Returns permissions that a caller has on the specified resource. If the resource does not exist, this returns an empty set of permissions, not a NOT_FOUND
error.
Note: This operation is designed to be used for building permission-aware UIs and command-line tools, not for authorization checking. This operation may "fail open" without warning.
HTTP request
POST https://dns.googleapis.com/dns/v1/{resource=projects/*/managedZones/*}:testIamPermissions
The URL uses gRPC Transcoding syntax.
Path parameters
| Parameters | |
|---|---|
resource
|
REQUIRED: The resource for which the policy detail is being requested. See Resource names
for the appropriate value for this field. It takes the form |
Request body
The request body contains data with the following structure:
| JSON representation |
|---|
{ "permissions" : [ string ] } |
| Fields | |
|---|---|
permissions[]
|
The set of permissions to check for the |
Response body
Response message for managedZones.testIamPermissions
method.
If successful, the response body contains data with the following structure:
| JSON representation |
|---|
{ "permissions" : [ string ] } |
| Fields | |
|---|---|
permissions[]
|
A subset of |
Authorization scopes
Requires one of the following OAuth scopes:
-
https://www.googleapis.com/auth/cloud-platform -
https://www.googleapis.com/auth/cloud-platform.read-only -
https://www.googleapis.com/auth/ndev.clouddns.readonly -
https://www.googleapis.com/auth/ndev.clouddns.readwrite
For more information, see the Authentication Overview .
