## General API reference documentation - [### Authenticate to IAM Authenticate to IAM programmatically so that you can access the IAM API.](https://docs.cloud.google.com/iam/docs/authentication) - [### Retry failed requests Find out how to retry failed requests to the IAM API.](https://docs.cloud.google.com/iam/docs/retry-strategy) - [### Client libraries Use a client library to integrate your application with IAM.](https://docs.cloud.google.com/iam/docs/reference/libraries) - [### `gcloud iam` commands Use the `gcloud iam` commands to work with IAM from the command line.](https://docs.cloud.google.com/sdk/gcloud/reference/iam) ## REST API reference documentation - [### IAM REST API Manage roles and permissions, and manage your service accounts and keys, with the REST API.](https://docs.cloud.google.com/iam/docs/reference/rest) - [### Privileged Access Manager REST API Manage just-in-time temporary role grants with the REST API.](https://docs.cloud.google.com/iam/docs/reference/pam/rest) - [### Security Token Service REST API Exchange access tokens.](https://docs.cloud.google.com/iam/docs/reference/sts/rest) - [### Service Account Credentials REST API Create short-lived, limited-privilege credentials for service accounts.](https://docs.cloud.google.com/iam/docs/reference/credentials/rest) - [### Workload Identity API REST API Trigger service agent creation.](https://docs.cloud.google.com/iam/docs/reference/workloadidentity/rest) - [### Agent Identity Credentials REST API Retrieve and finalize authorization credentials for auth providers.](https://docs.cloud.google.com/iam/docs/reference/agentidentitycredentials/rest) - [### Agent Identity REST API Manage auth providers for Agent Identity.](https://docs.cloud.google.com/iam/docs/reference/agentidentity/rest) - [### Cloud OAuth REST API (Preview) Exchange credentials for short-lived access tokens, revoke tokens, and manage OAuth configurations.](https://docs.cloud.google.com/iam/docs/reference/cloudoauth/rest) ## RPC API reference documentation - [### IAM RPC API Manage roles and permissions, and manage your service accounts and keys, with the RPC API.](https://docs.cloud.google.com/iam/docs/reference/rpc) - [### Privileged Access Manager RPC API Manage just-in-time temporary role grants with the RPC API.](https://docs.cloud.google.com/iam/docs/reference/pam/rpc) ## MCP reference documentation - [### IAM MCP tools Learn about the MCP tools that you can use to inspect and manage IAM policy configurations across your Google Cloud resources.](https://docs.cloud.google.com/iam/docs/reference/mcp) ## IAM Conditions reference documentation - [### Conditions attribute reference Learn about attributes that you can use to conditionally grant or deny access.](https://docs.cloud.google.com/iam/docs/conditions-attribute-reference) - [### Conditions resource attribute value reference Grant access to specific Google Cloud services, resource types, and resource names.](https://docs.cloud.google.com/iam/docs/conditions-resource-attributes) - [### Services that allow conditional role bindings Find out which resource types let you add conditional role bindings to their allow policies.](https://docs.cloud.google.com/iam/docs/resource-types-with-conditional-roles) ## Conditions reference documentation - [### Conditions attribute reference Learn about attributes that you can use to conditionally grant or deny access.](https://docs.cloud.google.com/iam/docs/conditions-attribute-reference) - [### Conditions resource attribute value reference Grant access to specific Google Cloud services, resource types, and resource names.](https://docs.cloud.google.com/iam/docs/conditions-resource-attributes) - [### Services that allow conditional role bindings Find out which resource types let you add conditional role bindings to their allow policies.](https://docs.cloud.google.com/iam/docs/resource-types-with-conditional-roles) ## Roles and permissions reference documentation - [### Roles and permissions index Filter and browse the available IAM roles and permissions for all Google Cloud services.](https://docs.cloud.google.com/iam/docs/roles-permissions) ## Other reference documentation - [### Basic and predefined roles reference View IAM basic roles, as well as a complete list of IAM predefined roles and the permissions they contain.](https://docs.cloud.google.com/iam/docs/understanding-roles) - [### Full resource names Understand the format that IAM uses to identify another service's resources.](https://docs.cloud.google.com/iam/docs/full-resource-names) - [### Identity federation: supported products and limitations Lists Google Cloud products that work with workforce identity federation, and provides associated product limitations.](https://docs.cloud.google.com/iam/docs/federated-identity-supported-services) - [### Permissions reference View a complete list of IAM permissions and the roles that grant them.](https://docs.cloud.google.com/iam/docs/permissions-reference) - [### Permissions supported in deny policies Learn which IAM permissions you can use in deny policies.](https://docs.cloud.google.com/iam/docs/deny-permissions-support) - [### Principal Access Boundary policy enforcement version permissions Learn which IAM permissions each version of Principal Access Boundary policies can block.](https://docs.cloud.google.com/iam/docs/pab-blocked-permissions) - [### Principal identifiers Understand the identifiers that you use when listing principals in allow policies and deny policies.](https://docs.cloud.google.com/iam/docs/principal-identifiers) - [### Resource types that accept allow policies Learn which resource types accept allow policies.](https://docs.cloud.google.com/iam/docs/resource-types-with-policies) - [### Resource types with built-in identities Learn which resource have built-in identities and what the principal identifiers for those built-in identities are.](https://docs.cloud.google.com/iam/docs/resources-with-built-in-identities) - [### Service agents Get details about the service accounts that Google Cloud services use to access your resources.](https://docs.cloud.google.com/iam/docs/service-agents) - [### Support levels for permissions in custom roles Learn which IAM permissions you can use in custom roles.](https://docs.cloud.google.com/iam/docs/custom-roles-permissions-support)