feat: Introducing new Grant states for Withdrawal operation

Google APIs · copybara-github · commit fb0d2d75cadb · 2025-07-30T23:37:28.000-07:00
PiperOrigin-RevId: 789206965
diff --git a/google/cloud/privilegedaccessmanager/v1/privilegedaccessmanager.proto b/google/cloud/privilegedaccessmanager/v1/privilegedaccessmanager.proto
@@ -845,6 +845,9 @@ message Grant {
         string actor = 2 [(google.api.field_behavior) = OUTPUT_ONLY];
       }
 
+      // An event representing that the grant was withdrawn.
+      message Withdrawn {}
+
       // An event representing that the grant has been scheduled to be
       // activated later.
       message Scheduled {
@@ -905,6 +908,9 @@ message Grant {
 
         // The policy bindings made by grant have been modified outside of PAM.
         ExternallyModified externally_modified = 12;
+
+        // The grant was withdrawn.
+        Withdrawn withdrawn = 13;
       }
 
       // Output only. The time (as recorded at server) when this event occurred.
@@ -973,6 +979,12 @@ message Grant {
     // System took back access as the requested duration was over. This is a
     // terminal state.
     ENDED = 11;
+
+    // Access is being withdrawn.
+    WITHDRAWING = 12;
+
+    // Grant was withdrawn by the grant owner. This is a terminal state.
+    WITHDRAWN = 13;
   }
 
   // Identifier. Name of this grant.
