Google Drive API . permissions

close()

Close httplib2 connections.

create(fileId, body=None, emailMessage=None, enforceExpansiveAccess=None, enforceSingleParent=None, moveToNewOwnersRoot=None, sendNotificationEmail=None, supportsAllDrives=None, supportsTeamDrives=None, transferOwnership=None, useDomainAdminAccess=None, x__xgafv=None)

Creates a permission for a file or shared drive. For more information, see [Share files, folders, and drives](https://developers.google.com/workspace/drive/api/guides/manage-sharing). **Warning:** Concurrent permissions operations on the same file aren't supported; only the last update is applied.

Args:
  fileId: string, The ID of the file or shared drive. (required)
  body: object, The request body.
    The object takes the form of:

{ # A permission for a file. A permission grants a user, group, domain, or the world access to a file or a folder hierarchy. For more information, see [Share files, folders, and drives](https://developers.google.com/workspace/drive/api/guides/manage-sharing). By default, permission requests only return a subset of fields. Permission `kind`, `ID`, `type`, and `role` are always returned. To retrieve specific fields, see [Return specific fields](https://developers.google.com/workspace/drive/api/guides/fields-parameter). Some resource methods (such as `permissions.update`) require a `permissionId`. Use the `permissions.list` method to retrieve the ID for a file, folder, or shared drive.
  "allowFileDiscovery": True or False, # Whether the permission allows the file to be discovered through search. This is only applicable for permissions of type `domain` or `anyone`.
  "deleted": True or False, # Output only. Whether the account associated with this permission has been deleted. This field only pertains to permissions of type `user` or `group`.
  "displayName": "A String", # Output only. The "pretty" name of the value of the permission. The following is a list of examples for each type of permission: * `user` - User's full name, as defined for their Google Account, such as "Dana A." * `group` - Name of the Google Group, such as "The Company Administrators." * `domain` - String domain name, such as "cymbalgroup.com." * `anyone` - No `displayName` is present.
  "domain": "A String", # The domain to which this permission refers.
  "emailAddress": "A String", # The email address of the user or group to which this permission refers.
  "expirationTime": "A String", # The time at which this permission will expire (RFC 3339 date-time). Expiration times have the following restrictions: - They can only be set on user and group permissions - The time must be in the future - The time cannot be more than a year in the future
  "id": "A String", # Output only. The ID of this permission. This is a unique identifier for the grantee, and is published in the [User resource](https://developers.google.com/workspace/drive/api/reference/rest/v3/User) as `permissionId`. IDs should be treated as opaque values.
  "inheritedPermissionsDisabled": True or False, # When `true`, only organizers, owners, and users with permissions added directly on the item can access it.
  "kind": "drive#permission", # Output only. Identifies what kind of resource this is. Value: the fixed string `"drive#permission"`.
  "pendingOwner": True or False, # Whether the account associated with this permission is a pending owner. Only populated for permissions of type `user` for files that aren't in a shared drive.
  "permissionDetails": [ # Output only. Details of whether the permissions on this item are inherited or are directly on this item.
    {
      "inherited": True or False, # Output only. Whether this permission is inherited. This field is always populated. This is an output-only field.
      "inheritedFrom": "A String", # Output only. The ID of the item from which this permission is inherited. This is only populated for items in shared drives.
      "permissionType": "A String", # Output only. The permission type for this user. Supported values include: * `file` * `member`
      "role": "A String", # Output only. The primary role for this user. Supported values include: * `owner` * `organizer` * `fileOrganizer` * `writer` * `commenter` * `reader` For more information, see [Roles and permissions](https://developers.google.com/workspace/drive/api/guides/ref-roles).
    },
  ],
  "photoLink": "A String", # Output only. A link to the user's profile photo, if available.
  "role": "A String", # The role granted by this permission. Supported values include: * `owner` * `organizer` * `fileOrganizer` * `writer` * `commenter` * `reader` For more information, see [Roles and permissions](https://developers.google.com/workspace/drive/api/guides/ref-roles).
  "teamDrivePermissionDetails": [ # Output only. Deprecated: Output only. Use `permissionDetails` instead.
    {
      "inherited": True or False, # Deprecated: Output only. Use `permissionDetails/inherited` instead.
      "inheritedFrom": "A String", # Deprecated: Output only. Use `permissionDetails/inheritedFrom` instead.
      "role": "A String", # Deprecated: Output only. Use `permissionDetails/role` instead.
      "teamDrivePermissionType": "A String", # Deprecated: Output only. Use `permissionDetails/permissionType` instead.
    },
  ],
  "type": "A String", # The type of the grantee. Supported values include: * `user` * `group` * `domain` * `anyone` When creating a permission, if `type` is `user` or `group`, you must provide an `emailAddress` for the user or group. If `type` is `domain`, you must provide a `domain`. If `type` is `anyone`, no extra information is required.
  "view": "A String", # Indicates the view for this permission. Only populated for permissions that belong to a view. The only supported values are `published` and `metadata`: * `published`: The permission's role is `publishedReader`. * `metadata`: The item is only visible to the `metadata` view because the item has limited access and the scope has at least read access to the parent. The `metadata` view is only supported on folders. For more information, see [Views](https://developers.google.com/workspace/drive/api/guides/ref-roles#views).
}

