IAM Policy Troubleshooter API: makes it easier to understand why a user has access to a resource or doesn't have permission to call an API. Given an email, resource, and permission, Policy Troubleshooter examines all Identity and Access Management (IAM) policies that apply to the resource. It then reveals whether the member's roles include the permission on that resource and, if so, which policies bind the member to those roles.

• Client Library Documentation
• Product Documentation

In order to use this library, you first need to go through the following steps:

1. Select or create a Cloud Platform project.
2. Enable billing for your project.
3. Enable the IAM Policy Troubleshooter API.
4. Setup Authentication.

Install this library in a virtual environment using venv. venv is a tool that creates isolated Python environments. These isolated environments can have separate versions of Python packages, which allows you to isolate one project's dependencies from the dependencies of other projects.

With venv, it's possible to install this library without needing system install permissions, and without clashing with the installed system dependencies.

Code samples and snippets live in the samples/ folder.

Our client libraries are compatible with all current active and maintenance versions of Python.

Python >= 3.7

Python <= 3.6

If you are using an end-of-life version of Python, we recommend that you update as soon as possible to an actively supported version.

python3 -m venv <your-env>
source <your-env>/bin/activate
pip install google-cloud-policy-troubleshooter

py -m venv <your-env>
.\<your-env>\Scripts\activate
pip install google-cloud-policy-troubleshooter

• Read the Client Library Documentation for IAM Policy Troubleshooter API to see other available methods on the client.
• Read the IAM Policy Troubleshooter API Product documentation to learn more about the product and see How-to Guides.
• View this README to see the full list of Cloud APIs that we cover.