`projects.setIamPolicy` API call does not modify `auditConfigs` but modifies `bindings`

[madhushreeray30]

Thanks for stopping by to let us know something could be better!

PLEASE READ: If you have a support contract with Google, please create an issue in the support console instead of filing on GitHub. This will ensure a timely response.

1. Is this a client library issue or a product issue? This is the client library for . We will only be able to assist with issues that pertain to the behaviors of this library. If the issue you're experiencing is due to the behavior of the product itself, please visit the Support page to reach the most relevant engineers.

2. Did someone already solve this?

• Search the issues already opened: https://github.com/googleapis/google-api-nodejs-client/issues
• Search the issues on our "catch-all" repository: https://github.com/googleapis/google-cloud-node
• Search or ask on StackOverflow (engineers monitor these tags): http://stackoverflow.com/questions/tagged/google-cloud-platform+node.js

3. Do you have a support contract? Please create an issue in the support console to ensure a timely response.

If the support paths suggested above still do not result in a resolution, please provide the following details.

Environment details

• OS:
• Node.js version: v20.14.0
• npm version: 10.7.0
• googleapis version: 118.0.0

Steps to reproduce

1. Go to the rest API > https://cloud.google.com/resource-manager/reference/rest/v1/projects/setIamPolicy
2. Enter your <projects/project-name> in the resources
3. Add the request body including changes in both auditConfigs and bindings. Make sure we add exemptedMembers to the config with service as allServices
4. The changes in bindings will be updated but the changes in auditConfigs will not be updated

When we try to update auditConfigs using the projects.setIamPolicy API any change is not reflected however when using the console or the CLI (gcloud projects set-iam-policy parker-aac policy.json where we have a file policy.json with the updated request body) we are able to update it especially when changing the exemptedMembers parameter.

We do have a documentation supporting this > https://cloud.google.com/resource-manager/reference/rest/v1/projects/setIamPolicy Since we are able to update it using the CLI or from the console we should be able to do with the API as well. Also the API is able to update the bindings then why not the auditConfigs

Making sure to follow these steps will guarantee the quickest resolution possible.

Thanks!