The permission that applies to a principal (user, group, audience) on a label.
JSON representation
{"name": string,"email": string,"role": enum (LabelRole),// Union field principal can be only one of the following:"person": string,"group": string,"audience": string// End of list of possible types for union field principal.}
Fields
name
string
Resource name of this permission.
email
string
Specifies the email address for a user or group pricinpal. Not populated for audience principals. User and Group permissions may only be inserted using email address. On update requests, if email address is specified, no principal should be specified.
Union field principal. The principal this permission applies to. Must be either an email, user, group, or audience. Example: * people/12345 * groups/45678 * audiences/default principal can be only one of the following:
person
string
Person resource name.
group
string
Group resource name.
audience
string
Audience to grant a role to. The magic value of audiences/default may be used to apply the role to the default audience in the context of the organization that owns the Label.
LabelRole
Roles are concentric with subsequent role.
Enums
LABEL_ROLE_UNSPECIFIED
Unknown role.
READER
A reader can read the label and associated metadata applied to Drive items.
APPLIER
An applier can write associated metadata on Drive items in which they also have write access to. Implies READER.
ORGANIZER
An organizer can pin this label in shared drives they manage and add new appliers to the label.
EDITOR
Editors can make any update including deleting the label which also deletes the associated Drive item metadata. Implies APPLIER.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-06-12 UTC."],[],[],null,["# REST Resource: labels.permissions\n\n- [Resource: LabelPermission](#LabelPermission)\n - [JSON representation](#LabelPermission.SCHEMA_REPRESENTATION)\n - [LabelRole](#LabelPermission.LabelRole)\n- [Methods](#METHODS_SUMMARY)\n\nResource: LabelPermission\n-------------------------\n\nThe permission that applies to a principal (user, group, audience) on a label.\n\n| JSON representation |\n|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| ``` { \"name\": string, \"email\": string, \"role\": enum (/workspace/drive/labels/reference/rest/v2beta/labels.permissions#LabelPermission.LabelRole), // Union field `principal` can be only one of the following: \"person\": string, \"group\": string, \"audience\": string // End of list of possible types for union field `principal`. } ``` |\n\n| Fields ||\n|------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| `name` | `string` Resource name of this permission. |\n| `email` | `string` Specifies the email address for a user or group pricinpal. Not populated for audience principals. User and Group permissions may only be inserted using email address. On update requests, if email address is specified, no principal should be specified. |\n| `role` | `enum (`[LabelRole](/workspace/drive/labels/reference/rest/v2beta/labels.permissions#LabelPermission.LabelRole)`)` The role the principal should have. |\n| Union field `principal`. The principal this permission applies to. Must be either an email, user, group, or audience. Example: \\* people/12345 \\* groups/45678 \\* audiences/default `principal` can be only one of the following: ||\n| `person` | `string` Person resource name. |\n| `group` | `string` Group resource name. |\n| `audience` | `string` Audience to grant a role to. The magic value of `audiences/default` may be used to apply the role to the default audience in the context of the organization that owns the Label. |\n\n### LabelRole\n\nRoles are concentric with subsequent role.\n\n| Enums ||\n|--------------------------|------------------------------------------------------------------------------------------------------------------------------------|\n| `LABEL_ROLE_UNSPECIFIED` | Unknown role. |\n| `READER` | A reader can read the label and associated metadata applied to Drive items. |\n| `APPLIER` | An applier can write associated metadata on Drive items in which they also have write access to. Implies `READER`. |\n| `ORGANIZER` | An organizer can pin this label in shared drives they manage and add new appliers to the label. |\n| `EDITOR` | Editors can make any update including deleting the label which also deletes the associated Drive item metadata. Implies `APPLIER`. |\n\n| Methods ------- ||\n|-------------------------------------------------------------------------------------------------|--------------------------------|\n| ### [batchDelete](/workspace/drive/labels/reference/rest/v2beta/labels.permissions/batchDelete) | Deletes Label permissions. |\n| ### [batchUpdate](/workspace/drive/labels/reference/rest/v2beta/labels.permissions/batchUpdate) | Updates Label permissions. |\n| ### [create](/workspace/drive/labels/reference/rest/v2beta/labels.permissions/create) | Updates a Label's permissions. |\n| ### [delete](/workspace/drive/labels/reference/rest/v2beta/labels.permissions/delete) | Deletes a Label's permission. |\n| ### [list](/workspace/drive/labels/reference/rest/v2beta/labels.permissions/list) | Lists a Label's permissions. |"]]