Console
Start free

gcloud compute machine-images test-iam-permissions

NAME
gcloud compute machine-images test-iam-permissions - test IAM permissions for a Compute Engine machine image
SYNOPSIS
gcloud compute machine-images test-iam-permissions MACHINE_IMAGE --permissions=[PERMISSIONS,…] [GCLOUD_WIDE_FLAG …]
DESCRIPTION
Returns permissions that a caller has on the specified machine image.
EXAMPLES
To test whether the caller has the 'compute.machineImages.getIamPolicy' permission on a machine image, run: 
gcloud compute machine-images test-iam-permissions my-machine-image --permissions=compute.machineImages.getIamPolicy
POSITIONAL ARGUMENTS
Machine image resource - The ID of the machine image to test permissions for. This represents a Cloud resource. (NOTE) Some attributes are not given arguments in this group but can be set in other ways.

To set the project attribute:

This must be specified.
MACHINE_IMAGE
ID of the machine image or fully qualified identifier for the machine image. To set the machine_image attribute:
REQUIRED FLAGS
--permissions=[PERMISSIONS,…]
Permissions to be tested.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.

API REFERENCE
This command uses the compute/v1 API. The full documentation for this API can be found at: https://cloud.google.com/compute/
NOTES
These variants are also available: 
gcloud alpha compute machine-images test-iam-permissions
 
gcloud beta compute machine-images test-iam-permissions
 
gcloud preview compute machine-images test-iam-permissions