Skip to navigation
Workspace APIAuthorization

List the grants held by a subject (membership or group)

View as Markdown

Lists every role grant held by one subject — what a membership or group has been shared. Authorization: org admin, EXCEPT a non-admin member may inspect their OWN membership’s grants (when the query’s organizationMembershipId equals the caller’s); any other subject requires admin, otherwise 403 forbidden. Query names EXACTLY ONE of organizationMembershipId or groupId. Returns the subject’s grants.

Authentication

AuthorizationBearer

Bearer authentication of the form Bearer <token>, where token is your auth token.

Query parameters

organizationMembershipIdstringOptional>=1 character
groupIdstringOptional>=1 character

Response

The resources and roles granted to the subject.
assignmentslist of maps from strings to any

Every grant the subject holds. Shape mirrors RoleGrant plus provider extras.

Errors

403
Forbidden Error