Lists all versions of EntraID certificates for the specified instance. There can be up to three sets of certificates listed: the certificate that is currently in use, a future that has been added but not yet used to sign a certificate, and a certificate that has been rotated out.
HTTP request
GET https://sqladmin.googleapis.com/v1/projects/{project}/instances/{instance}/listEntraIdCertificates
The URL uses gRPC Transcoding syntax.
Path parameters
| Parameters | |
|---|---|
project
|
Required. Project ID of the project that contains the instance. |
instance
|
Required. Cloud SQL instance ID. This does not include the project ID. |
Request body
The request body must be empty.
Response body
Instances instances.ListEntraIdCertificates response.
If successful, the response body contains data with the following structure:
| JSON representation |
|---|
{
"certs"
:
[
{
object (
|
| Fields | |
|---|---|
certs[]
|
instances.list of Entra ID certificates for the instance. |
activeVersion
|
The |
kind
|
This is always |
Authorization scopes
Requires one of the following OAuth scopes:
-
https://www.googleapis.com/auth/cloud-platform -
https://www.googleapis.com/auth/sqlservice.admin
For more information, see the Authentication Overview .

