Skip to main content
Google Cloud
Documentation Technology areas
  • AI and ML
  • Application development
  • Application hosting
  • Compute
  • Data analytics and pipelines
  • Databases
  • Distributed, hybrid, and multicloud
  • Generative AI
  • Industry solutions
  • Networking
  • Observability and monitoring
  • Security
  • Storage
Cross-product tools
  • Access and resources management
  • Costs and usage management
  • Google Cloud SDK, languages, frameworks, and tools
  • Infrastructure as code
  • Migration
Related sites
  • Google Cloud Home
  • Free Trial and Free Tier
  • Architecture Center
  • Blog
  • Contact Sales
  • Google Cloud Developer Center
  • Google Developer Center
  • Google Cloud Marketplace
  • Google Cloud Marketplace Documentation
  • Google Cloud Skills Boost
  • Google Cloud Solution Center
  • Google Cloud Support
  • Google Cloud Tech Youtube Channel
/
  • English
  • Deutsch
  • Español – América Latina
  • Français
  • Português – Brasil
  • 中文 – 简体
  • 日本語
  • 한국어
Console Sign in
  • IAM
Guides Reference Samples Resources
Contact Us Start free
Google Cloud
  • Documentation
    • Guides
    • Reference
    • Samples
    • Resources
  • Technology areas
    • More
  • Cross-product tools
    • More
  • Related sites
    • More
  • Console
  • Contact Us
  • Start free
  • Identity and Access Management
  • All APIs and reference
  • Authenticate to IAM
  • Retry failed requests
  • Client libraries
  • gcloud iam commands
  • REST API reference
    • IAM REST API
      • Overview
      • v3
        • REST Resources
        • folders.locations.operations
          • Overview
          • get
        • folders.locations.policyBindings
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • searchTargetPolicyBindings
        • organizations.locations.operations
          • Overview
          • get
        • organizations.locations.policyBindings
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • searchTargetPolicyBindings
        • organizations.locations.principalAccessBoundaryPolicies
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • searchPolicyBindings
        • projects.locations.operations
          • Overview
          • get
        • projects.locations.policyBindings
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • searchTargetPolicyBindings
        • Types
        • ListPolicyBindingsResponse
        • SearchTargetPolicyBindingsResponse
      • v2
        • REST Resources
        • policies
          • Overview
          • createPolicy
          • delete
          • get
          • listPolicies
          • update
        • policies.operations
          • Overview
          • get
      • v1
        • REST Resources
        • iamPolicies
          • Overview
          • lintPolicy
          • queryAuditableServices
        • locations.workforcePools
          • Overview
          • create
          • delete
          • get
          • getIamPolicy
          • list
          • patch
          • setIamPolicy
          • testIamPermissions
          • undelete
        • locations.workforcePools.operations
          • Overview
          • get
        • locations.workforcePools.providers
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • undelete
        • locations.workforcePools.providers.keys
          • Overview
          • create
          • delete
          • get
          • list
          • undelete
        • locations.workforcePools.providers.operations
          • Overview
          • get
        • locations.workforcePools.subjects
          • Overview
          • delete
          • undelete
        • organizations.roles
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • undelete
        • permissions
          • Overview
          • queryTestablePermissions
        • projects.locations.oauthClients
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • undelete
        • projects.locations.oauthClients.credentials
          • Overview
          • create
          • delete
          • get
          • list
          • patch
        • projects.locations.workloadIdentityPools
          • Overview
          • create
          • delete
          • get
          • getIamPolicy
          • list
          • patch
          • setIamPolicy
          • testIamPermissions
          • undelete
        • projects.locations.workloadIdentityPools.namespaces
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • undelete
        • projects.locations.workloadIdentityPools.namespaces.managedIdentities
          • Overview
          • addAttestationRule
          • create
          • delete
          • get
          • list
          • listAttestationRules
          • patch
          • removeAttestationRule
          • setAttestationRules
          • undelete
        • projects.locations.workloadIdentityPools.operations
          • Overview
          • get
        • projects.locations.workloadIdentityPools.providers
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • undelete
        • projects.locations.workloadIdentityPools.providers.keys
          • Overview
          • create
          • delete
          • get
          • list
          • undelete
        • projects.locations.workloadIdentityPools.providers.operations
          • Overview
          • get
        • projects.roles
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • undelete
        • projects.serviceAccounts
          • Overview
          • create
          • delete
          • disable
          • enable
          • get
          • getIamPolicy
          • list
          • patch
          • setIamPolicy
          • signBlob
          • signJwt
          • testIamPermissions
          • undelete
          • update
        • projects.serviceAccounts.keys
