---
title: "GET /v3/liens/{liensId}"
method: GET
path: "/v3/liens/{liensId}"
tags: ["liens"]
---

# GET /v3/liens/{liensId}

`GET /v3/liens/{liensId}`

## Request

- Base URL: `https://cloudresourcemanager.googleapis.com`
- URL: `https://cloudresourcemanager.googleapis.com/v3/liens/{liensId}`
- Auth: one of:
  - OAuth 2 and OAuth 2
    - Implicit: `https://accounts.google.com/o/oauth2/auth`
    - Scopes: `https://www.googleapis.com/auth/cloud-platform`
    - Authorization code: `https://accounts.google.com/o/oauth2/auth`
    - Token URL: `https://accounts.google.com/o/oauth2/token` scopes: `https://www.googleapis.com/auth/cloud-platform`
  - OAuth 2 and OAuth 2
    - Implicit: `https://accounts.google.com/o/oauth2/auth`
    - Scopes: `https://www.googleapis.com/auth/cloud-platform.read-only`
    - Authorization code: `https://accounts.google.com/o/oauth2/auth`
    - Token URL: `https://accounts.google.com/o/oauth2/token` scopes: `https://www.googleapis.com/auth/cloud-platform.read-only`

Retrieve a Lien by `name`. Callers of this method will require permission on the `parent` resource. For example, a Lien with a `parent` of `projects/1234` requires permission `resourcemanager.projects.get`

## Path parameters

- `liensId` string, required

## Response `200`

Successful response

- Lien: A Lien represents an encumbrance on the actions that can be performed on a resource.
  - `createTime` string, google-datetime: The creation time of this Lien.
  - `name` string: A system-generated unique identifier for this Lien. Example: `liens/1234abcd`
  - `origin` string: A stable, user-visible/meaningful string identifying the origin of the Lien, intended to be inspected programmatically. Maximum length of 200 characters. Example: 'compute.googleapis.com'
  - `parent` string: A reference to the resource this Lien is attached to. The server will validate the parent against those for which Liens are supported. Example: `projects/1234`
  - `reason` string: Concise user-visible strings indicating why an action cannot be performed on a resource. Maximum length of 200 characters. Example: 'Holds production API key'
  - `restrictions` string[]: The types of operations which should be blocked as a result of this Lien. Each value should correspond to an IAM permission. The server will validate the permissions against those for which Liens are supported. An empty list is meaningless and will be rejected. Example: ['resourcemanager.projects.delete']

## Changes

- **2026-11-03** `9e107eeb58df`: 4 info
  - the security scope `https://www.googleapis.com/auth/cloud-platform` was added to the endpoint's security scheme `Oauth2`
  - the security scope `https://www.googleapis.com/auth/cloud-platform` was added to the endpoint's security scheme `Oauth2c`
  - the security scope `https://www.googleapis.com/auth/cloud-platform.read-only` was removed from the endpoint's security scheme `Oauth2`
  - the security scope `https://www.googleapis.com/auth/cloud-platform.read-only` was removed from the endpoint's security scheme `Oauth2c`

[Operation history](https://skmtc.dev/google/apis/cloudresourcemanager/changes/v3/liens/:liensId/get.md)

---

[API](https://skmtc.dev/google/apis/cloudresourcemanager.md) - [All operations](https://skmtc.dev/google/apis/cloudresourcemanager/llms.txt) - [OpenAPI document](https://skmtc.dev/google/apis/cloudresourcemanager/revisions/9e107eeb58df?raw)