Skip to navigation

Check the current user’s permissions on resources

View as Markdown

Checks resource access for the authenticated caller only. Authorization: any authenticated organization member — the subject is always the caller’s organization membership, so a caller can never probe another subject. Body: checks is a 1–50-item array of { permission, resourceType, resourceExternalId }. Returns { results } (one entry per check, each with an authorized boolean, in request order). If the caller has no organization-membership claim, returns { results: [] }.

Authentication

AuthorizationBearer

Bearer authentication of the form Bearer <token>, where token is your auth token.

Request

This endpoint expects an object.
checkslist of objectsRequired

Response

Per-check authorization results for the calling user.

resultslist of objects
One entry per requested check, in request order.