Cloud Optimization API provides a portfolio of solvers to address common optimization use cases starting with optimal route planning for vehicle fleets. Note that google-cloud-optimization-v1 is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-optimization instead. See the readme for more details.

The Oracle Database@Google Cloud API provides a set of APIs to manage Oracle database services, such as Exadata and Autonomous Databases. Note that google-cloud-oracle_database-v1 is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-oracle_database instead. See the readme for more details.

The client library for the Cloud Composer API, built on the popular Apache Airflow open source project. Cloud Composer is a fully managed workflow orchestration service, enabling you to create, schedule, monitor, and manage workflows that span across clouds and on-premises data centers. Note that google-cloud-orchestration-airflow-service-v1 is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-orchestration-airflow-service instead. See the readme for more details.

The Cloud Org Policy service provides a simple mechanism for organizations to restrict the allowed configurations across their entire Cloud Resource hierarchy. Note that google-cloud-org_policy-v2 is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-org_policy instead. See the readme for more details.

Cloud OS Config provides OS management tools that can be used for patch management, patch compliance, and configuration management on VM instances. Note that google-cloud-os_config-v1 is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-os_config instead. See the readme for more details.

Cloud OS Config provides OS management tools that can be used for patch management, patch compliance, and configuration management on VM instances. Note that google-cloud-os_config-v1alpha is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-os_config instead. See the readme for more details.

Use OS Login to manage SSH access to your instances using IAM without having to create and manage individual SSH keys. OS Login maintains a consistent Linux user identity across VM instances and is the recommended way to manage many users across multiple instances or projects. Note that google-cloud-os_login-v1 is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-os_login instead. See the readme for more details.

Use OS Login to manage SSH access to your instances using IAM without having to create and manage individual SSH keys. OS Login maintains a consistent Linux user identity across VM instances and is the recommended way to manage many users across multiple instances or projects. Note that google-cloud-os_login-v1beta is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-os_login instead. See the readme for more details.

google-cloud-parallelstore-v1 is the official client library for the Parallelstore V1 API. Note that google-cloud-parallelstore-v1 is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-parallelstore instead. See the readme for more details.

google-cloud-parallelstore-v1beta is the official client library for the Parallelstore V1BETA API. Note that google-cloud-parallelstore-v1beta is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-parallelstore instead. See the readme for more details.

Parameter Manager is a single source of truth to store, access and manage the lifecycle of your workload parameters. Parameter Manager aims to make management of sensitive application parameters effortless for customers without diminishing focus on security. Note that google-cloud-parameter_manager-v1 is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-parameter_manager instead. See the readme for more details.

Phishing Protection helps prevent users from accessing phishing sites by identifying various signals associated with malicious content, including the use of your brand assets, classifying malicious content that uses your brand and reporting the unsafe URLs to Google Safe Browsing. Note that google-cloud-phishing_protection-v1beta1 is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-phishing_protection instead. See the readme for more details.

Policy Simulator is a collection of endpoints for creating, running, and viewing a [Replay][google.cloud.policysimulator.v1.Replay]. A `Replay` is a type of simulation that lets you see how your members' access to resources might change if you changed your IAM policy. During a `Replay`, Policy Simulator re-evaluates, or replays, past access attempts under both the current policy and your proposed policy, and compares those results to determine how your members' access might change under the proposed policy. Note that google-cloud-policy_simulator-v1 is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-policy_simulator instead. See the readme for more details.

google-cloud-policy_troubleshooter-iam-v3 is the official client library for the Policy Troubleshooter V3 API. Note that google-cloud-policy_troubleshooter-iam-v3 is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-policy_troubleshooter-iam instead. See the readme for more details.

Policy Troubleshooter makes it easier to understand why a user has access to a resource or doesn't have permission to call an API. Given an email, resource, and permission, Policy Troubleshooter will examine all IAM policies that apply to the resource. It then reveals whether the member's roles include the permission on that resource and, if so, which policies bind the member to those roles. Note that google-cloud-policy_troubleshooter-v1 is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-policy_troubleshooter instead. See the readme for more details.

With Private Catalog, developers and cloud admins can make their solutions discoverable to their internal enterprise users. Cloud admins can manage their solutions and ensure their users are always launching the latest versions. Note that google-cloud-private_catalog-v1beta1 is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-private_catalog instead. See the readme for more details.

## Overview Privileged Access Manager (PAM) is a Google Cloud native, managed solution to secure, manage and audit privileged access while ensuring operational velocity and developer productivity. PAM enables just-in-time, time-bound, approval-based access elevations, and auditing of privileged access elevations and activity. PAM lets you define the rules of who can request access, what they can request access to, and if they should be granted access with or without approvals based on the sensitivity of the access and emergency of the situation. ## Concepts ### Entitlement An entitlement is an eligibility or license that allows specified users (requesters) to request and obtain access to specified resources subject to a set of conditions such as duration, etc. entitlements can be granted to both human and non-human principals. ### Grant A grant is an instance of active usage against the entitlement. A user can place a request for a grant against an entitlement. The request may be forwarded to an approver for their decision. Once approved, the grant is activated, ultimately giving the user access (roles/permissions) on a resource per the criteria specified in entitlement. ### How does PAM work PAM creates and uses a service agent (Google-managed service account) to perform the required IAM policy changes for granting access at a specific resource/access scope. The service agent requires getIAMPolicy and setIAMPolicy permissions at the appropriate (or higher) access scope - Organization/Folder/Project to make policy changes on the resources listed in PAM entitlements. When enabling PAM for a resource scope, the user/ principal performing that action should have the appropriate permissions at that resource scope (resourcemanager.{projects|folders|organizations}.setIamPolicy, resourcemanager.{projects|folders|organizations}.getIamPolicy, and resourcemanager.{projects|folders|organizations}.get) to list and grant the service agent/account the required access to perform IAM policy changes. Note that google-cloud-privileged_access_manager-v1 is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-privileged_access_manager instead. See the readme for more details.

The Rapid Migration Assessment service is our first-party migration assessment and planning tool. Note that google-cloud-rapid_migration_assessment-v1 is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-rapid_migration_assessment instead. See the readme for more details.

Recommendations AI enables you to build an end-to-end personalized recommendation system based on state-of-the-art deep learning ML models, without a need for expertise in ML or recommendation systems. Note that google-cloud-recommendation_engine-v1beta1 is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-recommendation_engine instead. See the readme for more details.

Recommender is a service on Google Cloud that provides usage recommendations for Cloud products and services. Note that google-cloud-recommender-v1 is a version-specific client library. For most uses, we recommend installing the main client library google-cloud-recommender instead. See the readme for more details.