All IAM code samples

This page contains code samples for Identity and Access Management. To search and filter code samples for other Google Cloud products, see the Google Cloud sample browser.

Add a new role binding

Demonstrates adding a new role binding to an IAM policy.

C# Java Python

View sample

View in documentation

• Manage access to projects, folders, and organizations

Add a principal to a role binding

Demonstrates adding a principal to an existing role binding in an IAM policy.

C# Go Java Python

View sample

View in documentation

• Manage access to projects, folders, and organizations

Create a custom role

Demonstrates creating a custom role.

C# C++ Go Java Python

View sample

View in documentation

• Create and manage custom roles

Create a deny policy

Creates a deny policy based on the configuration provided.

Go Java Node.js Python Terraform

View sample

View in documentation

• Deny access to resources

Create a service account

Demonstrates creating a service account.

C# C++ Go Java Python

View sample

View in documentation

• Create service accounts

Create a service account key

Demonstrates creating a service account key.

C# C++ Go Java Python

View sample

View in documentation

• Create and delete service account keys

Create a token for workload identity federation with AWS

Creates a token that IAM workload identity federation can verify without revealing the AWS secret access key.

Python

View sample

View in documentation

• Configure workload identity federation with AWS or Azure

Create project-level service agents

Create all project-level service agents for an API.

Terraform

View sample

Delete a custom role

Demonstrates deleting a custom role.

C# C++ Go Java Python

View sample

View in documentation

• Create and manage custom roles

Delete a deny policy

Delete the policy if you no longer want to enforce the rules in a deny policy.

Go Java Node.js Python

View sample

View in documentation

• Deny access to resources

Delete a service account

Demonstrates deleting a service account.

C# C++ Go Java Python

View sample

View in documentation

• Delete and undelete service accounts

Delete a service account key

Demonstrates deleting a service account key.

C# C++ Go Java Python

View sample

View in documentation

• Create and delete service account keys

Disable a custom role

Demonstrates disabling a custom role.

Python

View sample

Disable a service account

Demonstrates disabling a service account.

C# C++ Go Java Python

View sample

View in documentation

• Disable and enable service accounts

Disable a service account key

Demonstrates disabling an IAM service account key.

Java

View sample

Edit a custom role

Demonstrates editing a custom role.

C# C++ Go Java Python

View sample

View in documentation

• Create and manage custom roles

Enable a service account

Demonstrates enabling a service account.

C# C++ Go Java Python

View sample

View in documentation

• Disable and enable service accounts

Enable a service account key

Demonstrates enabling a disabled IAM service account key.

Java

View sample

Get a deny policy

Retrieve information about a deny policy.

Go Java Node.js Python

View sample

View in documentation

• Deny access to resources

Get a role

Demonstrates retrieving a role.

C# C++ Go Java Python

View sample

View in documentation

• Create and manage custom roles

Get a service account

Demonstrates retrieving a service account.

C++

View sample

Get a service account key

Demonstrates retrieving a service account key.

C++

View sample

Get an IAM policy

Demonstrates retrieving an IAM policy.

C# C++ Java Python

View sample

View in documentation

• Manage access to projects, folders, and organizations

List deny policies

List the deny policies in the resource provided.

Go Java Node.js Python

View sample

View in documentation

• Deny access to resources

List roles

Demonstrates listing roles.

C# C++ Go Java Python

View sample

View in documentation

• Create and manage custom roles

List service account keys

Demonstrates listing service account keys.

C# C++ Go Java Python

View sample

View in documentation

• List and get service account keys

List service accounts

Demonstrates listing service accounts.

C# C++ Go Java Python

View sample

View in documentation

• List and edit service accounts

Query testable permissions

Demonstrates listing the permissions that are valid for a resource.

C# C++ Go Java Python

View sample

View in documentation

• Create and manage custom roles

Quickstart

Demonstrates basic usage of IAM.

C# C++ Go Java Python

View sample

View in documentation

• Grant roles using client libraries

Remove a member from a role binding

Demonstrates removing a member from a role binding in an IAM policy.

C# Go Java Python

View sample

View in documentation

• Manage access to projects, folders, and organizations

Rename a service account

Demonstrates renaming a service account.

C# C++ Go Java Python

View sample

View in documentation

• List and edit service accounts

Restore a deleted custom role

Demonstrates restoring a custom role.

C# C++ Go Java Python

View sample

View in documentation

• Create and manage custom roles

Test permissions

Demonstrates testing whether the caller has specified permissions.

C# C++ Java Python

View sample

View in documentation

• Test permissions for custom user interfaces

Update a deny policy

Update the deny rules and/ or its display name after policy creation.

Go Java Node.js Python

View sample

View in documentation

• Deny access to resources

Update a policy

Demonstrates updating a policy.

C# C++ Java Python

View sample

View in documentation

• Manage access to projects, folders, and organizations

View grantable roles

Demonstrates viewing the roles that you can grant on a specific resource.

C# C++ Go Java Python

View sample

View in documentation

• Viewing the grantable roles on resources