Troubleshoot Iam

policy_troubleshooter.troubleshoot_iam

ActionGoogle Cloudconnection required

Calls Policy Troubleshooter POST /v3/iam:troubleshoot.

Checks whether a principal has a specific permission for a specific resource, and explains why the principal does or doesn't have that permission.

Ask about Google Policy Troubleshooter All Google Policy Troubleshooter nodes Provider API docs ↗

Connection

Required: Yes — the node will not save without one
Auth type: OAuth 2.0
Providers: Google Policy Troubleshooter
Secret shape: {"client_id", "client_secret", "refresh_token"}
Resolved by: config.connection_id, else node.connection_id

Configuration

1 field, none required. A dotted path is a nested object and name[] an array of objects — the editor renders the same tree.

Field	Type	Required	Default	Constraints	Example
body Request body (GoogleCloudPolicytroubleshooterIamV3TroubleshootIamPolicyRequest) as JSON.	object	No	—	—	—

Output

One shape.

result

Field	Type	Example
ok	boolean	—
accessTuple	object	—
allowPolicyExplanation	object	—
overallAccessState	string	—
denyPolicyExplanation	object	—

{
  "accessTuple": {},
  "allowPolicyExplanation": {},
  "denyPolicyExplanation": {},
  "ok": false,
  "overallAccessState": ""
}

See Troubleshoot Iam run in a workflow.

In a technical demo we add the Google Policy Troubleshooter connection, drop the node on the canvas and let Workflow Health pre-flight it before the first real run.

Book a technical demo Talk to sales