          • Overview
          • create
          • delete
          • disable
          • enable
          • get
          • list
          • upload
        • roles
          • Overview
          • get
          • list
          • queryGrantableRoles
        • Types
        • AttestationRule
        • GetPolicyOptions
        • KeyData
        • ListRolesResponse
        • Policy
        • RoleView
        • TestIamPermissionsResponse
        • TrustStore
      • v2beta
        • REST Resources
        • policies
          • Overview
          • createPolicy
          • delete
          • get
          • listPolicies
          • update
        • policies.operations
          • Overview
          • get
      • v1beta
        • REST Resources
        • projects.locations.workloadIdentityPools
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • undelete
        • projects.locations.workloadIdentityPools.operations
          • Overview
          • get
        • projects.locations.workloadIdentityPools.providers
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • undelete
        • projects.locations.workloadIdentityPools.providers.operations
          • Overview
          • get
      • Shared types
        • Types
        • Expr
        • GetOperationRequest
        • Operation
    • PAM REST API
      • Overview
      • v1
        • REST Resources
        • folders.locations
          • Overview
          • checkOnboardingStatus
          • get
          • list
        • folders.locations.entitlements
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • search
        • folders.locations.entitlements.grants
          • Overview
          • approve
          • create
          • deny
          • get
          • list
          • revoke
          • search
        • folders.locations.operations
          • Overview
          • delete
          • get
          • list
        • organizations.locations
          • Overview
          • checkOnboardingStatus
          • get
          • list
        • organizations.locations.entitlements
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • search
        • organizations.locations.entitlements.grants
          • Overview
          • approve
          • create
          • deny
          • get
          • list
          • revoke
          • search
        • organizations.locations.operations
          • Overview
          • delete
          • get
          • list
        • projects.locations
          • Overview
          • checkOnboardingStatus
          • get
          • list
        • projects.locations.entitlements
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • search
        • projects.locations.entitlements.grants
          • Overview
          • approve
          • create
          • deny
          • get
          • list
          • revoke
          • search
        • projects.locations.operations
          • Overview
          • delete
          • get
          • list
        • Types
        • CallerAccessType
        • CallerRelationshipType
        • CheckOnboardingStatusResponse
        • ListEntitlementsResponse
        • ListGrantsResponse
        • PrivilegedAccess
        • SearchEntitlementsResponse
        • SearchGrantsResponse
      • v1beta
        • REST Resources
        • folders.locations
          • Overview
          • checkOnboardingStatus
          • get
          • list
        • folders.locations.entitlements
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • search
        • folders.locations.entitlements.grants
          • Overview
          • approve
          • create
          • deny
          • get
          • list
          • revoke
          • search
        • folders.locations.operations
          • Overview
          • delete
          • get
          • list
        • organizations.locations
          • Overview
          • checkOnboardingStatus
          • get
          • list
        • organizations.locations.entitlements
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • search
        • organizations.locations.entitlements.grants
          • Overview
          • approve
          • create
          • deny
          • get
          • list
          • revoke
          • search
        • organizations.locations.operations
          • Overview
          • delete
          • get
          • list
        • projects.locations
          • Overview
          • checkOnboardingStatus
          • get
          • list
        • projects.locations.entitlements
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • search
        • projects.locations.entitlements.grants
          • Overview
          • approve
          • create
          • deny
          • get
          • list
          • revoke
          • search
        • projects.locations.operations
          • Overview
          • delete
          • get
          • list
        • Types
        • CallerAccessType
        • CallerRelationshipType
        • CheckOnboardingStatusResponse
        • ListEntitlementsResponse
        • ListGrantsResponse
        • PrivilegedAccess
        • SearchEntitlementsResponse
        • SearchGrantsResponse
      • Shared types
        • Types
        • DeleteOperationRequest
        • GetLocationRequest
        • GetOperationRequest
        • ListLocationsRequest
        • ListLocationsResponse
        • ListOperationsRequest
        • ListOperationsResponse
    • Security Token Service REST API
      • Overview
      • v1
        • TopLevel
          • token
        • Types
        • AccessBoundary
        • Binding
        • Options
      • v1beta
        • TopLevel
          • token
        • Types
        • AccessBoundary
        • Options
    • Service Account Credentials REST API