Full resource names
Some Identity and Access Management (IAM) features, such astroubleshooting access issues andviewing the grantable roles on a resource, requireyou to provide afull resource name.
Note: IAM Conditions also accepts resource names for alimited number of services. For details, see theresource attribute reference forIAM Conditions.This page provides examples of full resource names for commonly usedGoogle Cloud services. It is not a complete list. To learn more about howfull resource names are formatted, see theresource names section of the API design guide.
| Resource type | Full resource name format |
|---|---|
| BigQuerydatasets | //bigquery.googleapis.com/projects/PROJECT_ID/datasets/DATASET_ID |
| Cloud Billingaccounts | //cloudbilling.googleapis.com/billingAccounts/BILLING_ACCOUNT_ID |
| Cloud Runservices | //run.googleapis.com/projects/PROJECT_ID/locations/LOCATION_ID/services/SERVICE_ID |
| Spannerinstances | //spanner.googleapis.com/projects/PROJECT_ID/instances/INSTANCE_ID |
| Cloud SQLinstances | //sqladmin.googleapis.com/projects/PROJECT_ID/instances/INSTANCE_ID |
| Cloud Storagebuckets1 | //storage.googleapis.com/projects/_/buckets/BUCKET_ID |
| Compute Engineinstances | //compute.googleapis.com/projects/PROJECT_ID/zones/ZONE/instances/INSTANCE_ID |
| Compute Enginenetworks | //compute.googleapis.com/projects/PROJECT_ID/global/networks/NETWORK |
| Compute Enginesubnetworks | //compute.googleapis.com/projects/PROJECT_ID/regions/REGION/subnetworks/SUBNETWORK |
| Google Kubernetes Engineclusters | //container.googleapis.com/projects/PROJECT_ID/clusters/CLUSTER_ID |
| IAMservice accounts | //iam.googleapis.com/projects/PROJECT_ID/ |
| IAMservice account keys | //iam.googleapis.com/projects/PROJECT_ID/ |
| Identity-Aware ProxyApp Engine app service | //iap.googleapis.com/projects/PROJECT_NUMBER/iap_web/appengine-PROJECT_ID/services/APP_SERVICE_ID |
| Identity-Aware ProxyCompute Engine backend service | //iap.googleapis.com/projects/PROJECT_NUMBER/iap_web/compute/services/BACKEND_SERVICE_ID_OR_NAME |
| Pub/Subtopics | //pubsub.googleapis.com/projects/PROJECT_ID/topics/TOPIC_ID |
| Resource Managerorganizations | //cloudresourcemanager.googleapis.com/organizations/ORGANIZATION_NUMBER |
| Resource Managerfolders | //cloudresourcemanager.googleapis.com/folders/FOLDER_NUMBER |
| Resource Managerprojects | //cloudresourcemanager.googleapis.com/projects/PROJECT_ID |
1 The format shown here is compatible with IAM.Some services use a different format for this resource type.
What's next
- Learn how totroubleshoot access issues for aresource.
- Understand how toview the roles you can grant on aresource.
Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2025-12-15 UTC.