AI-generated Key Takeaways
-
The
testIamPermissionsoperation returns the permissions a caller has on a specified resource, even if the resource doesn't exist. -
This operation is intended for building UI and command-line tools, not for authorization checks, as it may "fail open".
-
The operation uses a POST request to a specific URL structure including the resource path.
-
The request body includes a list of
permissionsstrings to check for the specified resource.
Returns permissions that a caller has on the specified resource. If the resource does not exist, this will return an empty set of permissions, not a NOT_FOUND error.
Note: This operation is designed to be used for building permission-aware UIs and command-line tools, not for authorization checking. This operation may "fail open" without warning.
HTTP request
POST https://earthengine.googleapis.com/v1beta/{resource=projects/*/assets/**}:testIamPermissions
The URL uses gRPC Transcoding syntax.
Path parameters
| Parameters | |
|---|---|
resource
|
REQUIRED: The resource for which the policy detail is being requested. See Resource names for the appropriate value for this field. |
Request body
The request body contains data with the following structure:
| JSON representation |
|---|
{ "permissions" : [ string ] } |
| Fields | |
|---|---|
permissions[]
|
The set of permissions to check for the |
Response body
If successful, the response body contains an instance of TestIamPermissionsResponse
.
Authorization scopes
Requires one of the following OAuth scopes:
-
https://www.googleapis.com/auth/earthengine -
https://www.googleapis.com/auth/earthengine.readonly -
https://www.googleapis.com/auth/cloud-platform -
https://www.googleapis.com/auth/cloud-platform.read-only
For more information, see the OAuth 2.0 Overview .
