # Resource representing the [Endpoint Verification-specific attributes](https://cloud.google.com/endpoint-verification/docs/device-information) of a device. # Output only. Attributes specific to [Endpoint Verification](https://cloud.google.com/endpoint-verification/docs/overview) devices.
"additionalSignals": { # [Additional signals](https://cloud.google.com/endpoint-verification/docs/device-information) reported by Endpoint Verification. It includes the following attributes: * Non-configurable attributes: hotfixes, av_installed, av_enabled, windows_domain_name, is_os_native_firewall_enabled, and is_secure_boot_enabled. * [Configurable attributes](https://cloud.google.com/endpoint-verification/docs/collect-config-attributes): file, folder, and binary attributes; registry entries; and properties in a plist.
"a_key": "", # Properties of the object.
},
"browserAttributes": [ # Details of browser profiles reported by Endpoint Verification.
{ # Contains information about browser profiles reported by the [Endpoint Verification extension](https://chromewebstore.google.com/detail/endpoint-verification/callobklhcbilhphinckomhgkigmfocg?pli=1).
"chromeBrowserInfo": { # Browser-specific fields reported by the [Endpoint Verification extension](https://chromewebstore.google.com/detail/endpoint-verification/callobklhcbilhphinckomhgkigmfocg?pli=1). # Represents the current state of the [Chrome browser attributes](https://cloud.google.com/access-context-manager/docs/browser-attributes) sent by the [Endpoint Verification extension](https://chromewebstore.google.com/detail/endpoint-verification/callobklhcbilhphinckomhgkigmfocg?pli=1).
"browserManagementState": "A String", # Output only. Browser's management state.
"browserVersion": "A String", # Version of the request initiating browser. E.g. `91.0.4442.4`.
"isBuiltInDnsClientEnabled": True or False, # Current state of [built-in DNS client](https://chromeenterprise.google/policies/#BuiltInDnsClientEnabled).
"isBulkDataEntryAnalysisEnabled": True or False, # Current state of [bulk data analysis](https://chromeenterprise.google/policies/#OnBulkDataEntryEnterpriseConnector). Set to true if provider list from Chrome is non-empty.
"isChromeCleanupEnabled": True or False, # Current state of [Chrome Cleanup](https://chromeenterprise.google/policies/#ChromeCleanupEnabled).
"isChromeRemoteDesktopAppBlocked": True or False, # Current state of [Chrome Remote Desktop app](https://chromeenterprise.google/policies/#URLBlocklist).
"isFileDownloadAnalysisEnabled": True or False, # Current state of [file download analysis](https://chromeenterprise.google/policies/#OnFileDownloadedEnterpriseConnector). Set to true if provider list from Chrome is non-empty.
"isFileUploadAnalysisEnabled": True or False, # Current state of [file upload analysis](https://chromeenterprise.google/policies/#OnFileAttachedEnterpriseConnector). Set to true if provider list from Chrome is non-empty.
"isRealtimeUrlCheckEnabled": True or False, # Current state of [real-time URL check](https://chromeenterprise.google/policies/#EnterpriseRealTimeUrlCheckMode). Set to true if provider list from Chrome is non-empty.
"isSecurityEventAnalysisEnabled": True or False, # Current state of [security event analysis](https://chromeenterprise.google/policies/#OnSecurityEventEnterpriseConnector). Set to true if provider list from Chrome is non-empty.
"isSiteIsolationEnabled": True or False, # Current state of [site isolation](https://chromeenterprise.google/policies/?policy=IsolateOrigins).
"isThirdPartyBlockingEnabled": True or False, # Current state of [third-party blocking](https://chromeenterprise.google/policies/#ThirdPartyBlockingEnabled).
"passwordProtectionWarningTrigger": "A String", # Current state of [password protection trigger](https://chromeenterprise.google/policies/#PasswordProtectionWarningTrigger).
"safeBrowsingProtectionLevel": "A String", # Current state of [Safe Browsing protection level](https://chromeenterprise.google/policies/#SafeBrowsingProtectionLevel).
},
"chromeProfileId": "A String", # Chrome profile ID that is exposed by the Chrome API. It is unique for each device.
"lastProfileSyncTime": "A String", # Timestamp in milliseconds since the Unix epoch when the profile/gcm id was last synced.
