---
title: "POST /v3/liens"
method: POST
path: "/v3/liens"
tags: ["liens"]
---

# POST /v3/liens

`POST /v3/liens`

Create a Lien which applies to the resource denoted by the `parent` field. Callers of this method will require permission on the `parent` resource. For example, applying to `projects/1234` requires permission `resourcemanager.projects.updateLiens`. NOTE: Some resources may limit the number of Liens which may be applied.

## Request body

- Lien — A Lien represents an encumbrance on the actions that can be performed on a resource.
  - `origin` string — A stable, user-visible/meaningful string identifying the origin of the Lien, intended to be inspected programmatically. Maximum length of 200 characters. Example: 'compute.googleapis.com'
  - `parent` string — A reference to the resource this Lien is attached to. The server will validate the parent against those for which Liens are supported. Example: `projects/1234`
  - `name` string — A system-generated unique identifier for this Lien. Example: `liens/1234abcd`
  - `createTime` string, google-datetime — The creation time of this Lien.
  - `restrictions` string[] — The types of operations which should be blocked as a result of this Lien. Each value should correspond to an IAM permission. The server will validate the permissions against those for which Liens are supported. An empty list is meaningless and will be rejected. Example: ['resourcemanager.projects.delete']
  - `reason` string — Concise user-visible strings indicating why an action cannot be performed on a resource. Maximum length of 200 characters. Example: 'Holds production API key'

## Response `200`

Successful response

---

[API](https://skmtc.dev/google/apis/cloudresourcemanager.md) · [All operations](https://skmtc.dev/google/apis/cloudresourcemanager/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/google/cloudresourcemanager/revisions/3d76e8caf96a/schema)
