---
title: "POST /v1/projects/{projectsId}/locations/{locationsId}/folders/{foldersId}:testIamPermissions"
method: POST
path: "/v1/projects/{projectsId}/locations/{locationsId}/folders/{foldersId}:testIamPermissions"
tags: ["projects"]
---

# POST /v1/projects/{projectsId}/locations/{locationsId}/folders/{foldersId}:testIamPermissions

`POST /v1/projects/{projectsId}/locations/{locationsId}/folders/{foldersId}:testIamPermissions`

## Request

- Base URL: `https://dataform.googleapis.com`
- URL: `https://dataform.googleapis.com/v1/projects/{projectsId}/locations/{locationsId}/folders/{foldersId}:testIamPermissions`
- Auth: one of:
  - OAuth 2 and OAuth 2
    - Implicit: `https://accounts.google.com/o/oauth2/auth`
    - Scopes: `https://www.googleapis.com/auth/bigquery`
    - Authorization code: `https://accounts.google.com/o/oauth2/auth`
    - Token URL: `https://accounts.google.com/o/oauth2/token` scopes: `https://www.googleapis.com/auth/bigquery`
  - OAuth 2 and OAuth 2
    - Implicit: `https://accounts.google.com/o/oauth2/auth`
    - Scopes: `https://www.googleapis.com/auth/cloud-platform`
    - Authorization code: `https://accounts.google.com/o/oauth2/auth`
    - Token URL: `https://accounts.google.com/o/oauth2/token` scopes: `https://www.googleapis.com/auth/cloud-platform`

Returns permissions that a caller has on the specified resource. If the resource does not exist, this will return an empty set of permissions, not a `NOT_FOUND` error. Note: This operation is designed to be used for building permission-aware UIs and command-line tools, not for authorization checking. This operation may "fail open" without warning.

## Path parameters

- `projectsId` string, required
- `locationsId` string, required
- `foldersId` string, required

## Request body

- TestIamPermissionsRequest: Request message for `TestIamPermissions` method.
  - `permissions` string[]: The set of permissions to check for the `resource`. Permissions with wildcards (such as `*` or `storage.*`) are not allowed. For more information see [IAM Overview](https://cloud.google.com/iam/docs/overview#permissions).

## Response `200`

Successful response

- TestIamPermissionsResponse: Response message for `TestIamPermissions` method.
  - `permissions` string[]: A subset of `TestPermissionsRequest.permissions` that the caller is allowed.

## Changes

- **2026-11-03** `aa7c2fe4d752`: 4 info
  - the security scope `https://www.googleapis.com/auth/bigquery` was added to the endpoint's security scheme `Oauth2`
  - the security scope `https://www.googleapis.com/auth/bigquery` was added to the endpoint's security scheme `Oauth2c`
  - the security scope `https://www.googleapis.com/auth/cloud-platform` was removed from the endpoint's security scheme `Oauth2`
  - the security scope `https://www.googleapis.com/auth/cloud-platform` was removed from the endpoint's security scheme `Oauth2c`

[Operation history](https://skmtc.dev/google/apis/dataform/changes/v1/projects/:projectsId/locations/:locationsId/folders/:foldersId:testIamPermissions/post.md)

---

[API](https://skmtc.dev/google/apis/dataform.md) - [All operations](https://skmtc.dev/google/apis/dataform/llms.txt) - [OpenAPI document](https://skmtc.dev/google/apis/dataform/revisions/aa7c2fe4d752?raw)