Data Catalog API methods that are related to Data Catalog search and metadata are deprecated and will be discontinued on January 30, 2026. See Transition from Data Catalog to Dataplex Universal Catalog. Methods that are related to policy tags and policy tag taxonomies are not deprecated.
Returns an empty set of permissions if the resource doesn't exist.
Supported resources are:
Tag templates
Entry groups
Note: This method gets policies only within Data Catalog and can't be used to get policies from BigQuery, Pub/Sub, Dataproc Metastore, and any external Google Cloud Platform resources ingested into Data Catalog.
No Google IAM permissions are required to call this method.
HTTP request
POST https://datacatalog.googleapis.com/v1/{resource}:testIamPermissions
Path parameters
Parameters
resource
string
REQUIRED: The resource for which the policy detail is being requested. See Resource names for the appropriate value for this field. It takes the form projects/{project}/locations/{location}/entryGroups/{entrygroup}/entries/{entries}.
Request body
The request body contains data with the following structure:
JSON representation
{"permissions": [string]}
Fields
permissions[]
string
The set of permissions to check for the resource. Permissions with wildcards (such as * or storage.*) are not allowed. For more information see IAM Overview.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-07-17 UTC."],[[["This endpoint retrieves a user's permissions for a specific resource within the Data Catalog."],["The supported resources for permission checks are limited to Tag templates and Entry groups, excluding other external Google Cloud Platform resources."],["The request must specify the target resource using the designated format `projects/{project}/locations/{location}/entryGroups/{entrygroup}/entries/{entries}` within the URL's path parameters."],["The request body must include a list of permissions, without wildcards, to be checked against the specified resource."],["The necessary authorization scope for this request is `https://www.googleapis.com/auth/cloud-platform`."]]],[]]
