- HTTP request
- Path parameters
- Query parameters
- Request body
- Response body
- Authorization scopes
- EffectiveIamPolicy
- PolicyInfo
- Try it!
Gets effective IAM policies for a batch of resources.
HTTP request
GET https://cloudasset.googleapis.com/v1/{scope=*/*}/effectiveIamPolicies:batchGet
The URL uses gRPC Transcoding syntax.
Path parameters
Parameters | |
---|---|
scope |
Required. Only IAM policies on or below the scope will be returned. This can only be an organization number (such as "organizations/123"), a folder number (such as "folders/123"), a project ID (such as "projects/my-project-id"), or a project number (such as "projects/12345"). To know how to get organization ID, visit here . To know how to get folder or project ID, visit here . Authorization requires one or more of the following IAM permissions on the specified resource
|
Query parameters
Parameters | |
---|---|
names[] |
Required. The names refer to the full_resource_names of the asset types supported by search APIs. A maximum of 20 resources' effective policies can be retrieved in a batch. |
Request body
The request body must be empty.
Response body
A response message for AssetService.BatchGetEffectiveIamPolicies
.
If successful, the response body contains data with the following structure:
JSON representation |
---|
{
"policyResults": [
{
object ( |
Fields | |
---|---|
policyResults[] |
The effective policies for a batch of resources. Note that the results order is the same as the order of |
Authorization scopes
Requires the following OAuth scope:
https://www.googleapis.com/auth/cloud-platform
For more information, see the Authentication Overview.
EffectiveIamPolicy
The effective IAM policies on one resource.
JSON representation |
---|
{
"fullResourceName": string,
"policies": [
{
object ( |
Fields | |
---|---|
fullResourceName |
The fullResourceName for which the |
policies[] |
The effective policies for the These policies include the policy set on the These policies are hierarchically ordered by |
PolicyInfo
The IAM policy and its attached resource.
JSON representation |
---|
{
"attachedResource": string,
"policy": {
object ( |
Fields | |
---|---|
attachedResource |
The full resource name the |
policy |
The IAM policy that's directly attached to the |