},
],
"certificateAttributes": [ # Details of certificates.
{ # Stores information about a certificate.
"certificateTemplate": { # CertificateTemplate (v3 Extension in X.509). # The X.509 extension for CertificateTemplate.
"id": "A String", # The template id of the template. Example: "1.3.6.1.4.1.311.21.8.15608621.11768144.5720724.16068415.6889630.81.2472537.7784047".
"majorVersion": 42, # The Major version of the template. Example: 100.
"minorVersion": 42, # The minor version of the template. Example: 12.
},
"fingerprint": "A String", # The encoded certificate fingerprint.
"issuer": "A String", # The name of the issuer of this certificate.
"serialNumber": "A String", # Serial number of the certificate, Example: "123456789".
"subject": "A String", # The subject name of this certificate.
"thumbprint": "A String", # The certificate thumbprint.
"validationState": "A String", # Validation state of this certificate.
"validityExpirationTime": "A String", # Certificate not valid at or after this timestamp.
"validityStartTime": "A String", # Certificate not valid before this timestamp.
},
],
},
"hostname": "A String", # Host name of the device.
"imei": "A String", # Output only. IMEI number of device if GSM device; empty otherwise.
"kernelVersion": "A String", # Output only. Kernel version of the device.
"lastSyncTime": "A String", # Most recent time when device synced with this service.
"managementState": "A String", # Output only. Management state of the device
"manufacturer": "A String", # Output only. Device manufacturer. Example: Motorola.
"meid": "A String", # Output only. MEID number of device if CDMA device; empty otherwise.
"model": "A String", # Output only. Model name of device. Example: Pixel 3.
"name": "A String", # Output only. [Resource name](https://cloud.google.com/apis/design/resource_names) of the Device in format: `devices/{device_id}`, where device_id is the unique id assigned to the Device.
"networkOperator": "A String", # Output only. Mobile or network operator of device, if available.
"osVersion": "A String", # Output only. OS version of the device. Example: Android 8.1.0.
"otherAccounts": [ # Output only. Domain name for Google accounts on device. Type for other accounts on device. On Android, will only be populated if |ownership_privilege| is |PROFILE_OWNER| or |DEVICE_OWNER|. Does not include the account signed in to the device policy app if that account's domain has only one account. Examples: "com.example", "xyz.com".
"A String",
],
"ownerType": "A String", # Output only. Whether the device is owned by the company or an individual
"releaseVersion": "A String", # Output only. OS release version. Example: 6.0.
"securityPatchTime": "A String", # Output only. OS security patch update time on device.
"serialNumber": "A String", # Serial Number of device. Example: HT82V1A01076.
"unifiedDeviceId": "A String", # Output only. Unified device id of the device.
"wifiMacAddresses": [ # WiFi MAC addresses of device.
"A String",
],
}
list(customer=None, filter=None, orderBy=None, pageSize=None, pageToken=None, view=None, x__xgafv=None)
Lists/Searches devices.
Args:
customer: string, Optional. [Resource name](https://cloud.google.com/apis/design/resource_names) of the customer.
filter: string, Optional. Additional restrictions when fetching list of devices. For a list of search fields, refer to [Mobile device search fields](https://developers.google.com/admin-sdk/directory/v1/search-operators). Multiple search fields are separated by the space character.
orderBy: string, Optional. Order specification for devices in the response. Only one of the following field names may be used to specify the order: `create_time`, `last_sync_time`, `model`, `os_version`, `device_type` and `serial_number`. `desc` may be specified optionally to specify results to be sorted in descending order. Default order is ascending.
pageSize: integer, Optional. The maximum number of Devices to return. If unspecified, at most 20 Devices will be returned. The maximum value is 100; values above 100 will be coerced to 100.
pageToken: string, Optional. A page token, received from a previous `ListDevices` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `ListDevices` must match the call that provided the page token.
view: string, Optional. The view to use for the List request.
Allowed values
VIEW_UNSPECIFIED - Default value. The value is unused.
COMPANY_INVENTORY - This view contains all devices imported by the company admin. Each device in the response contains all information specified by the company admin when importing the device (i.e. asset tags).
