List IAM Policies
Retrieves the policies of the specified kind that are attached to a resource. The response lists only policy metadata. In particular, policy rules are omitted.
External Documentation
To learn more, visit the GCP documentation.
Parameters
Parameter | Description |
---|---|
Parent ID | The ID of the parent resource to access. For organizations and folders, must be the numeric ID. For projects, can be the alphanumeric or numeric ID. All action responses contain the numeric ID. |
Parent Type | Which type of parent resource to access. |
Return All Pages | Automatically fetch all resources, page by page. |
Example Output
{
"nextPageToken": "A page token that you can use in a ListPoliciesRequest to retrieve the next page. If this field is omitted, there are no additional pages.",
"policies": [
{
"annotations": {},
"createTime": "Output only. The time when the `Policy` was created.",
"deleteTime": "Output only. The time when the `Policy` was deleted. Empty if the policy is not deleted.",
"displayName": "A user-specified description of the `Policy`. This value can be up to 63 characters.",
"etag": "An opaque tag that identifies the current version of the `Policy`. IAM uses this value to help manage concurrent updates, so they do not cause one update to be overwritten by another. If this field is present in a CreatePolicy request, the value is ignored.",
"kind": "Output only. The kind of the `Policy`. Always contains the value `DenyPolicy`.",
"name": "Immutable. The resource name of the `Policy`, which must be unique. Format: `policies/{attachment_point}/denypolicies/{policy_id}` The attachment point is identified by its URL-encoded full resource name, which means that the forward-slash character, `/`, must be written as `%2F`. For example, `policies/cloudresourcemanager.googleapis.com%2Fprojects%2Fmy-project/denypolicies/my-deny-policy`. For organizations and folders, use the numeric ID in the full resource name. For projects, requests can use the alphanumeric or the numeric ID. Responses always contain the numeric ID.",
"rules": [
{
"denyRule": {
"denialCondition": {
"description": "Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.",
"expression": "Textual representation of an expression in Common Expression Language syntax.",
"location": "Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.",
"title": "Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression."
},
"deniedPermissions": [
"string"
],
"deniedPrincipals": [
"string"
],
"exceptionPermissions": [
"string"
],
"exceptionPrincipals": [
"string"
]
},
"description": "A user-specified description of the rule. This value can be up to 256 characters."
}
],
"uid": "Immutable. The globally unique ID of the `Policy`. Assigned automatically when the `Policy` is created.",
"updateTime": "Output only. The time when the `Policy` was last updated."
}
]
}
Workflow Library Example
List Iam Policies with Gcp and Send Results Via Email