Method: machineImages.testIamPermissions

Returns permissions that a caller has on the specified resource.

HTTP request

POST https://compute.googleapis.com/compute/v1/projects/{project}/global/machineImages/{resource}/testIamPermissions

The URL usesgRPC Transcoding syntax. To know more about valid error responses that can be thrown by this HTTP request, please refer to theservice error catalog

Path parameters

Parameters
project

string

Project ID for this request.

resource

string

Name or id of the resource for this request.

Request body

The request body contains data with the following structure:

JSON representation
{"permissions":[string]}
Fields
permissions[]

string

The set of permissions to check for the 'resource'. Permissions with wildcards (such as '*' or 'storage.*') are not allowed.

Response body

If successful, the response body contains data with the following structure:

JSON representation
{"permissions":[string]}
Fields
permissions[]

string

A subset ofTestPermissionsRequest.permissions that the caller is allowed.

Authorization scopes

Requires one of the following OAuth scopes:

  • https://www.googleapis.com/auth/compute.readonly
  • https://www.googleapis.com/auth/compute
  • https://www.googleapis.com/auth/cloud-platform

For more information, see theAuthentication Overview.

IAM Permissions

In addition to any permissions specified on the fields above, authorization requires one or more of the followingIAM permissions:

  • compute.machineImages.list

To find predefined roles that contain those permissions, seeCompute Engine IAM Roles.

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-09-18 UTC.