---
title: "POST /v1/{+resource}:testIamPermissions"
method: POST
path: "/v1/{+resource}:testIamPermissions"
tags: ["projects"]
---

# POST /v1/{+resource}:testIamPermissions

`POST /v1/{+resource}:testIamPermissions`

Returns the permissions that a caller has on the specified note or occurrence. Requires list permission on the project (for example, `containeranalysis.notes.list`). The resource takes the format `projects/[PROJECT_ID]/notes/[NOTE_ID]` for notes and `projects/[PROJECT_ID]/occurrences/[OCCURRENCE_ID]` for occurrences.

## Path parameters

- `resource` string, required

## Request body

- TestIamPermissionsRequest — Request message for `TestIamPermissions` method.
  - `permissions` string[] — The set of permissions to check for the `resource`. Permissions with wildcards (such as `*` or `storage.*`) are not allowed. For more information see [IAM Overview](https://cloud.google.com/iam/docs/overview#permissions).

## Response `200`

Successful response

---

[API](https://skmtc.dev/google/apis/containeranalysis.md) · [All operations](https://skmtc.dev/google/apis/containeranalysis/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/google/containeranalysis/revisions/024ed008c491/schema)