---
title: "Get network group IAM"
method: GET
path: "/api/v2/network-group/{id}/iam"
tags: ["network-group"]
---

# Get network group IAM

`GET /api/v2/network-group/{id}/iam`

## Request

- Base URL: `https://central.zerotier.com`
- URL: `https://central.zerotier.com/api/v2/network-group/{id}/iam`
- Auth: HTTP bearer

Retrieve all IAM role assignments for this network group.

## Path parameters

- `id` string, required

## Response `200`

IAM role assignments for the network group

- IamTuple[]: All IAM role assignments on a resource
  - `principal` string, required: Identifier of the principal (email for users and service accounts)
  - `principalType` 'user' | 'service_account', required: The kind of principal that holds these roles
  - `roles` IamRole[], required: Roles currently assigned to the principal on this resource

## Other responses

- `401`: Missing or invalid authentication token
- `403`: Insufficient permissions
- `500`: Internal server error

---

[API](https://skmtc.dev/zerotier/apis/zerotier-central-v2-api.md) - [All operations](https://skmtc.dev/zerotier/apis/zerotier-central-v2-api/llms.txt) - [OpenAPI document](https://skmtc.dev/zerotier/apis/zerotier-central-v2-api/revisions/b2e7468ad104?raw)