gcloud alpha compute target-tcp-proxies test-iam-permissions

INFORMATION
gcloud alpha compute target-tcp-proxies test-iam-permissions is supported in universe domain universe; however, some of the values used in the help text may not be available. Command examples may not work as-is and may requires changes before execution.
NAME
gcloud alpha compute target-tcp-proxies test-iam-permissions - test IAM permissions for a target TCP proxy
SYNOPSIS
gcloud alpha compute target-tcp-proxies test-iam-permissions NAME --permissions=[PERMISSION,…] [--global     | --region=REGION] [GCLOUD_WIDE_FLAG …]
DESCRIPTION
(ALPHA) gcloud alpha compute target-tcp-proxies test-iam-permissions tests the IAM permissions that a caller has on a target TCP proxy.

Note: This operation is designed to be used for building permission-aware UIs and command-line tools, not for authorization checking. This operation may "fail open" without warning.

EXAMPLES
To test if the caller has 'compute.targetTcpProxies.get' permission on a global target TCP proxy 'my-proxy', run: 
gcloud alpha compute target-tcp-proxies test-iam-permissions my-proxy --permissions=compute.targetTcpProxies.get

To test permissions on a regional target TCP proxy 'my-regional-proxy' in region 'us-central1', run: 

gcloud alpha compute target-tcp-proxies test-iam-permissions my-regional-proxy --region=us-central1 --permissions=compute.targetTcpProxies.get
POSITIONAL ARGUMENTS
NAME
Name of the target TCP proxy to test IAM permissions for.
REQUIRED FLAGS
--permissions=[PERMISSION,…]
Set of permissions to check for the resource.
OPTIONAL FLAGS
At most one of these can be specified:
--global
If set, the target TCP proxy is global.
--region=REGION
Region of the target TCP proxy to test IAM permissions for. If not specified, you might be prompted to select a region (interactive mode only).

To avoid prompting when this flag is omitted, you can set the compute/region property: 

gcloud config set compute/region REGION

A list of regions can be fetched by running: 

gcloud compute regions list

To unset the property, run: 

gcloud config unset compute/region

Alternatively, the region can be stored in the environment variable CLOUDSDK_COMPUTE_REGION.

GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.

NOTES
This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early access allowlist. These variants are also available: 
gcloud compute target-tcp-proxies test-iam-permissions
 
gcloud beta compute target-tcp-proxies test-iam-permissions
 
gcloud preview compute target-tcp-proxies test-iam-permissions