  emailMessage: string, A plain text custom message to include in the notification email.
  enforceExpansiveAccess: boolean, Whether the request should enforce expansive access rules.
  enforceSingleParent: boolean, Deprecated: See `moveToNewOwnersRoot` for details.
  moveToNewOwnersRoot: boolean, This parameter only takes effect if the item isn't in a shared drive and the request is attempting to transfer the ownership of the item. If set to `true`, the item is moved to the new owner's My Drive root folder and all prior parents removed. If set to `false`, parents aren't changed.
  sendNotificationEmail: boolean, Whether to send a notification email when sharing to users or groups. This defaults to `true` for users and groups, and is not allowed for other requests. It must not be disabled for ownership transfers.
  supportsAllDrives: boolean, Whether the requesting application supports both My Drives and shared drives.
  supportsTeamDrives: boolean, Deprecated: Use `supportsAllDrives` instead.
  transferOwnership: boolean, Whether to transfer ownership to the specified user and downgrade the current owner to a writer. This parameter is required as an acknowledgement of the side effect. For more information, see [Transfer file ownership](https://developers.google.com/workspace/drive/api/guides/transfer-file).
  useDomainAdminAccess: boolean, Issue the request as a domain administrator. If set to `true`, and if the following additional conditions are met, the requester is granted access: 1. The file ID parameter refers to a shared drive. 2. The requester is an administrator of the domain to which the shared drive belongs. For more information, see [Manage shared drives as domain administrators](https://developers.google.com/workspace/drive/api/guides/manage-shareddrives#manage-administrators).
  x__xgafv: string, V1 error format.
    Allowed values
      1 - v1 error format
      2 - v2 error format

Returns:
  An object of the form:

