English
Deutsch
Español – América Latina
Français
Indonesia
Italiano
Português – Brasil
中文 – 简体
日本語
한국어

Contact Us Start free

APIs and reference

General reference documentation

Authenticate to IAM

Authenticate to IAM programmatically so that you can access the IAM API.
IAM REST API

Manage roles and permissions, and manage your service accounts and keys, with the REST API.
IAM RPC API

Manage roles and permissions, and manage your service accounts and keys, with the RPC API.
Privileged Access Manager REST API

Manage just-in-time temporary role grants with the REST API.
Privileged Access Manager RPC API

Manage just-in-time temporary role grants with the RPC API.
Security Token Service REST API

Exchange access tokens.
Service Account Credentials REST API

Create short-lived, limited-privilege credentials for service accounts.
Client libraries

Use a client library to integrate your application with IAM.
gcloud iam commands

Use the gcloud iam commands to work with IAM from the command line.
Resource types that accept allow policies

Learn which resource types accept allow policies.
Basic and predefined roles reference

View IAM basic roles, as well as a complete list of IAM predefined roles and the permissions they contain.
Permissions reference

View a complete list of IAM permissions and the roles that grant them.
Support levels for permissions in custom roles

Learn which IAM permissions you can use in custom roles.
Permissions supported in deny policies

Learn which IAM permissions you can use in deny policies.
Permissions supported for principal access boundary policies

Learn which IAM permissions are supported for each version of principal access boundary policies.
Service agents

Get details about the service accounts that Google Cloud services use to access your resources.
Full resource names

Understand the format that IAM uses to identify another service's resources.
Retry failed requests

Find out how to retry failed requests to the IAM API.
Principal identifiers

Understand the identifiers that you use when listing principals in allow policies and deny policies.
Identity federation: supported products and limitations

Lists Google Cloud products that work with workforce identity federation, and provides associated product limitations.

Conditions reference documentation

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.