IAM Policy Troubleshooter makes it easier to understand why a user hasaccess to a resource or doesn’t have permission to call an API. Given an email,resource, and permission, Policy Troubleshooter examines all Identity andAccess Management (IAM) policies that apply to the resource. It then revealswhether the member’s roles include the permission on that resource and, if so,which policies bind the member to those roles.

• Client Library Documentation

• Product Documentation

Quick Start

In order to use this library, you first need to go through the following steps:

1. Select or create a Cloud Platform project.

2. Enable billing for your project.

3. Enable the Resource Manager API Service.

4. Setup Authentication.

Installation

Install this library in avirtualenv using pip.virtualenv is a tool tocreate isolated Python environments. The basic problem it addresses is one ofdependencies and versions, and indirectly permissions.

Withvirtualenv, it’s possible to install this library without needing systeminstall permissions, and without clashing with the installed systemdependencies.

Mac/Linux

pip install virtualenvvirtualenv <your-env>source <your-env>/bin/activate<your-env>/bin/pip install google-cloud-policy-troubleshooter

Windows

pip install virtualenvvirtualenv <your-env><your-env>\Scripts\activate<your-env>\Scripts\pip.exe install google-cloud-policy-troubleshooter

Next Steps

• Read theClient Library Documentation for IAM Policy Troubleshooterto see other available methods on the client.

• Read theIAM Policy Troubleshooter Product documentation to learnmore about the product and see How-to Guides.

• View thisREADME to see the full list of CloudAPIs that we cover.