    { # A permission for a file. A permission grants a user, group, domain, or the world access to a file or a folder hierarchy. For more information, see [Share files, folders, and drives](https://developers.google.com/workspace/drive/api/guides/manage-sharing). By default, permission requests only return a subset of fields. Permission `kind`, `ID`, `type`, and `role` are always returned. To retrieve specific fields, see [Return specific fields](https://developers.google.com/workspace/drive/api/guides/fields-parameter). Some resource methods (such as `permissions.update`) require a `permissionId`. Use the `permissions.list` method to retrieve the ID for a file, folder, or shared drive.
  "allowFileDiscovery": True or False, # Whether the permission allows the file to be discovered through search. This is only applicable for permissions of type `domain` or `anyone`.
  "deleted": True or False, # Output only. Whether the account associated with this permission has been deleted. This field only pertains to permissions of type `user` or `group`.
  "displayName": "A String", # Output only. The "pretty" name of the value of the permission. The following is a list of examples for each type of permission: * `user` - User's full name, as defined for their Google Account, such as "Dana A." * `group` - Name of the Google Group, such as "The Company Administrators." * `domain` - String domain name, such as "cymbalgroup.com." * `anyone` - No `displayName` is present.
  "domain": "A String", # The domain to which this permission refers.
  "emailAddress": "A String", # The email address of the user or group to which this permission refers.
  "expirationTime": "A String", # The time at which this permission will expire (RFC 3339 date-time). Expiration times have the following restrictions: - They can only be set on user and group permissions - The time must be in the future - The time cannot be more than a year in the future
  "id": "A String", # Output only. The ID of this permission. This is a unique identifier for the grantee, and is published in the [User resource](https://developers.google.com/workspace/drive/api/reference/rest/v3/User) as `permissionId`. IDs should be treated as opaque values.
  "inheritedPermissionsDisabled": True or False, # When `true`, only organizers, owners, and users with permissions added directly on the item can access it.
  "kind": "drive#permission", # Output only. Identifies what kind of resource this is. Value: the fixed string `"drive#permission"`.
  "pendingOwner": True or False, # Whether the account associated with this permission is a pending owner. Only populated for permissions of type `user` for files that aren't in a shared drive.
  "permissionDetails": [ # Output only. Details of whether the permissions on this item are inherited or are directly on this item.
    {
      "inherited": True or False, # Output only. Whether this permission is inherited. This field is always populated. This is an output-only field.
      "inheritedFrom": "A String", # Output only. The ID of the item from which this permission is inherited. This is only populated for items in shared drives.
      "permissionType": "A String", # Output only. The permission type for this user. Supported values include: * `file` * `member`
      "role": "A String", # Output only. The primary role for this user. Supported values include: * `owner` * `organizer` * `fileOrganizer` * `writer` * `commenter` * `reader` For more information, see [Roles and permissions](https://developers.google.com/workspace/drive/api/guides/ref-roles).
    },
  ],
  "photoLink": "A String", # Output only. A link to the user's profile photo, if available.
  "role": "A String", # The role granted by this permission. Supported values include: * `owner` * `organizer` * `fileOrganizer` * `writer` * `commenter` * `reader` For more information, see [Roles and permissions](https://developers.google.com/workspace/drive/api/guides/ref-roles).
  "teamDrivePermissionDetails": [ # Output only. Deprecated: Output only. Use `permissionDetails` instead.
    {
      "inherited": True or False, # Deprecated: Output only. Use `permissionDetails/inherited` instead.
      "inheritedFrom": "A String", # Deprecated: Output only. Use `permissionDetails/inheritedFrom` instead.
      "role": "A String", # Deprecated: Output only. Use `permissionDetails/role` instead.
      "teamDrivePermissionType": "A String", # Deprecated: Output only. Use `permissionDetails/permissionType` instead.
    },
  ],
  "type": "A String", # The type of the grantee. Supported values include: * `user` * `group` * `domain` * `anyone` When creating a permission, if `type` is `user` or `group`, you must provide an `emailAddress` for the user or group. If `type` is `domain`, you must provide a `domain`. If `type` is `anyone`, no extra information is required.
  "view": "A String", # Indicates the view for this permission. Only populated for permissions that belong to a view. The only supported values are `published` and `metadata`: * `published`: The permission's role is `publishedReader`. * `metadata`: The item is only visible to the `metadata` view because the item has limited access and the scope has at least read access to the parent. The `metadata` view is only supported on folders. For more information, see [Views](https://developers.google.com/workspace/drive/api/guides/ref-roles#views).
}

delete(fileId, permissionId, enforceExpansiveAccess=None, supportsAllDrives=None, supportsTeamDrives=None, useDomainAdminAccess=None, x__xgafv=None)

Deletes a permission. For more information, see [Share files, folders, and drives](https://developers.google.com/workspace/drive/api/guides/manage-sharing). **Warning:** Concurrent permissions operations on the same file aren't supported; only the last update is applied.

Args:
  fileId: string, The ID of the file or shared drive. (required)
  permissionId: string, The ID of the permission. (required)
  enforceExpansiveAccess: boolean, Whether the request should enforce expansive access rules.
  supportsAllDrives: boolean, Whether the requesting application supports both My Drives and shared drives.
  supportsTeamDrives: boolean, Deprecated: Use `supportsAllDrives` instead.
  useDomainAdminAccess: boolean, Issue the request as a domain administrator. If set to `true`, and if the following additional conditions are met, the requester is granted access: 1. The file ID parameter refers to a shared drive. 2. The requester is an administrator of the domain to which the shared drive belongs. For more information, see [Manage shared drives as domain administrators](https://developers.google.com/workspace/drive/api/guides/manage-shareddrives#manage-administrators).
  x__xgafv: string, V1 error format.
    Allowed values
      1 - v1 error format
      2 - v2 error format

get(fileId, permissionId, supportsAllDrives=None, supportsTeamDrives=None, useDomainAdminAccess=None, x__xgafv=None)

Gets a permission by ID. For more information, see [Share files, folders, and drives](https://developers.google.com/workspace/drive/api/guides/manage-sharing).

