Stay organized with collections
Save and categorize content based on your preferences.
Check a potential member for membership in a group.
Note: This feature is only available to Google Workspace Enterprise Standard, Enterprise Plus, and Enterprise for Education; and Cloud Identity Premium accounts.
A member has membership to a group as long as there is a single viewable transitive membership between the group and the member. The actor must have view permissions to at least one transitive membership between the member and group.
HTTP request
GET https://cloudidentity.googleapis.com/v1beta1/{parent=groups/*}/memberships:checkTransitiveMembership
Resource name of the group to check the transitive membership in.
Format: groups/{group_id}, where group_id is the unique id assigned to the Group to which the Membership belongs to.
Query parameters
Parameters
query
string
Required. A CEL expression that MUST include member specification. This is a required field.
Certain groups are uniquely identified by both a 'member_key_id' and a 'member_key_namespace', which requires an additional query input: 'member_key_namespace'.
Example query: member_key_id == 'member_key_id_value'
If successful, the response body contains data with the following structure:
JSON representation
{"hasMembership": boolean}
Fields
hasMembership
boolean
Response does not include the possible roles of a member since the behavior of this rpc is not all-or-nothing unlike the other rpcs. So, it may not be possible to list all the roles definitively, due to possible lack of authorization in some of the paths.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-06 UTC."],[[["\u003cp\u003eThis API allows you to check if a potential member has transitive membership in a specified group.\u003c/p\u003e\n"],["\u003cp\u003eThis feature is only available for Google Workspace Enterprise Standard, Enterprise Plus, and Enterprise for Education, as well as Cloud Identity Premium accounts.\u003c/p\u003e\n"],["\u003cp\u003eThe API uses a \u003ccode\u003eGET\u003c/code\u003e request with a specific URL structure, including a required query parameter for member specification via a CEL expression.\u003c/p\u003e\n"],["\u003cp\u003eA successful check returns a boolean value (\u003ccode\u003ehasMembership\u003c/code\u003e) indicating whether the member is part of the group, based on viewable transitive memberships.\u003c/p\u003e\n"],["\u003cp\u003eThe API requires specific OAuth scopes for authorization, including \u003ccode\u003ecloud-identity.groups.readonly\u003c/code\u003e and \u003ccode\u003ecloud-identity.groups\u003c/code\u003e.\u003c/p\u003e\n"]]],[],null,["# Method: groups.memberships.checkTransitiveMembership\n\nCheck a potential member for membership in a group.\n\n**Note:** This feature is only available to Google Workspace Enterprise Standard, Enterprise Plus, and Enterprise for Education; and Cloud Identity Premium accounts.\n\nA member has membership to a group as long as there is a single viewable transitive membership between the group and the member. The actor must have view permissions to at least one transitive membership between the member and group.\n\n### HTTP request\n\n`GET https://cloudidentity.googleapis.com/v1beta1/{parent=groups/*}/memberships:checkTransitiveMembership`\n\nThe URL uses [gRPC Transcoding](https://google.aip.dev/127) syntax.\n\n### Path parameters\n\n### Query parameters\n\n### Request body\n\nThe request body must be empty.\n\n### Response body\n\nThe response message for [MembershipsService.CheckTransitiveMembership](/identity/docs/reference/rest/v1beta1/groups.memberships/checkTransitiveMembership#google.apps.cloudidentity.groups.v1beta1.MembershipsService.CheckTransitiveMembership).\n\nIf successful, the response body contains data with the following structure:\n\n### Authorization scopes\n\nRequires one of the following OAuth scopes:\n\n- `https://www.googleapis.com/auth/cloud-identity.groups.readonly`\n- `https://www.googleapis.com/auth/cloud-identity.groups`\n- `https://www.googleapis.com/auth/cloud-identity`\n- `https://www.googleapis.com/auth/cloud-platform`\n\nFor more information, see the [Authorization guide](/workspace/guides/configure-oauth-consent)."]]
