---
title: "POST /v3/projects/{projectsId}:testIamPermissions"
method: POST
path: "/v3/projects/{projectsId}:testIamPermissions"
tags: ["projects"]
---

# POST /v3/projects/{projectsId}:testIamPermissions

`POST /v3/projects/{projectsId}:testIamPermissions`

## Request

- Base URL: `https://cloudresourcemanager.googleapis.com`
- URL: `https://cloudresourcemanager.googleapis.com/v3/projects/{projectsId}:testIamPermissions`
- Auth: one of:
  - OAuth 2 and OAuth 2
    - Implicit: `https://accounts.google.com/o/oauth2/auth`
    - Scopes: `https://www.googleapis.com/auth/cloud-platform`
    - Authorization code: `https://accounts.google.com/o/oauth2/auth`
    - Token URL: `https://accounts.google.com/o/oauth2/token` scopes: `https://www.googleapis.com/auth/cloud-platform`
  - OAuth 2 and OAuth 2
    - Implicit: `https://accounts.google.com/o/oauth2/auth`
    - Scopes: `https://www.googleapis.com/auth/cloud-platform.read-only`
    - Authorization code: `https://accounts.google.com/o/oauth2/auth`
    - Token URL: `https://accounts.google.com/o/oauth2/token` scopes: `https://www.googleapis.com/auth/cloud-platform.read-only`

Returns permissions that a caller has on the specified project, in the format `projects/{ProjectIdOrNumber}` e.g. projects/123..

## Path parameters

- `projectsId` string, required

## Request body

- TestIamPermissionsRequest: Request message for `TestIamPermissions` method.
  - `permissions` string[]: The set of permissions to check for the `resource`. Permissions with wildcards (such as `*` or `storage.*`) are not allowed. For more information see [IAM Overview](https://cloud.google.com/iam/docs/overview#permissions).

## Response `200`

Successful response

- TestIamPermissionsResponse: Response message for `TestIamPermissions` method.
  - `permissions` string[]: A subset of `TestPermissionsRequest.permissions` that the caller is allowed.

## Changes

- **2026-11-03** `9e107eeb58df`: 4 info
  - the security scope `https://www.googleapis.com/auth/cloud-platform` was added to the endpoint's security scheme `Oauth2`
  - the security scope `https://www.googleapis.com/auth/cloud-platform` was added to the endpoint's security scheme `Oauth2c`
  - the security scope `https://www.googleapis.com/auth/cloud-platform.read-only` was removed from the endpoint's security scheme `Oauth2`
  - the security scope `https://www.googleapis.com/auth/cloud-platform.read-only` was removed from the endpoint's security scheme `Oauth2c`

[Operation history](https://skmtc.dev/google/apis/cloudresourcemanager/changes/v3/projects/:projectsId:testIamPermissions/post.md)

---

[API](https://skmtc.dev/google/apis/cloudresourcemanager.md) - [All operations](https://skmtc.dev/google/apis/cloudresourcemanager/llms.txt) - [OpenAPI document](https://skmtc.dev/google/apis/cloudresourcemanager/revisions/9e107eeb58df?raw)