Args:
  fileId: string, The ID of the file. (required)
  permissionId: string, The ID of the permission. (required)
  supportsAllDrives: boolean, Whether the requesting application supports both My Drives and shared drives.
  supportsTeamDrives: boolean, Deprecated: Use `supportsAllDrives` instead.
  useDomainAdminAccess: boolean, Issue the request as a domain administrator. If set to `true`, and if the following additional conditions are met, the requester is granted access: 1. The file ID parameter refers to a shared drive. 2. The requester is an administrator of the domain to which the shared drive belongs. For more information, see [Manage shared drives as domain administrators](https://developers.google.com/workspace/drive/api/guides/manage-shareddrives#manage-administrators).
  x__xgafv: string, V1 error format.
    Allowed values
      1 - v1 error format
      2 - v2 error format

Returns:
  An object of the form:

    { # A permission for a file. A permission grants a user, group, domain, or the world access to a file or a folder hierarchy. For more information, see [Share files, folders, and drives](https://developers.google.com/workspace/drive/api/guides/manage-sharing). By default, permission requests only return a subset of fields. Permission `kind`, `ID`, `type`, and `role` are always returned. To retrieve specific fields, see [Return specific fields](https://developers.google.com/workspace/drive/api/guides/fields-parameter). Some resource methods (such as `permissions.update`) require a `permissionId`. Use the `permissions.list` method to retrieve the ID for a file, folder, or shared drive.
  "allowFileDiscovery": True or False, # Whether the permission allows the file to be discovered through search. This is only applicable for permissions of type `domain` or `anyone`.
  "deleted": True or False, # Output only. Whether the account associated with this permission has been deleted. This field only pertains to permissions of type `user` or `group`.
  "displayName": "A String", # Output only. The "pretty" name of the value of the permission. The following is a list of examples for each type of permission: * `user` - User's full name, as defined for their Google Account, such as "Dana A." * `group` - Name of the Google Group, such as "The Company Administrators." * `domain` - String domain name, such as "cymbalgroup.com." * `anyone` - No `displayName` is present.
  "domain": "A String", # The domain to which this permission refers.
  "emailAddress": "A String", # The email address of the user or group to which this permission refers.
  "expirationTime": "A String", # The time at which this permission will expire (RFC 3339 date-time). Expiration times have the following restrictions: - They can only be set on user and group permissions - The time must be in the future - The time cannot be more than a year in the future
  "id": "A String", # Output only. The ID of this permission. This is a unique identifier for the grantee, and is published in the [User resource](https://developers.google.com/workspace/drive/api/reference/rest/v3/User) as `permissionId`. IDs should be treated as opaque values.
  "inheritedPermissionsDisabled": True or False, # When `true`, only organizers, owners, and users with permissions added directly on the item can access it.
  "kind": "drive#permission", # Output only. Identifies what kind of resource this is. Value: the fixed string `"drive#permission"`.
  "pendingOwner": True or False, # Whether the account associated with this permission is a pending owner. Only populated for permissions of type `user` for files that aren't in a shared drive.
  "permissionDetails": [ # Output only. Details of whether the permissions on this item are inherited or are directly on this item.
    {
      "inherited": True or False, # Output only. Whether this permission is inherited. This field is always populated. This is an output-only field.
      "inheritedFrom": "A String", # Output only. The ID of the item from which this permission is inherited. This is only populated for items in shared drives.
      "permissionType": "A String", # Output only. The permission type for this user. Supported values include: * `file` * `member`
      "role": "A String", # Output only. The primary role for this user. Supported values include: * `owner` * `organizer` * `fileOrganizer` * `writer` * `commenter` * `reader` For more information, see [Roles and permissions](https://developers.google.com/workspace/drive/api/guides/ref-roles).
    },
  ],
  "photoLink": "A String", # Output only. A link to the user's profile photo, if available.
  "role": "A String", # The role granted by this permission. Supported values include: * `owner` * `organizer` * `fileOrganizer` * `writer` * `commenter` * `reader` For more information, see [Roles and permissions](https://developers.google.com/workspace/drive/api/guides/ref-roles).
  "teamDrivePermissionDetails": [ # Output only. Deprecated: Output only. Use `permissionDetails` instead.
    {
      "inherited": True or False, # Deprecated: Output only. Use `permissionDetails/inherited` instead.
      "inheritedFrom": "A String", # Deprecated: Output only. Use `permissionDetails/inheritedFrom` instead.
      "role": "A String", # Deprecated: Output only. Use `permissionDetails/role` instead.
      "teamDrivePermissionType": "A String", # Deprecated: Output only. Use `permissionDetails/permissionType` instead.
    },
  ],
  "type": "A String", # The type of the grantee. Supported values include: * `user` * `group` * `domain` * `anyone` When creating a permission, if `type` is `user` or `group`, you must provide an `emailAddress` for the user or group. If `type` is `domain`, you must provide a `domain`. If `type` is `anyone`, no extra information is required.
  "view": "A String", # Indicates the view for this permission. Only populated for permissions that belong to a view. The only supported values are `published` and `metadata`: * `published`: The permission's role is `publishedReader`. * `metadata`: The item is only visible to the `metadata` view because the item has limited access and the scope has at least read access to the parent. The `metadata` view is only supported on folders. For more information, see [Views](https://developers.google.com/workspace/drive/api/guides/ref-roles#views).
}

list(fileId, includePermissionsForView=None, pageSize=None, pageToken=None, supportsAllDrives=None, supportsTeamDrives=None, useDomainAdminAccess=None, x__xgafv=None)

