Stay organized with collections
Save and categorize content based on your preferences.
Search transitive groups of a member.
Note: This feature is only available to Google Workspace Enterprise Standard, Enterprise Plus, and Enterprise for Education; and Cloud Identity Premium accounts.
A transitive group is any group that has a direct or indirect membership to the member. Actor must have view permissions all transitive groups.
HTTP request
GET https://cloudidentity.googleapis.com/v1beta1/{parent=groups/*}/memberships:searchTransitiveGroups
Resource name of the group to search transitive memberships in.
Format: groups/{group_id}, where group_id is always '-' as this API will search across all groups for a given member.
Query parameters
Parameters
query
string
Required. A CEL expression that MUST include member specification AND label(s). This is a required field.
Users can search on label attributes of groups. CONTAINS match ('in') is supported on labels. Identity-mapped groups are uniquely identified by both a member_key_id and a member_key_namespace, which requires an additional query input: member_key_namespace.
Example query: member_key_id == 'member_key_id_value' && <label_value> in
labels
Query may optionally contain equality operators on the parent of the group restricting the search within a particular customer, e.g. parent ==
'customers/{customer_id}'. The customer_id must begin with "C" (for example, 'C046psxkn'). This filtering is only supported for Admins with groups read permissions on the input customer.
Example query: member_key_id == 'member_key_id_value'
&& <label_value> in labels && parent == 'customers/C046psxkn'
pageSize
integer
The default page size is 200 (max 1000).
pageToken
string
The next_page_token value returned from a previous list request, if any.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-06 UTC."],[[["\u003cp\u003eThis feature allows searching for transitive groups, which are groups with direct or indirect membership to a specified member, but is only available for Google Workspace Enterprise Standard, Enterprise Plus, and Enterprise for Education, and Cloud Identity Premium accounts.\u003c/p\u003e\n"],["\u003cp\u003eThe HTTP request to search transitive groups uses a GET method and requires a \u003ccode\u003eparent\u003c/code\u003e path parameter in the format \u003ccode\u003egroups/{group_id}\u003c/code\u003e, where \u003ccode\u003egroup_id\u003c/code\u003e is always '-' to search across all groups for a given member.\u003c/p\u003e\n"],["\u003cp\u003eThe required \u003ccode\u003equery\u003c/code\u003e parameter is a CEL expression that must include a member specification, label(s), and can optionally include a parent filter to search within a specific customer by using the customer id.\u003c/p\u003e\n"],["\u003cp\u003eThe response to a successful search includes a list of \u003ccode\u003ememberships\u003c/code\u003e (transitive groups) satisfying the query, along with a \u003ccode\u003enextPageToken\u003c/code\u003e for retrieving additional pages of results if applicable.\u003c/p\u003e\n"],["\u003cp\u003eAuthorization for this feature requires specific OAuth scopes, such as \u003ccode\u003ehttps://www.googleapis.com/auth/cloud-identity.groups.readonly\u003c/code\u003e, and others, allowing different levels of access to group data.\u003c/p\u003e\n"]]],[],null,["# Method: groups.memberships.searchTransitiveGroups\n\nSearch transitive groups of a member.\n\n**Note:** This feature is only available to Google Workspace Enterprise Standard, Enterprise Plus, and Enterprise for Education; and Cloud Identity Premium accounts.\n\nA transitive group is any group that has a direct or indirect membership to the member. Actor must have view permissions all transitive groups.\n\n### HTTP request\n\n`GET https://cloudidentity.googleapis.com/v1beta1/{parent=groups/*}/memberships:searchTransitiveGroups`\n\nThe URL uses [gRPC Transcoding](https://google.aip.dev/127) syntax.\n\n### Path parameters\n\n### Query parameters\n\n### Request body\n\nThe request body must be empty.\n\n### Response body\n\nThe response message for [MembershipsService.SearchTransitiveGroups](/identity/docs/reference/rest/v1beta1/groups.memberships/searchTransitiveGroups#google.apps.cloudidentity.groups.v1beta1.MembershipsService.SearchTransitiveGroups).\n\nIf successful, the response body contains data with the following structure:\n\n### Authorization scopes\n\nRequires one of the following OAuth scopes:\n\n- `https://www.googleapis.com/auth/cloud-identity.groups.readonly`\n- `https://www.googleapis.com/auth/cloud-identity.groups`\n- `https://www.googleapis.com/auth/cloud-identity`\n- `https://www.googleapis.com/auth/cloud-platform`\n\nFor more information, see the [Authorization guide](/workspace/guides/configure-oauth-consent).\n\nGroupRelation\n-------------\n\nMessage representing a transitive group of a user or a group."]]