USER_ASSIGNED_DEVICES - This view contains all devices with at least one user registered on the device. Each device in the response contains all device information, except for asset tags.
x__xgafv: string, V1 error format.
Allowed values
1 - v1 error format
2 - v2 error format
Returns:
An object of the form:
{ # Response message that is returned from the ListDevices method.
"devices": [ # Devices meeting the list restrictions.
{ # A Device within the Cloud Identity Devices API. Represents a Device known to Google Cloud, independent of the device ownership, type, and whether it is assigned or in use by a user.
"androidSpecificAttributes": { # Resource representing the Android specific attributes of a Device. # Output only. Attributes specific to Android devices.
"ctsProfileMatch": True or False, # Whether the device passes Android CTS compliance.
"enabledUnknownSources": True or False, # Whether applications from unknown sources can be installed on device.
"hasPotentiallyHarmfulApps": True or False, # Whether any potentially harmful apps were detected on the device.
"ownerProfileAccount": True or False, # Whether this account is on an owner/primary profile. For phones, only true for owner profiles. Android 4+ devices can have secondary or restricted user profiles.
"ownershipPrivilege": "A String", # Ownership privileges on device.
"supportsWorkProfile": True or False, # Whether device supports Android work profiles. If false, this service will not block access to corp data even if an administrator turns on the "Enforce Work Profile" policy.
"verifiedBoot": True or False, # Whether Android verified boot status is GREEN.
"verifyAppsEnabled": True or False, # Whether Google Play Protect Verify Apps is enabled.
},
"assetTag": "A String", # Asset tag of the device.
"basebandVersion": "A String", # Output only. Baseband version of the device.
"bootloaderVersion": "A String", # Output only. Device bootloader version. Example: 0.6.7.
"brand": "A String", # Output only. Device brand. Example: Samsung.
"buildNumber": "A String", # Output only. Build number of the device.
"clientTypes": [ # List of the clients the device is reporting to.
"A String",
],
"compromisedState": "A String", # Output only. Represents whether the Device is compromised.
"createTime": "A String", # Output only. When the Company-Owned device was imported. This field is empty for BYOD devices.
"deviceId": "A String", # Unique identifier for the device.
"deviceType": "A String", # Output only. Type of device.
"enabledDeveloperOptions": True or False, # Output only. Whether developer options is enabled on device.
"enabledUsbDebugging": True or False, # Output only. Whether USB debugging is enabled on device.
"encryptionState": "A String", # Output only. Device encryption state.
"endpointVerificationSpecificAttributes": { # Resource representing the [Endpoint Verification-specific attributes](https://cloud.google.com/endpoint-verification/docs/device-information) of a device. # Output only. Attributes specific to [Endpoint Verification](https://cloud.google.com/endpoint-verification/docs/overview) devices.
"additionalSignals": { # [Additional signals](https://cloud.google.com/endpoint-verification/docs/device-information) reported by Endpoint Verification. It includes the following attributes: * Non-configurable attributes: hotfixes, av_installed, av_enabled, windows_domain_name, is_os_native_firewall_enabled, and is_secure_boot_enabled. * [Configurable attributes](https://cloud.google.com/endpoint-verification/docs/collect-config-attributes): file, folder, and binary attributes; registry entries; and properties in a plist.
"a_key": "", # Properties of the object.
},
"browserAttributes": [ # Details of browser profiles reported by Endpoint Verification.
{ # Contains information about browser profiles reported by the [Endpoint Verification extension](https://chromewebstore.google.com/detail/endpoint-verification/callobklhcbilhphinckomhgkigmfocg?pli=1).
"chromeBrowserInfo": { # Browser-specific fields reported by the [Endpoint Verification extension](https://chromewebstore.google.com/detail/endpoint-verification/callobklhcbilhphinckomhgkigmfocg?pli=1). # Represents the current state of the [Chrome browser attributes](https://cloud.google.com/access-context-manager/docs/browser-attributes) sent by the [Endpoint Verification extension](https://chromewebstore.google.com/detail/endpoint-verification/callobklhcbilhphinckomhgkigmfocg?pli=1).
"browserManagementState": "A String", # Output only. Browser's management state.
"browserVersion": "A String", # Version of the request initiating browser. E.g. `91.0.4442.4`.