Lists a file's or shared drive's permissions. For more information, see [Share files, folders, and drives](https://developers.google.com/workspace/drive/api/guides/manage-sharing).

Args:
  fileId: string, The ID of the file or shared drive. (required)
  includePermissionsForView: string, Specifies which additional view's permissions to include in the response. Only `published` is supported.
  pageSize: integer, The maximum number of permissions to return per page. When not set for files in a shared drive, at most 100 results will be returned. When not set for files that are not in a shared drive, the entire list will be returned.
  pageToken: string, The token for continuing a previous list request on the next page. This should be set to the value of `nextPageToken` from the previous response.
  supportsAllDrives: boolean, Whether the requesting application supports both My Drives and shared drives.
  supportsTeamDrives: boolean, Deprecated: Use `supportsAllDrives` instead.
  useDomainAdminAccess: boolean, Issue the request as a domain administrator. If set to `true`, and if the following additional conditions are met, the requester is granted access: 1. The file ID parameter refers to a shared drive. 2. The requester is an administrator of the domain to which the shared drive belongs. For more information, see [Manage shared drives as domain administrators](https://developers.google.com/workspace/drive/api/guides/manage-shareddrives#manage-administrators).
  x__xgafv: string, V1 error format.
    Allowed values
      1 - v1 error format
      2 - v2 error format

Returns:
  An object of the form:

    { # A list of permissions for a file.
  "kind": "drive#permissionList", # Identifies what kind of resource this is. Value: the fixed string `"drive#permissionList"`.
  "nextPageToken": "A String", # The page token for the next page of permissions. This field will be absent if the end of the permissions list has been reached. If the token is rejected for any reason, it should be discarded, and pagination should be restarted from the first page of results. The page token is typically valid for several hours. However, if new items are added or removed, your expected results might differ.
  "permissions": [ # The list of permissions. If `nextPageToken` is populated, then this list may be incomplete and an additional page of results should be fetched.
    { # A permission for a file. A permission grants a user, group, domain, or the world access to a file or a folder hierarchy. For more information, see [Share files, folders, and drives](https://developers.google.com/workspace/drive/api/guides/manage-sharing). By default, permission requests only return a subset of fields. Permission `kind`, `ID`, `type`, and `role` are always returned. To retrieve specific fields, see [Return specific fields](https://developers.google.com/workspace/drive/api/guides/fields-parameter). Some resource methods (such as `permissions.update`) require a `permissionId`. Use the `permissions.list` method to retrieve the ID for a file, folder, or shared drive.
      "allowFileDiscovery": True or False, # Whether the permission allows the file to be discovered through search. This is only applicable for permissions of type `domain` or `anyone`.
      "deleted": True or False, # Output only. Whether the account associated with this permission has been deleted. This field only pertains to permissions of type `user` or `group`.
      "displayName": "A String", # Output only. The "pretty" name of the value of the permission. The following is a list of examples for each type of permission: * `user` - User's full name, as defined for their Google Account, such as "Dana A." * `group` - Name of the Google Group, such as "The Company Administrators." * `domain` - String domain name, such as "cymbalgroup.com." * `anyone` - No `displayName` is present.
      "domain": "A String", # The domain to which this permission refers.
      "emailAddress": "A String", # The email address of the user or group to which this permission refers.
      "expirationTime": "A String", # The time at which this permission will expire (RFC 3339 date-time). Expiration times have the following restrictions: - They can only be set on user and group permissions - The time must be in the future - The time cannot be more than a year in the future
      "id": "A String", # Output only. The ID of this permission. This is a unique identifier for the grantee, and is published in the [User resource](https://developers.google.com/workspace/drive/api/reference/rest/v3/User) as `permissionId`. IDs should be treated as opaque values.
      "inheritedPermissionsDisabled": True or False, # When `true`, only organizers, owners, and users with permissions added directly on the item can access it.
      "kind": "drive#permission", # Output only. Identifies what kind of resource this is. Value: the fixed string `"drive#permission"`.
      "pendingOwner": True or False, # Whether the account associated with this permission is a pending owner. Only populated for permissions of type `user` for files that aren't in a shared drive.
      "permissionDetails": [ # Output only. Details of whether the permissions on this item are inherited or are directly on this item.
        {
          "inherited": True or False, # Output only. Whether this permission is inherited. This field is always populated. This is an output-only field.
          "inheritedFrom": "A String", # Output only. The ID of the item from which this permission is inherited. This is only populated for items in shared drives.
          "permissionType": "A String", # Output only. The permission type for this user. Supported values include: * `file` * `member`
          "role": "A String", # Output only. The primary role for this user. Supported values include: * `owner` * `organizer` * `fileOrganizer` * `writer` * `commenter` * `reader` For more information, see [Roles and permissions](https://developers.google.com/workspace/drive/api/guides/ref-roles).
        },
      ],
      "photoLink": "A String", # Output only. A link to the user's profile photo, if available.
      "role": "A String", # The role granted by this permission. Supported values include: * `owner` * `organizer` * `fileOrganizer` * `writer` * `commenter` * `reader` For more information, see [Roles and permissions](https://developers.google.com/workspace/drive/api/guides/ref-roles).
      "teamDrivePermissionDetails": [ # Output only. Deprecated: Output only. Use `permissionDetails` instead.
        {
          "inherited": True or False, # Deprecated: Output only. Use `permissionDetails/inherited` instead.
          "inheritedFrom": "A String", # Deprecated: Output only. Use `permissionDetails/inheritedFrom` instead.
          "role": "A String", # Deprecated: Output only. Use `permissionDetails/role` instead.
          "teamDrivePermissionType": "A String", # Deprecated: Output only. Use `permissionDetails/permissionType` instead.
        },
      ],
      "type": "A String", # The type of the grantee. Supported values include: * `user` * `group` * `domain` * `anyone` When creating a permission, if `type` is `user` or `group`, you must provide an `emailAddress` for the user or group. If `type` is `domain`, you must provide a `domain`. If `type` is `anyone`, no extra information is required.
      "view": "A String", # Indicates the view for this permission. Only populated for permissions that belong to a view. The only supported values are `published` and `metadata`: * `published`: The permission's role is `publishedReader`. * `metadata`: The item is only visible to the `metadata` view because the item has limited access and the scope has at least read access to the parent. The `metadata` view is only supported on folders. For more information, see [Views](https://developers.google.com/workspace/drive/api/guides/ref-roles#views).
    },
  ],
}

