# What the LevelFour service account can read in Google Cloud

> probe rows come from IAM testIamPermissions; script_report rows are what a connect script applied.

Source: https://docs.levelfour.ai/api-reference/google-cloud/get-providers-gcp-access


## GET /api/v1/providers/gcp/access

probe rows come from IAM testIamPermissions; script_report rows are what a connect script applied.

### Authentication

Send `Authorization: Bearer <token>`.

### Responses

#### 200: Successful Response

- `success` (boolean, default `true`)
- `timestamp` (string, required)
- `data` (object, required)
  - `checks` (array of object, required)
    - `scope_type` (one of `project`, `organization`, `billing_account`, required)
    - `scope_id` (string, required)
    - `permission` (string, required): An IAM permission for probe rows, a role for script_report rows
    - `granted` (boolean, required)
    - `source` (one of `probe`, `script_report`, required)
    - `checked_at` (date-time string, required)

#### Errors

- `400`: Bad Request
- `401`: Authentication Error
- `403`: Authorization Error
- `404`: Not Found
- `409`: Conflict
- `422`: Validation Error
- `429`: Rate Limit Exceeded
- `500`: Internal Server Error

Body of `400`, `401`, `403`, `404`, `409`, `422`, `429`, `500`:

- `success` (`false`, required)
- `error` (object, required)
  - `code` (string, required)
  - `message` (string, required)
  - `details` (any)
- `timestamp` (date-time string, required)