"isBuiltInDnsClientEnabled": True or False, # Current state of [built-in DNS client](https://chromeenterprise.google/policies/#BuiltInDnsClientEnabled).
"isBulkDataEntryAnalysisEnabled": True or False, # Current state of [bulk data analysis](https://chromeenterprise.google/policies/#OnBulkDataEntryEnterpriseConnector). Set to true if provider list from Chrome is non-empty.
"isChromeCleanupEnabled": True or False, # Current state of [Chrome Cleanup](https://chromeenterprise.google/policies/#ChromeCleanupEnabled).
"isChromeRemoteDesktopAppBlocked": True or False, # Current state of [Chrome Remote Desktop app](https://chromeenterprise.google/policies/#URLBlocklist).
"isFileDownloadAnalysisEnabled": True or False, # Current state of [file download analysis](https://chromeenterprise.google/policies/#OnFileDownloadedEnterpriseConnector). Set to true if provider list from Chrome is non-empty.
"isFileUploadAnalysisEnabled": True or False, # Current state of [file upload analysis](https://chromeenterprise.google/policies/#OnFileAttachedEnterpriseConnector). Set to true if provider list from Chrome is non-empty.
"isRealtimeUrlCheckEnabled": True or False, # Current state of [real-time URL check](https://chromeenterprise.google/policies/#EnterpriseRealTimeUrlCheckMode). Set to true if provider list from Chrome is non-empty.
"isSecurityEventAnalysisEnabled": True or False, # Current state of [security event analysis](https://chromeenterprise.google/policies/#OnSecurityEventEnterpriseConnector). Set to true if provider list from Chrome is non-empty.
"isSiteIsolationEnabled": True or False, # Current state of [site isolation](https://chromeenterprise.google/policies/?policy=IsolateOrigins).
"isThirdPartyBlockingEnabled": True or False, # Current state of [third-party blocking](https://chromeenterprise.google/policies/#ThirdPartyBlockingEnabled).
"passwordProtectionWarningTrigger": "A String", # Current state of [password protection trigger](https://chromeenterprise.google/policies/#PasswordProtectionWarningTrigger).
"safeBrowsingProtectionLevel": "A String", # Current state of [Safe Browsing protection level](https://chromeenterprise.google/policies/#SafeBrowsingProtectionLevel).
},
"chromeProfileId": "A String", # Chrome profile ID that is exposed by the Chrome API. It is unique for each device.
"lastProfileSyncTime": "A String", # Timestamp in milliseconds since the Unix epoch when the profile/gcm id was last synced.
},
],
"certificateAttributes": [ # Details of certificates.
{ # Stores information about a certificate.
"certificateTemplate": { # CertificateTemplate (v3 Extension in X.509). # The X.509 extension for CertificateTemplate.
"id": "A String", # The template id of the template. Example: "1.3.6.1.4.1.311.21.8.15608621.11768144.5720724.16068415.6889630.81.2472537.7784047".
"majorVersion": 42, # The Major version of the template. Example: 100.
"minorVersion": 42, # The minor version of the template. Example: 12.
},
"fingerprint": "A String", # The encoded certificate fingerprint.
"issuer": "A String", # The name of the issuer of this certificate.
"serialNumber": "A String", # Serial number of the certificate, Example: "123456789".
"subject": "A String", # The subject name of this certificate.
"thumbprint": "A String", # The certificate thumbprint.
"validationState": "A String", # Validation state of this certificate.
"validityExpirationTime": "A String", # Certificate not valid at or after this timestamp.
"validityStartTime": "A String", # Certificate not valid before this timestamp.
},
],
},
"hostname": "A String", # Host name of the device.
"imei": "A String", # Output only. IMEI number of device if GSM device; empty otherwise.
"kernelVersion": "A String", # Output only. Kernel version of the device.
"lastSyncTime": "A String", # Most recent time when device synced with this service.
"managementState": "A String", # Output only. Management state of the device
"manufacturer": "A String", # Output only. Device manufacturer. Example: Motorola.
"meid": "A String", # Output only. MEID number of device if CDMA device; empty otherwise.
"model": "A String", # Output only. Model name of device. Example: Pixel 3.
