---
title: "GET /v1/{+scope}:analyzeIamPolicy"
method: GET
path: "/v1/{+scope}:analyzeIamPolicy"
tags: ["v1"]
---

# GET /v1/{+scope}:analyzeIamPolicy

`GET /v1/{+scope}:analyzeIamPolicy`

Analyzes IAM policies to answer which identities have what accesses on which resources.

## Path parameters

- `scope` string, required

## Query parameters

- `analysisQuery.accessSelector.permissions` string[]
- `analysisQuery.accessSelector.roles` string[]
- `analysisQuery.conditionContext.accessTime` string
- `analysisQuery.identitySelector.identity` string
- `analysisQuery.options.analyzeServiceAccountImpersonation` boolean
- `analysisQuery.options.expandGroups` boolean
- `analysisQuery.options.expandResources` boolean
- `analysisQuery.options.expandRoles` boolean
- `analysisQuery.options.outputGroupEdges` boolean
- `analysisQuery.options.outputResourceEdges` boolean
- `analysisQuery.resourceSelector.fullResourceName` string
- `executionTimeout` string
- `savedAnalysisQuery` string

## Response `200`

Successful response

---

[API](https://skmtc.net/google/apis/cloudasset.md) · [All operations](https://skmtc.net/google/apis/cloudasset/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/google/cloudasset/versions/c4d87ba24bda/schema)