---
title: "POST /v1/{+resource}:testIamPermissions"
method: POST
path: "/v1/{+resource}:testIamPermissions"
tags: ["projects"]
---

# POST /v1/{+resource}:testIamPermissions

`POST /v1/{+resource}:testIamPermissions`

Returns permissions that a caller has on the specified resource. If the resource does not exist, this will return an empty set of permissions, not a `NOT_FOUND` error. Note: This operation is designed to be used for building permission-aware UIs and command-line tools, not for authorization checking. This operation may "fail open" without warning.

## Path parameters

- `resource` string, required

## Request body

- TestIamPermissionsRequest — Request message for `TestIamPermissions` method.
  - `permissions` string[] — The set of permissions to check for the `resource`. Permissions with wildcards (such as `*` or `storage.*`) are not allowed. For more information see [IAM Overview](https://cloud.google.com/iam/docs/overview#permissions).

## Response `200`

Successful response

---

[API](https://skmtc.net/google/apis/cloudkms.md) · [All operations](https://skmtc.net/google/apis/cloudkms/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/google/cloudkms/versions/576b283e53dd/schema)