---
title: "POST /v1/projects/{projectsId}/regions/{regionsId}/clusters/{clustersId}:testIamPermissions"
method: POST
path: "/v1/projects/{projectsId}/regions/{regionsId}/clusters/{clustersId}:testIamPermissions"
tags: ["projects"]
---

# POST /v1/projects/{projectsId}/regions/{regionsId}/clusters/{clustersId}:testIamPermissions

`POST /v1/projects/{projectsId}/regions/{regionsId}/clusters/{clustersId}:testIamPermissions`

## Request

- Base URL: `https://dataproc.googleapis.com`
- URL: `https://dataproc.googleapis.com/v1/projects/{projectsId}/regions/{regionsId}/clusters/{clustersId}:testIamPermissions`
- Auth: one of:
  - OAuth 2 and OAuth 2
    - Implicit: `https://accounts.google.com/o/oauth2/auth`
    - Scopes: `https://www.googleapis.com/auth/cloud-platform`
    - Authorization code: `https://accounts.google.com/o/oauth2/auth`
    - Token URL: `https://accounts.google.com/o/oauth2/token` scopes: `https://www.googleapis.com/auth/cloud-platform`
  - OAuth 2 and OAuth 2
    - Implicit: `https://accounts.google.com/o/oauth2/auth`
    - Scopes: `https://www.googleapis.com/auth/dataproc`
    - Authorization code: `https://accounts.google.com/o/oauth2/auth`
    - Token URL: `https://accounts.google.com/o/oauth2/token` scopes: `https://www.googleapis.com/auth/dataproc`
- TypeScript: <https://skmtc.dev/google/apis/dataproc/docs/v1/projects/:projectsId/regions/:regionsId/clusters/:clustersId:testIamPermissions/post.ts> (a function with typed inputs; its response is checked against the schema)

Returns permissions that a caller has on the specified resource. If the resource does not exist, this will return an empty set of permissions, not a NOT_FOUND error.Note: This operation is designed to be used for building permission-aware UIs and command-line tools, not for authorization checking. This operation may "fail open" without warning.

## Path parameters

- `projectsId` string, required
- `regionsId` string, required
- `clustersId` string, required

## Request body

- TestIamPermissionsRequest: Request message for TestIamPermissions method.
  - `permissions` string[]: The set of permissions to check for the resource. Permissions with wildcards (such as * or storage.*) are not allowed. For more information see IAM Overview (https://cloud.google.com/iam/docs/overview#permissions).

## Response `200`

Successful response

- TestIamPermissionsResponse: Response message for TestIamPermissions method.
  - `permissions` string[]: A subset of TestPermissionsRequest.permissions that the caller is allowed.

## Changes

- **2026-10-29** `99b75ef6e002`: 4 info
  - the security scope `https://www.googleapis.com/auth/cloud-platform` was added to the endpoint's security scheme `Oauth2`
  - the security scope `https://www.googleapis.com/auth/cloud-platform` was added to the endpoint's security scheme `Oauth2c`
  - the security scope `https://www.googleapis.com/auth/dataproc` was removed from the endpoint's security scheme `Oauth2`
  - the security scope `https://www.googleapis.com/auth/dataproc` was removed from the endpoint's security scheme `Oauth2c`

[Operation history](https://skmtc.dev/google/apis/dataproc/changes/v1/projects/:projectsId/regions/:regionsId/clusters/:clustersId:testIamPermissions/post.md)

---

[API](https://skmtc.dev/google/apis/dataproc.md) - [All operations](https://skmtc.dev/google/apis/dataproc/llms.txt) - [OpenAPI document](https://skmtc.dev/google/apis/dataproc/revisions/99b75ef6e002?raw)