Data Catalog API methods that are related to Data Catalog search and metadata are deprecated and will be discontinued on January 30, 2026. See Transition from Data Catalog to Dataplex Universal Catalog. Methods that are related to policy tags and policy tag taxonomies are not deprecated.
Returns an empty set of permissions if the resource doesn't exist.
Supported resources are:
Tag templates
Entry groups
Note: This method gets policies only within Data Catalog and can't be used to get policies from BigQuery, Pub/Sub, Dataproc Metastore, and any external Google Cloud Platform resources ingested into Data Catalog.
No Google IAM permissions are required to call this method.
HTTP request
POST https://datacatalog.googleapis.com/v1/{resource}:testIamPermissions
Path parameters
Parameters
resource
string
REQUIRED: The resource for which the policy detail is being requested. See Resource names for the appropriate value for this field. It takes the form projects/{project}/locations/{location}/entryGroups/{entrygroup}.
Request body
The request body contains data with the following structure:
JSON representation
{"permissions": [string]}
Fields
permissions[]
string
The set of permissions to check for the resource. Permissions with wildcards (such as * or storage.*) are not allowed. For more information see IAM Overview.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-07-17 UTC."],[[["\u003cp\u003eThis page details how to retrieve permissions for specific resources within the Data Catalog, such as tag templates and entry groups.\u003c/p\u003e\n"],["\u003cp\u003eThe HTTP request to get these permissions is a POST request to a specific endpoint with a defined structure.\u003c/p\u003e\n"],["\u003cp\u003eThe request requires a \u003ccode\u003eresource\u003c/code\u003e path parameter that indicates the target resource, following a defined naming format.\u003c/p\u003e\n"],["\u003cp\u003eThe request body is JSON-formatted, containing an array of \u003ccode\u003epermissions\u003c/code\u003e to be checked, with specific constraints.\u003c/p\u003e\n"],["\u003cp\u003eSuccessfully obtaining the permissions results in a response body that conforms to the \u003ccode\u003eTestIamPermissionsResponse\u003c/code\u003e format.\u003c/p\u003e\n"]]],[],null,["# Method: projects.locations.entryGroups.testIamPermissions\n\n- [HTTP request](#body.HTTP_TEMPLATE)\n- [Path parameters](#body.PATH_PARAMETERS)\n- [Request body](#body.request_body)\n - [JSON representation](#body.request_body.SCHEMA_REPRESENTATION)\n- [Response body](#body.response_body)\n- [Authorization scopes](#body.aspect)\n- [Try it!](#try-it)\n\n| Data Catalog is deprecated. Please use Dataplex Universal Catalog instead.\nGets your permissions on a resource.\n\nReturns an empty set of permissions if the resource doesn't exist.\n\nSupported resources are:\n\n- Tag templates\n- Entry groups\n\nNote: This method gets policies only within Data Catalog and can't be used to get policies from BigQuery, Pub/Sub, Dataproc Metastore, and any external Google Cloud Platform resources ingested into Data Catalog.\n\nNo Google IAM permissions are required to call this method.\n\n### HTTP request\n\n`POST https://datacatalog.googleapis.com/v1/{resource}:testIamPermissions`\n\n### Path parameters\n\n### Request body\n\nThe request body contains data with the following structure:\n\n### Response body\n\nIf successful, the response body contains an instance of [TestIamPermissionsResponse](/data-catalog/docs/reference/rest/Shared.Types/TestIamPermissionsResponse).\n\n### Authorization scopes\n\nRequires the following OAuth scope:\n\n- `https://www.googleapis.com/auth/cloud-platform`\n\nFor more information, see the [Authentication Overview](/docs/authentication#authorization-gcp)."]]