"name": "A String", # Output only. [Resource name](https://cloud.google.com/apis/design/resource_names) of the Device in format: `devices/{device_id}`, where device_id is the unique id assigned to the Device.
"networkOperator": "A String", # Output only. Mobile or network operator of device, if available.
"osVersion": "A String", # Output only. OS version of the device. Example: Android 8.1.0.
"otherAccounts": [ # Output only. Domain name for Google accounts on device. Type for other accounts on device. On Android, will only be populated if |ownership_privilege| is |PROFILE_OWNER| or |DEVICE_OWNER|. Does not include the account signed in to the device policy app if that account's domain has only one account. Examples: "com.example", "xyz.com".
"A String",
],
"ownerType": "A String", # Output only. Whether the device is owned by the company or an individual
"releaseVersion": "A String", # Output only. OS release version. Example: 6.0.
"securityPatchTime": "A String", # Output only. OS security patch update time on device.
"serialNumber": "A String", # Serial Number of device. Example: HT82V1A01076.
"unifiedDeviceId": "A String", # Output only. Unified device id of the device.
"wifiMacAddresses": [ # WiFi MAC addresses of device.
"A String",
],
},
],
"nextPageToken": "A String", # Token to retrieve the next page of results. Empty if there are no more results.
}
list_next()
Retrieves the next page of results.
Args:
previous_request: The request for the previous page. (required)
previous_response: The response from the request for the previous page. (required)
Returns:
A request object that you can call 'execute()' on to request the next
page. Returns None if there are no more items in the collection.
wipe(name, body=None, x__xgafv=None)
Wipes all data on the specified device.
Args:
name: string, Required. [Resource name](https://cloud.google.com/apis/design/resource_names) of the Device in format: `devices/{device_id}/deviceUsers/{device_user_id}`, where device_id is the unique ID assigned to the Device, and device_user_id is the unique ID assigned to the User. (required)
body: object, The request body.
The object takes the form of:
{ # Request message for wiping all data on the device.
"customer": "A String", # Optional. [Resource name](https://cloud.google.com/apis/design/resource_names) of the customer. If you're using this API for your own organization, use `customers/my_customer` If you're using this API to manage another organization, use `customers/{customer_id}`, where customer_id is the customer to whom the device belongs.
"removeResetLock": True or False, # Optional. Specifies if a user is able to factory reset a device after a Device Wipe. On iOS, this is called "Activation Lock", while on Android, this is known as "Factory Reset Protection". If true, this protection will be removed from the device, so that a user can successfully factory reset. If false, the setting is untouched on the device.
}
x__xgafv: string, V1 error format.
Allowed values
1 - v1 error format
2 - v2 error format
Returns:
An object of the form:
{ # This resource represents a long-running operation that is the result of a network API call.
"done": True or False, # If the value is `false`, it means the operation is still in progress. If `true`, the operation is completed, and either `error` or `response` is available.
"error": { # The `Status` type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by [gRPC](https://github.com/grpc). Each `Status` message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the [API Design Guide](https://cloud.google.com/apis/design/errors). # The error result of the operation in case of failure or cancellation.
"code": 42, # The status code, which should be an enum value of google.rpc.Code.
"details": [ # A list of messages that carry the error details. There is a common set of message types for APIs to use.
{
"a_key": "", # Properties of the object. Contains field @type with type URL.
},
],
"message": "A String", # A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client.
},
"metadata": { # Service-specific metadata associated with the operation. It typically contains progress information and common metadata such as create time. Some services might not provide such metadata. Any method that returns a long-running operation should document the metadata type, if any.
"a_key": "", # Properties of the object. Contains field @type with type URL.
},
"name": "A String", # The server-assigned name, which is only unique within the same service that originally returns it. If you use the default HTTP mapping, the `name` should be a resource name ending with `operations/{unique_id}`.
"response": { # The normal, successful response of the operation. If the original method returns no data on success, such as `Delete`, the response is `google.protobuf.Empty`. If the original method is standard `Get`/`Create`/`Update`, the response should be the resource. For other methods, the response should have the type `XxxResponse`, where `Xxx` is the original method name. For example, if the original method name is `TakeSnapshot()`, the inferred response type is `TakeSnapshotResponse`.
"a_key": "", # Properties of the object. Contains field @type with type URL.
},
}