Skip to main content
Google Cloud Documentation
Technology areas
  • AI and ML
  • Application development
  • Application hosting
  • Compute
  • Data analytics and pipelines
  • Databases
  • Distributed, hybrid, and multicloud
  • Generative AI
  • Industry solutions
  • Networking
  • Observability and monitoring
  • Security
  • Storage
Cross-product tools
  • Access and resources management
  • Costs and usage management
  • Infrastructure as code
  • Migration
  • SDK, languages, frameworks, and tools
/
Console
  • English
  • Deutsch
  • Español – América Latina
  • Français
  • Português – Brasil
  • 中文 – 简体
  • 日本語
  • 한국어
Sign in
  • IAM
Start free
Overview Guides Reference Samples Resources
Google Cloud Documentation
  • Technology areas
    • More
    • Overview
    • Guides
    • Reference
    • Samples
    • Resources
  • Cross-product tools
    • More
  • Console
  • Identity and Access Management
  • All APIs and reference
  • Authenticate to IAM
  • Retry failed requests
  • Client libraries
  • gcloud iam commands
  • REST API reference
    • IAM REST API
      • Overview
      • v3
        • REST Resources
        • folders.locations.operations
          • Overview
          • get
        • folders.locations.policyBindings
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • searchTargetPolicyBindings
        • organizations.locations.operations
          • Overview
          • get
        • organizations.locations.policyBindings
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • searchTargetPolicyBindings
        • organizations.locations.principalAccessBoundaryPolicies
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • searchPolicyBindings
        • projects.locations.operations
          • Overview
          • get
        • projects.locations.policyBindings
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • searchTargetPolicyBindings
        • Types
        • ListPolicyBindingsResponse
        • SearchTargetPolicyBindingsResponse
      • v3beta
        • REST Resources
        • folders.locations.accessPolicies
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • searchPolicyBindings
        • folders.locations.operations
          • Overview
          • get
        • folders.locations.policyBindings
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • searchTargetPolicyBindings
        • organizations.locations.accessPolicies
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • searchPolicyBindings
        • organizations.locations.operations
          • Overview
          • get
        • organizations.locations.policyBindings
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • searchTargetPolicyBindings
        • organizations.locations.principalAccessBoundaryPolicies
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • searchPolicyBindings
        • projects.locations.accessPolicies
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • searchPolicyBindings
        • projects.locations.operations
          • Overview
          • get
        • projects.locations.policyBindings
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • searchTargetPolicyBindings
        • Types
        • ListAccessPoliciesResponse
        • ListPolicyBindingsResponse
        • SearchAccessPolicyBindingsResponse
        • SearchTargetPolicyBindingsResponse
      • v2
        • REST Resources
        • policies
          • Overview
          • createPolicy
          • delete
          • get
          • listPolicies
          • update
        • policies.operations
          • Overview
          • get
      • v1
        • REST Resources
        • iamPolicies
          • Overview
          • lintPolicy
          • queryAuditableServices
        • locations.workforcePools
          • Overview
          • create
          • delete
          • get
          • getIamPolicy
          • list
          • patch
          • setIamPolicy
          • testIamPermissions
          • undelete
        • locations.workforcePools.operations
          • Overview
          • get
        • locations.workforcePools.providers
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • undelete
        • locations.workforcePools.providers.keys
          • Overview
          • create
          • delete
          • get
          • list
          • undelete
        • locations.workforcePools.providers.operations
          • Overview
          • get
        • locations.workforcePools.providers.scimTenants
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • undelete
        • locations.workforcePools.providers.scimTenants.tokens
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • undelete
        • locations.workforcePools.subjects
          • Overview
          • delete
          • undelete
        • organizations.roles
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • undelete
        • permissions
          • Overview
          • queryTestablePermissions
        • projects.locations.oauthClients
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • undelete
        • projects.locations.oauthClients.credentials
          • Overview
          • create
          • delete
          • get
          • list
          • patch
        • projects.locations.workloadIdentityPools
          • Overview
          • create
          • delete
          • get
          • getIamPolicy
          • list
          • patch
          • setIamPolicy
          • testIamPermissions
          • undelete
        • projects.locations.workloadIdentityPools.namespaces
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • undelete
        • projects.locations.workloadIdentityPools.namespaces.managedIdentities
          • Overview
          • addAttestationRule
          • create
          • delete
          • get
          • list
          • listAttestationRules
          • patch
          • removeAttestationRule
          • setAttestationRules
          • undelete
        • projects.locations.workloadIdentityPools.operations
          • Overview
          • get
        • projects.locations.workloadIdentityPools.providers
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • undelete
        • projects.locations.workloadIdentityPools.providers.keys
          • Overview
          • create
          • delete
          • get
          • list
          • undelete
        • projects.locations.workloadIdentityPools.providers.operations
          • Overview
          • get
        • projects.roles
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • undelete
        • projects.serviceAccounts
          • Overview
          • create
          • delete
          • disable
          • enable
          • get
          • getIamPolicy
          • list
          • patch
          • setIamPolicy
          • signBlob
          • signJwt
          • testIamPermissions
          • undelete
          • update
        • projects.serviceAccounts.keys
          • Overview
          • create
          • delete
          • disable
          • enable
          • get
          • list
          • upload
        • roles
          • Overview
          • get
          • list
          • queryGrantableRoles
        • Types
        • AttestationRule
        • GetPolicyOptions
        • KeyData
        • ListRolesResponse
        • Policy
        • RoleView
        • TestIamPermissionsResponse
        • TrustStore
      • v2beta
        • REST Resources
        • policies
          • Overview
          • createPolicy
          • delete
          • get
          • listPolicies
          • update
        • policies.operations
          • Overview
          • get
      • v1beta
        • REST Resources
        • projects.locations.workloadIdentityPools
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • undelete
        • projects.locations.workloadIdentityPools.operations
          • Overview
          • get
        • projects.locations.workloadIdentityPools.providers
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • undelete
        • projects.locations.workloadIdentityPools.providers.operations
          • Overview
          • get
      • Shared types
        • Types
        • Expr
        • GetOperationRequest
        • Operation
    • PAM REST API
      • Overview
      • v1
        • REST Resources
        • folders.locations
          • Overview
          • checkOnboardingStatus
          • get
          • list
        • folders.locations.entitlements
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • search
        • folders.locations.entitlements.grants
          • Overview
          • approve
          • create
          • deny
          • get
          • list
          • revoke
          • search
        • folders.locations.operations
          • Overview
          • delete
          • get
          • list
        • organizations.locations
          • Overview
          • checkOnboardingStatus
          • get
          • list
        • organizations.locations.entitlements
          • Overview
          • create
          • delete
          • get
          • list
          • patch
          • search
        • organizations.locations.entitlements.grants
          • Overview
          • approve
          • create
          • deny
          • get
          • list
          • revoke
          • search
        • organizations.locations.operations
          • Overview
          • delete
          • get
          • list
        • projects.locations
          • Overview
          • checkOnboardingStatus
          • get
          • list
        • projects.locations.entitlements
          • Overview