Information about the principal, resource, and permission to
Required. The principal whose access you want to check, in
the form of the email address that represents that
principal. For example, firstname.lastname@example.org or
The principal must be a Google Account or a service account.
Other types of principals are not supported.
Required. The full resource name that identifies the
resource. For example,
For examples of full resource names for Google Cloud
Required. The IAM permission to check for the
specified principal and resource.
For a complete list of IAM permissions, see
For a complete list of predefined IAM roles and
the permissions in each role, see