Data Catalog API methods that are related to Data Catalog search and metadata are deprecated and will be discontinued on January 30, 2026. See Transition from Data Catalog to Dataplex Universal Catalog. Methods that are related to policy tags and policy tag taxonomies are not deprecated.
Returns an empty set of permissions if the resource doesn't exist.
Supported resources are:
Tag templates
Entry groups
Note: This method gets policies only within Data Catalog and can't be used to get policies from BigQuery, Pub/Sub, Dataproc Metastore, and any external Google Cloud Platform resources ingested into Data Catalog.
No Google IAM permissions are required to call this method.
HTTP request
POST https://datacatalog.googleapis.com/v1/{resource}:testIamPermissions
Path parameters
Parameters
resource
string
REQUIRED: The resource for which the policy detail is being requested. See Resource names for the appropriate value for this field. It takes the form projects/{project}/locations/{location}/entryGroups/{entrygroup}/entries/{entries}.
Request body
The request body contains data with the following structure:
JSON representation
{"permissions": [string]}
Fields
permissions[]
string
The set of permissions to check for the resource. Permissions with wildcards (such as * or storage.*) are not allowed. For more information see IAM Overview.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-07-17 UTC."],[[["\u003cp\u003eThis endpoint retrieves a user's permissions for a specific resource within the Data Catalog.\u003c/p\u003e\n"],["\u003cp\u003eThe supported resources for permission checks are limited to Tag templates and Entry groups, excluding other external Google Cloud Platform resources.\u003c/p\u003e\n"],["\u003cp\u003eThe request must specify the target resource using the designated format \u003ccode\u003eprojects/{project}/locations/{location}/entryGroups/{entrygroup}/entries/{entries}\u003c/code\u003e within the URL's path parameters.\u003c/p\u003e\n"],["\u003cp\u003eThe request body must include a list of permissions, without wildcards, to be checked against the specified resource.\u003c/p\u003e\n"],["\u003cp\u003eThe necessary authorization scope for this request is \u003ccode\u003ehttps://www.googleapis.com/auth/cloud-platform\u003c/code\u003e.\u003c/p\u003e\n"]]],[],null,["# Method: projects.locations.entryGroups.entries.testIamPermissions\n\n- [HTTP request](#body.HTTP_TEMPLATE)\n- [Path parameters](#body.PATH_PARAMETERS)\n- [Request body](#body.request_body)\n - [JSON representation](#body.request_body.SCHEMA_REPRESENTATION)\n- [Response body](#body.response_body)\n- [Authorization scopes](#body.aspect)\n- [Try it!](#try-it)\n\n| Data Catalog is deprecated. Please use Dataplex Universal Catalog instead.\nGets your permissions on a resource.\n\nReturns an empty set of permissions if the resource doesn't exist.\n\nSupported resources are:\n\n- Tag templates\n- Entry groups\n\nNote: This method gets policies only within Data Catalog and can't be used to get policies from BigQuery, Pub/Sub, Dataproc Metastore, and any external Google Cloud Platform resources ingested into Data Catalog.\n\nNo Google IAM permissions are required to call this method.\n\n### HTTP request\n\n`POST https://datacatalog.googleapis.com/v1/{resource}:testIamPermissions`\n\n### Path parameters\n\n### Request body\n\nThe request body contains data with the following structure:\n\n### Response body\n\nIf successful, the response body contains an instance of [TestIamPermissionsResponse](/data-catalog/docs/reference/rest/Shared.Types/TestIamPermissionsResponse).\n\n### Authorization scopes\n\nRequires the following OAuth scope:\n\n- `https://www.googleapis.com/auth/cloud-platform`\n\nFor more information, see the [Authentication Overview](/docs/authentication#authorization-gcp)."]]
