Method: folders.locations.entitlements.grants.deny

grants.deny is used to deny a grant. This method can only be called on a grant when it's in theAPPROVAL_AWAITED state. This operation can't be undone.

HTTP request

POST https://privilegedaccessmanager.googleapis.com/v1/{name=folders/*/locations/*/entitlements/*/grants/*}:deny

The URL usesgRPC Transcoding syntax.

Path parameters

Parameters
name

string

Required. Name of the grant resource which is being denied.

Request body

The request body contains data with the following structure:

JSON representation
{"reason":string}
Fields
reason

string

Optional. The reason for denying this grant. This is required ifrequireApproverJustification field of theManualApprovals workflow used in this grant is true.

Response body

If successful, the response body contains an instance ofGrant.

Authorization scopes

Requires the following OAuth scope:

  • https://www.googleapis.com/auth/cloud-platform

For more information, see theAuthentication Overview.

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-09-26 UTC.