list_next()

Retrieves the next page of results.

        Args:
          previous_request: The request for the previous page. (required)
          previous_response: The response from the request for the previous page. (required)

        Returns:
          A request object that you can call 'execute()' on to request the next
          page. Returns None if there are no more items in the collection.
        

update(fileId, permissionId, body=None, enforceExpansiveAccess=None, removeExpiration=None, supportsAllDrives=None, supportsTeamDrives=None, transferOwnership=None, useDomainAdminAccess=None, x__xgafv=None)

Updates a permission with patch semantics. For more information, see [Share files, folders, and drives](https://developers.google.com/workspace/drive/api/guides/manage-sharing). **Warning:** Concurrent permissions operations on the same file aren't supported; only the last update is applied.

Args:
  fileId: string, The ID of the file or shared drive. (required)
  permissionId: string, The ID of the permission. (required)
  body: object, The request body.
    The object takes the form of:

{ # A permission for a file. A permission grants a user, group, domain, or the world access to a file or a folder hierarchy. For more information, see [Share files, folders, and drives](https://developers.google.com/workspace/drive/api/guides/manage-sharing). By default, permission requests only return a subset of fields. Permission `kind`, `ID`, `type`, and `role` are always returned. To retrieve specific fields, see [Return specific fields](https://developers.google.com/workspace/drive/api/guides/fields-parameter). Some resource methods (such as `permissions.update`) require a `permissionId`. Use the `permissions.list` method to retrieve the ID for a file, folder, or shared drive.
  "allowFileDiscovery": True or False, # Whether the permission allows the file to be discovered through search. This is only applicable for permissions of type `domain` or `anyone`.
  "deleted": True or False, # Output only. Whether the account associated with this permission has been deleted. This field only pertains to permissions of type `user` or `group`.
  "displayName": "A String", # Output only. The "pretty" name of the value of the permission. The following is a list of examples for each type of permission: * `user` - User's full name, as defined for their Google Account, such as "Dana A." * `group` - Name of the Google Group, such as "The Company Administrators." * `domain` - String domain name, such as "cymbalgroup.com." * `anyone` - No `displayName` is present.
  "domain": "A String", # The domain to which this permission refers.
  "emailAddress": "A String", # The email address of the user or group to which this permission refers.
  "expirationTime": "A String", # The time at which this permission will expire (RFC 3339 date-time). Expiration times have the following restrictions: - They can only be set on user and group permissions - The time must be in the future - The time cannot be more than a year in the future
  "id": "A String", # Output only. The ID of this permission. This is a unique identifier for the grantee, and is published in the [User resource](https://developers.google.com/workspace/drive/api/reference/rest/v3/User) as `permissionId`. IDs should be treated as opaque values.
  "inheritedPermissionsDisabled": True or False, # When `true`, only organizers, owners, and users with permissions added directly on the item can access it.
  "kind": "drive#permission", # Output only. Identifies what kind of resource this is. Value: the fixed string `"drive#permission"`.
  "pendingOwner": True or False, # Whether the account associated with this permission is a pending owner. Only populated for permissions of type `user` for files that aren't in a shared drive.
  "permissionDetails": [ # Output only. Details of whether the permissions on this item are inherited or are directly on this item.
