Grant a role on a resource to a subject

POST

/authorization/grants

Creates a role grant (a share) on a resource. Authorization: the caller must be an organization administrator, or hold the resource’s share permission on the target (space:share for space, spacetype:share for spacetype; settings has no share permission and is administrator-only); otherwise returns 403 forbidden. Body: subject (name exactly one of organizationMembershipId or groupId), role (role slug), resourceType (space | spacetype | settings), resourceExternalId. settings resources are created lazily (idempotent) before granting. Returns the created grant.

Creates a role grant (a share) on a resource. Authorization: the caller must be an organization administrator, or hold the resource’s share permission on the target (`space:share` for `space`, `spacetype:share` for `spacetype`; `settings` has no share permission and is administrator-only); otherwise returns 403 `forbidden`. Body: `subject` (name exactly one of `organizationMembershipId` or `groupId`), `role` (role slug), `resourceType` (`space` | `spacetype` | `settings`), `resourceExternalId`. `settings` resources are created lazily (idempotent) before granting. Returns the created grant.

Authentication

AuthorizationBearer

Bearer authentication of the form Bearer <token>, where token is your auth token.

Request

This endpoint expects an object.

subjectobjectRequired

rolestringRequired>=1 character

resourceTypeenumRequired

Allowed values:

resourceExternalIdstringRequired>=1 character

Response

The role grant was created.

idstring

roleobject

resourceobject

organizationMembershipIdstring

Errors

403

Forbidden Error

$	curl -X POST https://api.cloudraker.com/authorization/grants \
>	-H "Authorization: Bearer <token>" \
>	-H "Content-Type: application/json" \
>	-d '{
>	"subject": {},
>	"role": "space-admin",
>	"resourceType": "space",
>	"resourceExternalId": "space-1234"
>	}'

1	{
2	"id": "grant-9876",
3	"role": {
4	"slug": "space-member"
5	},
6	"resource": {
7	"id": "space-1234",
8	"externalId": "space-1234",
9	"resourceTypeSlug": "space"
10	},
11	"organizationMembershipId": "orgmem-4567"
12	}