Method: projects.locations.entryGroups.entries.getIamPolicy

Gets the access control policy for a resource.

May return:

  • ANOT_FOUND error if the resource doesn't exist or you don't have the permission to view it.
  • An empty policy if the resource exists but doesn't have a set policy.

Supported resources are:

  • Tag templates
  • Entry groups

Note: This method doesn't get policies from Google Cloud Platform resources ingested into Data Catalog.

To call this method, you must have the following Google IAM permissions:

  • datacatalog.tagTemplates.getIamPolicy to get policies on tag templates.
  • datacatalog.entryGroups.getIamPolicy to get policies on entry groups.

HTTP request


Path parameters



REQUIRED: The resource for which the policy is being requested. See the operation documentation for the appropriate value for this field. It takes the form projects/{project}/locations/{location}/entryGroups/{entrygroup}/entries/{entries}.

Request body

The request body contains data with the following structure:

JSON representation
  "options": {
    object (GetPolicyOptions)

object (GetPolicyOptions)

OPTIONAL: A GetPolicyOptions object for specifying options to GetIamPolicy.

Response body

If successful, the response body contains an instance of Policy.

Authorization Scopes

Requires the following OAuth scope:


For more information, see the Authentication Overview.