{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://artifacts.apis.io/google-marketing-platform/json-schema/google-marketing-platform-admin-access-binding-schema.json",
  "title": "AdminAccessBinding",
  "description": "A resource message representing a binding to a set of roles.",
  "x-generated": "2026-11-04",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/google-marketing-platform-adminaccessbindings-api-openapi.yml#/components/schemas/AdminAccessBinding",
  "type": "object",
  "properties": {
    "organizationRoles": {
      "type": "array",
      "description": "Optional. A list of roles granted to the parent organization. USER_ADMIN_ROLE and BILLING_ADMIN_ROLE will be automatically added if ORG_ADMIN_ROLE is assigned. No roles will be assigned if no roles are specified.",
      "items": {
        "type": "string",
        "enum": [
          "ORGANIZATION_ROLE_UNSPECIFIED",
          "ORG_ADMIN_ROLE",
          "USER_ADMIN_ROLE",
          "BILLING_ADMIN_ROLE"
        ],
        "x-enum-descriptions": [
          "Unknown or unspecified organization role.",
          "Organization admin role that grants all administrative privileges.",
          "User admin role that grants access to the Users section to perform various user management functions.",
          "Billing admin role that grants access to the Billing section to perform various billing-related functions."
        ]
      }
    },
    "name": {
      "type": "string",
      "description": "Identifier. The resource name of this AdminAccessBinding. Format: organizations/{org_id}/adminAccessBindings/{admin_access_binding_id} Example: \"organizations/123abc/adminAccessBindings/456def\""
    },
    "userEmail": {
      "type": "string",
      "description": "Email address of the user."
    },
    "userGroup": {
      "type": "string",
      "description": "Resource name of the user group."
    }
  }
}