General reference documentation
-
Authenticate to IAM
Authenticate to IAM programmatically so that you can access the IAM API.
-
IAM REST API
Manage roles and permissions, and manage your service accounts and keys, with the REST API.
-
IAM RPC API
Manage roles and permissions, and manage your service accounts and keys, with the RPC API.
-
Privileged Access Manager REST API
Manage just-in-time temporary role grants with the REST API.
-
Privileged Access Manager RPC API
Manage just-in-time temporary role grants with the RPC API.
-
Security Token Service REST API
Exchange access tokens.
-
Service Account Credentials REST API
Create short-lived, limited-privilege credentials for service accounts.
-
Client libraries
Use a client library to integrate your application with IAM.
-
gcloud iam
commandsUse the
gcloud iam
commands to work with IAM from the command line. -
Resource types that accept allow policies
Learn which resource types accept allow policies.
-
Basic and predefined roles reference
View IAM basic roles, as well as a complete list of IAM predefined roles and the permissions they contain.
-
Permissions reference
View a complete list of IAM permissions and the roles that grant them.
-
Support levels for permissions in custom roles
Learn which IAM permissions you can use in custom roles.
-
Permissions supported in deny policies
Learn which IAM permissions you can use in deny policies.
-
Permissions supported for principal access boundary policies
Learn which IAM permissions are supported for each version of principal access boundary policies.
-
Service agents
Get details about the service accounts that Google Cloud services use to access your resources.
-
Full resource names
Understand the format that IAM uses to identify another service's resources.
-
Retry failed requests
Find out how to retry failed requests to the IAM API.
-
Principal identifiers
Understand the identifiers that you use when listing principals in allow policies and deny policies.
-
Identity federation: supported products and limitations
Lists Google Cloud products that work with workforce identity federation, and provides associated product limitations.
Conditions reference documentation
-
Attribute reference
Learn about attributes that you can use to conditionally grant or deny access.
-
Resource attribute value reference
Grant access to specific Google Cloud services, resource types, and resource names.
-
Resource types that accept conditional role bindings
Find out which resource types let you add conditional role bindings to their allow policies.
-
Identity federation: products and services
Learn about Google Cloud products and their level of support for identity federation.