function main(sourceName = 'FULL_SOURCE_PATH') {
  // [START securitycenter_test_iam]
  // Imports the Google Cloud client library.
  const {SecurityCenterClient} = require('@google-cloud/security-center');

  // Creates a new client.
  const client = new SecurityCenterClient();

  // sourceName is the full resource name of the source to test for permissions.
  /*
   * TODO(developer): Uncomment the following lines
   */
  // const sourceName = "organizations/111122222444/sources/1234";
  async function testIam() {
    {
      const [policy] = await client.testIamPermissions({
        resource: sourceName,
        permissions: ['securitycenter.findings.update'],
      });
      console.log(
        `Permissions to create/update findings? ${
          policy.permissions.length > 0
        }`
      );
    }
    {
      const [policy] = await client.testIamPermissions({
        resource: sourceName,
        permissions: ['securitycenter.findings.setState'],
      });
      console.log(
        `Permissions to update state? ${policy.permissions.length > 0}`
      );
    }
  }
  testIam();
  // [END securitycenter_test_iam]
}
Demonstrates how to determine if your service user has appropriate
access to create and update findings.