    {
      "inherited": True or False, # Output only. Whether this permission is inherited. This field is always populated. This is an output-only field.
      "inheritedFrom": "A String", # Output only. The ID of the item from which this permission is inherited. This is only populated for items in shared drives.
      "permissionType": "A String", # Output only. The permission type for this user. Supported values include: * `file` * `member`
      "role": "A String", # Output only. The primary role for this user. Supported values include: * `owner` * `organizer` * `fileOrganizer` * `writer` * `commenter` * `reader` For more information, see [Roles and permissions](https://developers.google.com/workspace/drive/api/guides/ref-roles).
    },
  ],
  "photoLink": "A String", # Output only. A link to the user's profile photo, if available.
  "role": "A String", # The role granted by this permission. Supported values include: * `owner` * `organizer` * `fileOrganizer` * `writer` * `commenter` * `reader` For more information, see [Roles and permissions](https://developers.google.com/workspace/drive/api/guides/ref-roles).
  "teamDrivePermissionDetails": [ # Output only. Deprecated: Output only. Use `permissionDetails` instead.
    {
      "inherited": True or False, # Deprecated: Output only. Use `permissionDetails/inherited` instead.
      "inheritedFrom": "A String", # Deprecated: Output only. Use `permissionDetails/inheritedFrom` instead.
      "role": "A String", # Deprecated: Output only. Use `permissionDetails/role` instead.
      "teamDrivePermissionType": "A String", # Deprecated: Output only. Use `permissionDetails/permissionType` instead.
    },
  ],
  "type": "A String", # The type of the grantee. Supported values include: * `user` * `group` * `domain` * `anyone` When creating a permission, if `type` is `user` or `group`, you must provide an `emailAddress` for the user or group. If `type` is `domain`, you must provide a `domain`. If `type` is `anyone`, no extra information is required.
  "view": "A String", # Indicates the view for this permission. Only populated for permissions that belong to a view. The only supported values are `published` and `metadata`: * `published`: The permission's role is `publishedReader`. * `metadata`: The item is only visible to the `metadata` view because the item has limited access and the scope has at least read access to the parent. The `metadata` view is only supported on folders. For more information, see [Views](https://developers.google.com/workspace/drive/api/guides/ref-roles#views).
}

  enforceExpansiveAccess: boolean, Whether the request should enforce expansive access rules.
  removeExpiration: boolean, Whether to remove the expiration date.
  supportsAllDrives: boolean, Whether the requesting application supports both My Drives and shared drives.
  supportsTeamDrives: boolean, Deprecated: Use `supportsAllDrives` instead.
  transferOwnership: boolean, Whether to transfer ownership to the specified user and downgrade the current owner to a writer. This parameter is required as an acknowledgement of the side effect. For more information, see [Transfer file ownership](https://developers.google.com//workspace/drive/api/guides/transfer-file).
  useDomainAdminAccess: boolean, Issue the request as a domain administrator. If set to `true`, and if the following additional conditions are met, the requester is granted access: 1. The file ID parameter refers to a shared drive. 2. The requester is an administrator of the domain to which the shared drive belongs. For more information, see [Manage shared drives as domain administrators](https://developers.google.com/workspace/drive/api/guides/manage-shareddrives#manage-administrators).
  x__xgafv: string, V1 error format.
    Allowed values
      1 - v1 error format
      2 - v2 error format

Returns:
  An object of the form:

