List the grants (shares) on a resource

GET

/authorization/grants/resource

GET

/authorization/grants/resource

$ curl -G https://api.cloudraker.com/authorization/grants/resource \
>      -H "Authorization: Bearer <token>" \
>      -H "Content-Type: application/json" \
>      -d resourceType=space \
>      -d externalId=space-12345 \
>      -d assignment=direct

1 {
2   "assignment": "direct",
3   "roleAssignments": [
4     {
5       "id": "grant-98765",
6       "role": {
7         "slug": "space-member"
8       },
9       "resource": {
10         "id": "res-12345",
11         "externalId": "space-12345",
12         "resourceTypeSlug": "space"
13       },
14       "organizationMembershipId": "orgmem-54321"
15     }
16   ],
17   "memberships": [
18     {
19       "orgmem-54321": {
20         "userId": "user-67890",
21         "userName": "[email protected]",
22         "displayName": "Jane Doe"
23       }
24     }
25   ]
26 }

Lists the role grants on a single resource — who it is shared with. Authorization: org admin, or the caller holds the resource’s share permission on the target (space:share/spacetype:share; settings is admin-only); otherwise 403 forbidden. Query: resourceType (space | spacetype | settings) and externalId (required); optional assignment = direct | indirect filters to directly-assigned vs inherited grants. Returns the resource’s grants.

Lists the role grants on a single resource — who it is shared with. Authorization: org admin, or the caller holds the resource’s share permission on the target (`space:share`/`spacetype:share`; `settings` is admin-only); otherwise 403 `forbidden`. Query: `resourceType` (`space` | `spacetype` | `settings`) and `externalId` (required); optional `assignment` = `direct` | `indirect` filters to directly-assigned vs inherited grants. Returns the resource’s grants.

Authentication

AuthorizationBearer

Bearer authentication of the form Bearer <token>, where token is your auth token.

Query parameters

resourceTypeenumRequired

Allowed values:

externalIdstringRequired>=1 character

assignmentenumOptional

Allowed values:

Response

The subjects and roles granted on the resource.

assignmentenum

roleAssignmentslist of objects

membershipslist of maps from strings to any

The memberships behind the assignments, for rendering a share list.

Errors

403

Forbidden Error