Sign in

v21

latestOpenAPI 3.1.0raw.githubusercontent.com2026-08-01144108427.9 KB
Authorization

Get Effective Permissions

Return per-resource allowed actions for the current user.

Use this to render the UI permission gate (greyed-out buttons etc.) without flooding the audit log with denied probes. Empty list for a resource_id means the user cannot perform any of the requested actions on that resource.

post/api/v1/authz/me/permissions

Request body

actionsstring[] nullable

Actions to check. Each entry is lowercased and de-duplicated; the list is capped at 10. Defaults to read/write/execute/delete/create.

domainstring

Authorization domain — typically project:{folder_id} or *.

resource_idsstring[] required

Resource IDs to evaluate. Capped at 500 per request to keep batch_enforce bounded.

resource_type'flow' | 'deployment' | 'project' | 'knowledge_base' | 'variable' | 'file' | 'component' required

Response

Successful Response

permissionsobject required
resource_type'flow' | 'deployment' | 'project' | 'knowledge_base' | 'variable' | 'file' | 'component' required