    { # A permission for a file. A permission grants a user, group, domain, or the world access to a file or a folder hierarchy. For more information, see [Share files, folders, and drives](https://developers.google.com/workspace/drive/api/guides/manage-sharing). By default, permission requests only return a subset of fields. Permission `kind`, `ID`, `type`, and `role` are always returned. To retrieve specific fields, see [Return specific fields](https://developers.google.com/workspace/drive/api/guides/fields-parameter). Some resource methods (such as `permissions.update`) require a `permissionId`. Use the `permissions.list` method to retrieve the ID for a file, folder, or shared drive.
  "allowFileDiscovery": True or False, # Whether the permission allows the file to be discovered through search. This is only applicable for permissions of type `domain` or `anyone`.
  "deleted": True or False, # Output only. Whether the account associated with this permission has been deleted. This field only pertains to permissions of type `user` or `group`.
  "displayName": "A String", # Output only. The "pretty" name of the value of the permission. The following is a list of examples for each type of permission: * `user` - User's full name, as defined for their Google Account, such as "Dana A." * `group` - Name of the Google Group, such as "The Company Administrators." * `domain` - String domain name, such as "cymbalgroup.com." * `anyone` - No `displayName` is present.
  "domain": "A String", # The domain to which this permission refers.
  "emailAddress": "A String", # The email address of the user or group to which this permission refers.
  "expirationTime": "A String", # The time at which this permission will expire (RFC 3339 date-time). Expiration times have the following restrictions: - They can only be set on user and group permissions - The time must be in the future - The time cannot be more than a year in the future
  "id": "A String", # Output only. The ID of this permission. This is a unique identifier for the grantee, and is published in the [User resource](https://developers.google.com/workspace/drive/api/reference/rest/v3/User) as `permissionId`. IDs should be treated as opaque values.
  "inheritedPermissionsDisabled": True or False, # When `true`, only organizers, owners, and users with permissions added directly on the item can access it.
  "kind": "drive#permission", # Output only. Identifies what kind of resource this is. Value: the fixed string `"drive#permission"`.
  "pendingOwner": True or False, # Whether the account associated with this permission is a pending owner. Only populated for permissions of type `user` for files that aren't in a shared drive.
  "permissionDetails": [ # Output only. Details of whether the permissions on this item are inherited or are directly on this item.
    {
      "inherited": True or False, # Output only. Whether this permission is inherited. This field is always populated. This is an output-only field.
      "inheritedFrom": "A String", # Output only. The ID of the item from which this permission is inherited. This is only populated for items in shared drives.
      "permissionType": "A String", # Output only. The permission type for this user. Supported values include: * `file` * `member`
      "role": "A String", # Output only. The primary role for this user. Supported values include: * `owner` * `organizer` * `fileOrganizer` * `writer` * `commenter` * `reader` For more information, see [Roles and permissions](https://developers.google.com/workspace/drive/api/guides/ref-roles).
    },
  ],
  "photoLink": "A String", # Output only. A link to the user's profile photo, if available.
  "role": "A String", # The role granted by this permission. Supported values include: * `owner` * `organizer` * `fileOrganizer` * `writer` * `commenter` * `reader` For more information, see [Roles and permissions](https://developers.google.com/workspace/drive/api/guides/ref-roles).
  "teamDrivePermissionDetails": [ # Output only. Deprecated: Output only. Use `permissionDetails` instead.
    {
      "inherited": True or False, # Deprecated: Output only. Use `permissionDetails/inherited` instead.
      "inheritedFrom": "A String", # Deprecated: Output only. Use `permissionDetails/inheritedFrom` instead.
      "role": "A String", # Deprecated: Output only. Use `permissionDetails/role` instead.
      "teamDrivePermissionType": "A String", # Deprecated: Output only. Use `permissionDetails/permissionType` instead.
    },
  ],
  "type": "A String", # The type of the grantee. Supported values include: * `user` * `group` * `domain` * `anyone` When creating a permission, if `type` is `user` or `group`, you must provide an `emailAddress` for the user or group. If `type` is `domain`, you must provide a `domain`. If `type` is `anyone`, no extra information is required.
  "view": "A String", # Indicates the view for this permission. Only populated for permissions that belong to a view. The only supported values are `published` and `metadata`: * `published`: The permission's role is `publishedReader`. * `metadata`: The item is only visible to the `metadata` view because the item has limited access and the scope has at least read access to the parent. The `metadata` view is only supported on folders. For more information, see [Views](https://developers.google.com/workspace/drive/api/guides/ref-roles#views).
}