List the Direct Permissions of a User

Returns only what was granted to this person DIRECTLY, as a plain array — this listing is NOT paginated.

Read this one when you want to know what an administrator attached to the account itself. It is NOT the answer to “what can this person do?”: permissions also arrive through roles and through groups, and those do not appear here: a permission is listed only when it names this user itself, never because a role held by the user or by one of their groups carries it. GET /v1/users/{id}/effective-permissions is the resolved view, with the source of each grant.

Read-only: nothing changes. A person with no direct grants returns an empty array, not a 404.

Failures:

• 404 — no such user in your organization.
• 503 IDE-0066 — the identity provider is unavailable (unreachable, too slow to answer, or failing). Nothing about the request was wrong; retry it later.

GET /v1/users/{id}/permissions

List the Direct Permissions of a User

cURL

curl --request GET \
  --url https://identity.sandbox.lerian.net/v1/users/{id}/permissions \
  --header 'Authorization: Bearer <token>'

200

[
  {
    "actions": [
      "<string>"
    ],
    "effect": "allow",
    "groups": [
      "<string>"
    ],
    "id": "midaz-editor-permission",
    "isEnabled": true,
    "name": "Midaz Editor Permission",
    "resources": [
      "<string>"
    ],
    "roles": [
      "<string>"
    ],
    "users": [
      "<string>"
    ]
  }
]

Authorizations

Authorization · string · header · required

JWT bearer token issued by the identity provider.

Path Parameters

id · string · required

User ID.

Example:

"00000000-0000-0000-0000-000000000000"

Response

200

application/json

OK

actions · string[]

effect · string

Example:

"allow"

groups · string[]

id · string

Example:

"midaz-editor-permission"

isEnabled · boolean

Example:

true

name · string

Example:

"Midaz Editor Permission"

resources · string[]

roles · string[]

users · string[]