List a group's grants

GET

/principal-groups/{id}/grants

const url = 'https://example.com/api/v1/principal-groups/example/grants';
const options = {method: 'GET'};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url https://example.com/api/v1/principal-groups/example/grants

The role x scope grants a group confers on its members. Gated by principal_group:read:admin.

Parameters

Path Parameters

required

The group’s id (uuid)

string

The group’s id (uuid)

Responses

200

application/json

object

$schema

A URL to the JSON Schema for this object.

string format: uri

grants

required

Array<object> | null

object

$schema

A URL to the JSON Schema for this object.

string format: uri

group_id

Set when this grant is inherited from a group the principal belongs to (the group’s id); absent for a direct grant, which is the only kind revocable from the principal.

string

group_name

The source group’s label, present when the grant is inherited.

string

role

required

string

scope_id

string

scope_kind

required

string

scope_op

How the scope root matches the tree: subtree (root + descendants), subtree_excl_root (descendants only for update/delete, root kept for read/create), or self (the root row only). Empty means subtree. Moot for the all scope.

string

Allowed values: subtree subtree_excl_root self

Example

{
  "$schema": "/api/v1/schemas/ListGroupGrantsOutputBody.json",
  "grants": [
    {
      "$schema": "/api/v1/schemas/GrantBody.json",
      "scope_op": "subtree"
    }
  ]
}

default

Error

application/problem+json

object

$schema

A URL to the JSON Schema for this object.

string format: uri

detail

A human-readable explanation specific to this occurrence of the problem.

string

errors

Optional list of individual error details

Array<object> | null

object

location

Where the error occurred, e.g. ‘body.items[3].tags’ or ‘path.thing-id’

string

message

Error message text

string

value

The value at the given location

instance

A URI reference that identifies the specific occurrence of the problem.

string format: uri

status

HTTP status code

integer format: int64

title

A short, human-readable summary of the problem type. This value should not change between occurrences of the error.

string

type

A URI reference to human-readable documentation for the error.

string format: uri

default: about:blank

Example

{
  "$schema": "/api/v1/schemas/ErrorModel.json",
  "detail": "Property foo is required but is missing.",
  "instance": "https://example.com/error-log/abc123",
  "status": 400,
  "title": "Bad Request",
  "type": "about:blank"
}