Download OpenAPI specification:
Queries current role instances
| filter[name][EQ] | string |
| filter[name][CO] | string |
| filter[system][EQ] | boolean |
| filter[created][LT] | string <date-time> |
| filter[created][GT] | string <date-time> |
| filter[modified][LT] | string <date-time> |
| filter[modified][GT] | string <date-time> |
| page[offset] | integer |
| page[limit] | integer |
| sort | string Enum: "name" "-name" "created" "-created" "modified" "-modified" |
{- "totalCount": 0,
- "data": [
- {
- "id": "string",
- "created": "2019-08-24T14:15:22Z",
- "modified": "2019-08-24T14:15:22Z",
- "name": "string",
- "description": "string",
- "permissions": [
- {
- "object": "string",
- "objectMatcher": "simple",
- "actions": [
- "string"
], - "effect": "Allow"
}
], - "system": true
}
]
}Creates a new role entity
| id | string |
| created | string <date-time> |
| modified | string <date-time> |
| name required | string |
| description | string |
Array of objects (permission) | |
| system | boolean |
{- "id": "string",
- "created": "2019-08-24T14:15:22Z",
- "modified": "2019-08-24T14:15:22Z",
- "name": "string",
- "description": "string",
- "permissions": [
- {
- "object": "string",
- "objectMatcher": "simple",
- "actions": [
- "string"
], - "effect": "Allow"
}
], - "system": true
}{- "id": "string",
- "created": "2019-08-24T14:15:22Z",
- "modified": "2019-08-24T14:15:22Z",
- "name": "string",
- "description": "string",
- "permissions": [
- {
- "object": "string",
- "objectMatcher": "simple",
- "actions": [
- "string"
], - "effect": "Allow"
}
], - "system": true
}Returns a specific role entity by ID
| roleId required | string ID of the role |
{- "id": "string",
- "created": "2019-08-24T14:15:22Z",
- "modified": "2019-08-24T14:15:22Z",
- "name": "string",
- "description": "string",
- "permissions": [
- {
- "object": "string",
- "objectMatcher": "simple",
- "actions": [
- "string"
], - "effect": "Allow"
}
], - "system": true
}Updates the definition of a role
| roleId required | string ID of the role |
| id | string |
| created | string <date-time> |
| modified | string <date-time> |
| name required | string |
| description | string |
Array of objects (permission) | |
| system | boolean |
{- "id": "string",
- "created": "2019-08-24T14:15:22Z",
- "modified": "2019-08-24T14:15:22Z",
- "name": "string",
- "description": "string",
- "permissions": [
- {
- "object": "string",
- "objectMatcher": "simple",
- "actions": [
- "string"
], - "effect": "Allow"
}
], - "system": true
}{- "id": "string",
- "created": "2019-08-24T14:15:22Z",
- "modified": "2019-08-24T14:15:22Z",
- "name": "string",
- "description": "string",
- "permissions": [
- {
- "object": "string",
- "objectMatcher": "simple",
- "actions": [
- "string"
], - "effect": "Allow"
}
], - "system": true
}Updates the definition of a role using JSON Patch
| roleId required | string ID of the role |
| op required | string Enum: "add" "remove" "replace" The operation to be performed |
| path required | string A JSON-Pointer |
| value | any The value to be used within the operations. |
[- {
- "op": "add",
- "path": "string",
- "value": null
}
]{- "id": "string",
- "created": "2019-08-24T14:15:22Z",
- "modified": "2019-08-24T14:15:22Z",
- "name": "string",
- "description": "string",
- "permissions": [
- {
- "object": "string",
- "objectMatcher": "simple",
- "actions": [
- "string"
], - "effect": "Allow"
}
], - "system": true
}Queries current role bindings
| filter[role][EQ] | string filter by the ID of the role |
| filter[principal][EQ] | string filter by the ID of the principal |
| filter[principal][IN] | string filter by the ID of the principal matching one of a comma separated list |
| page[offset] | integer |
| page[limit] | integer |
| sort | string Enum: "role" "-role" "principal" "-principal" "created" "-created" |
{- "data": [
- {
- "id": "string",
- "created": "2019-08-24T14:15:22Z",
- "role": "string",
- "principal": "string",
- "namespace": "string"
}
], - "totalCount": 0,
- "roles": {
- "property1": "string",
- "property2": "string"
}
}Creates a new role binding
| id | string |
| created | string <date-time> |
| role required | string |
| principal required | string |
| namespace required | string |
{- "id": "string",
- "created": "2019-08-24T14:15:22Z",
- "role": "string",
- "principal": "string",
- "namespace": "string"
}{- "id": "string",
- "created": "2019-08-24T14:15:22Z",
- "role": "string",
- "principal": "string",
- "namespace": "string"
}Deletes role bindings
| filter[role][EQ] | string deletes by the ID of the role |
| filter[namespace][EQ] | string deletes by the namespace of the binding |
| filter[principal][EQ] | string deletes by the ID of the principal |
{- "count": 0
}Evaluates access control for the current user
| object required | string |
| action required | string |
| namespace | string |
[- {
- "object": "string",
- "action": "string",
- "namespace": "string"
}
][- "Allow"
]Evaluates access control for the given user and returns an explanation of the result
| user required | string |
| groups | Array of strings |
| object required | string |
| action required | string |
| namespace | string |
[- {
- "user": "string",
- "groups": [
- "string"
], - "object": "string",
- "action": "string",
- "namespace": "string"
}
][- {
- "effect": "Allow",
- "explanation": [
- {
- "matches": true,
- "source": "string",
- "effect": "Allow"
}
]
}
]| filter[userId][EQ] | string |
| filter[object][EQ] | string |
| filter[object][SW] | string |
| filter[action][EQ] | string |
| filter[namespace][EQ] | string |
| filter[decision][EQ] | string (effect) Enum: "Allow" "Deny" |
| filter[purpose][EQ] | string (purpose) Enum: "Request" "Filter" |
| filter[when][LT] | string <date-time> |
| filter[when][GT] | string <date-time> |
| page[limit] | integer |
| page[offset] | integer |
| sort | string Enum: "object" "-object" "when" "-when" |
[- {
- "object": "string",
- "namespace": "string",
- "action": "string",
- "userId": "string",
- "groups": [
- "string"
], - "decision": "Allow",
- "purpose": "Request",
- "when": "2019-08-24T14:15:22Z"
}
]