Get user effective permissions

Called to answer “why can this person do that?” without walking groups and roles by hand. It is the resolved view.

Read-only: nothing changes.

Failures:

• 400 — the request could not be read.
• 404 — no such user in your organization.
• 503 IDE-0066 — the identity provider is unavailable (unreachable, too slow to answer, or failing). Nothing about the request was wrong; retry it later.

GET /v1/users/{id}/effective-permissions

Get user effective permissions

cURL

curl --request GET \
  --url https://identity.sandbox.lerian.net/v1/users/{id}/effective-permissions \
  --header 'Authorization: Bearer <token>'

200

[
  {
    "actions": [
      "<string>"
    ],
    "effect": "allow",
    "id": "midaz-editor-permission",
    "isEnabled": true,
    "name": "Midaz Editor Permission",
    "resources": [
      "<string>"
    ],
    "sources": [
      {
        "groupId": "engineering",
        "groupName": "Engineering",
        "roleId": "midaz-editor",
        "roleName": "Midaz Editor",
        "type": "role"
      }
    ]
  }
]

Authorizations

Authorization · string · header · required

JWT bearer token issued by the identity provider.

Path Parameters

id · string · required

User ID.

Example:

"00000000-0000-0000-0000-000000000000"

Response

200

application/json

OK

actions · string[]

effect · string

Example:

"allow"

id · string

Example:

"midaz-editor-permission"

isEnabled · boolean

Example:

true

name · string

Example:

"Midaz Editor Permission"

resources · string[]

sources · object[]

Show child attributes