Method: dataAccessLabels.create

Full name: projects.locations.instances.dataAccessLabels.create

Creates a data access label. Data access labels are applied to incoming event data and selected in data access scopes (another resource), and only users with scopes containing the label can see data with that label. Currently, the data access label resource only includes custom labels, which are labels that correspond to UDM queries over event data.

HTTP request


Path parameters



Required. The parent resource where this Data Access Label will be created. Format: projects/{project}/locations/{location}/instances/{instance}

Query parameters



Required. The ID to use for the data access label, which will become the label's display name and the final component of the label's resource name. It must only contain ASCII lowercase letters, numbers, and dashes; it must begin with a letter, and it must not exceed 1000 characters.

Request body

The request body contains an instance of DataAccessLabel.

Response body

If successful, the response body contains a newly created instance of DataAccessLabel.

Authorization scopes

Requires the following OAuth scope:


For more information, see the Authentication Overview.

IAM Permissions

Requires the following IAM permission on the parent resource:

  • chronicle.dataAccessLabels.create

For more information, see the IAM documentation.