Get user permissions for governance

GET

/api/v1/rbac/user/permissions

curl --request GET \
  --url https://localhost:8080/api/v1/rbac/user/permissions \
  --header 'Authorization: <Authorization>'

Return the authenticated user’s organization memberships, project assignments, and effective permissions in the governance-service contract format

Authorizations

• BearerAuth
• ApiKeyAuth

Responses

200

User permissions and context

Media type application/json

A caller’s full authorization context, in the shape the governance service consumes

object

email

string

isSystemAdmin

boolean

joinedAt

string format: date-time

lastLoginAt

string format: date-time

name

string

organizationPermissions

object

key

additional properties

Array<string>

Allowed values: manage_org_settings manage_org_users create_projects edit_project_settings archive_projects manage_project_members create_policies apply_policies archive_applied_policies create_credentials revoke_credentials register_agents revoke_agents restore_agents create_agent_memberships create_indicators archive_indicators apply_indicators activate_indicators disable_indicators run_indicators create_declarations submit_controls_for_review determine_control_outcomes create_comments view_project_data

organizations

Array<object>

An organization membership, in the shape the governance service consumes

object

organizationId

integer

roles

Array<string>

Allowed values: organization_owner agent_operator project_owner implementation_owner implementation_contributor audit_owner audit_contributor project_viewer

permissions

object

key

additional properties

Array<string>

Allowed values: manage_org_settings manage_org_users create_projects edit_project_settings archive_projects manage_project_members create_policies apply_policies archive_applied_policies create_credentials revoke_credentials register_agents revoke_agents restore_agents create_agent_memberships create_indicators archive_indicators apply_indicators activate_indicators disable_indicators run_indicators create_declarations submit_controls_for_review determine_control_outcomes create_comments view_project_data

pictureUrl

string

projectPermissions

object

key

additional properties

Array<string>

Allowed values: manage_org_settings manage_org_users create_projects edit_project_settings archive_projects manage_project_members create_policies apply_policies archive_applied_policies create_credentials revoke_credentials register_agents revoke_agents restore_agents create_agent_memberships create_indicators archive_indicators apply_indicators activate_indicators disable_indicators run_indicators create_declarations submit_controls_for_review determine_control_outcomes create_comments view_project_data

projects

Array<object>

A project assignment, in the shape the governance service consumes

object

organizationId

integer

projectId

integer

roles

Array<string>

Allowed values: organization_owner agent_operator project_owner implementation_owner implementation_contributor audit_owner audit_contributor project_viewer

status

boolean

userId

string

Example

{
  "organizationPermissions": {
    "additionalProperty": [
      "manage_org_settings"
    ]
  },
  "organizations": [
    {
      "roles": [
        "organization_owner"
      ]
    }
  ],
  "permissions": {
    "additionalProperty": [
      "manage_org_settings"
    ]
  },
  "projectPermissions": {
    "additionalProperty": [
      "manage_org_settings"
    ]
  },
  "projects": [
    {
      "roles": [
        "organization_owner"
      ]
    }
  ]
}

400

Could not determine a unique organization for this request

Media type application/json

Error body returned across the auth endpoints; the message is human-readable and not a stable identifier

object

error

string

error_description

string

Example

{
  "error": "Unauthorized",
  "error_description": "Invalid token"
}

401

Unauthorized

Media type application/json

Error body returned across the auth endpoints; the message is human-readable and not a stable identifier

object

error

string

error_description

string

Example

{
  "error": "Unauthorized",
  "error_description": "Invalid token"
}

500

Internal server error

Media type application/json

Error body returned across the auth endpoints; the message is human-readable and not a stable identifier

object

error

string

error_description

string

Example

{
  "error": "Unauthorized",
  "error_description": "Invalid token"
}