Full resource names

Some Identity and Access Management (IAM) features, such as troubleshooting access issues and viewing the grantable roles on a resource, require you to provide a full resource name.

This page provides examples of full resource names for commonly used Google Cloud services. It is not a complete list. To learn more about how full resource names are formatted, see the resource names section of the API design guide.

Resource type Full resource name format
BigQuery datasets //bigquery.googleapis.com/projects/project-id/datasets/dataset-id
IAM service accounts //iam.googleapis.com/projects/project-id/serviceAccounts/service-account-email
IAM service account keys //iam.googleapis.com/projects/project-id/serviceAccounts/service-account-email/keys/key-id
Identity-Aware Proxy App Engine app service //iap.googleapis.com/projects/project-number/iap_web/appengine-project-id/services/app-service-id
Identity-Aware Proxy Compute Engine backend service //iap.googleapis.com/projects/project-number/iap_web/compute/services/backend-service-id or backend-service-name
Cloud Spanner instances //spanner.googleapis.com/projects/project-id/instances/instance-id
Cloud Storage buckets1 //storage.googleapis.com/projects/_/buckets/bucket-id
Compute Engine instances //compute.googleapis.com/projects/project-id/zones/zone/instances/instance-id
Compute Engine networks //compute.googleapis.com/projects/project-id/global/networks/network
Compute Engine subnetworks //compute.googleapis.com/projects/project-id/regions/region/subnetworks/subnetwork
Google Kubernetes Engine clusters //container.googleapis.com/projects/project-id/clusters/cluster-id
Pub/Sub topics //pubsub.googleapis.com/projects/project-id/topics/topic-id
Resource Manager organizations //cloudresourcemanager.googleapis.com/organizations/numeric-id
Resource Manager projects //cloudresourcemanager.googleapis.com/projects/project-id

1 The format shown here is compatible with IAM. Some services use a different format for this resource type.

What's next