Org Permission Management

Organization management functions.

List permissions for a user in an organization

get

This endpoint retrieves all permissions associated with a specific user within a given organization. It provides insights into the user's roles and groups, helping to understand their access rights. Ideal for managing user permissions effectively.

👤 User Credential: You must login and authenticate a user and use their access token to invoke this service. This will operate the action under the specified user.

🔒 Permission: org.user.permissions.list is required in order for the call to succeed. You must configure permissions for the person or service calling this endpoint and add this permission to their identity.

Authorizations

authorizationCode

OAuth2clientCredentialsRequired

An OIDC service account that was authenticated.

Authorization URL: Token URL:

Path parameters

userIdstringRequired

organizationIdstringRequired

Responses

200

OK

*/*

401

Unauthorized

*/*

get

/directory/orgs/{organizationId}/users/{userId}/permissions

HTTPcURLJavaScriptPython

GET /directory/orgs/{organizationId}/users/{userId}/permissions HTTP/1.1
Host: gateway.dev.klustr.io
Authorization: Bearer YOUR_OAUTH2_TOKEN
Accept: */*

[
  {
    "subject": {},
    "scope": {},
    "object": {}
  }
]

Retrieve user permissions for a specific namespace.

get

This endpoint returns the permissions associated with a user for a specified namespace within an organization. It helps in understanding the user's access rights and roles in the context of the organization. Use this information to manage user permissions effectively.

👤 User Credential: You must login and authenticate a user and use their access token to invoke this service. This will operate the action under the specified user.

🔒 Permission: org.user.permissions.list is required in order for the call to succeed. You must configure permissions for the person or service calling this endpoint and add this permission to their identity.

Authorizations

authorizationCode

OAuth2clientCredentialsRequired

An OIDC service account that was authenticated.

Authorization URL: Token URL:

Path parameters

userIdstringRequired

organizationIdstringRequired

namespacestringRequired

Responses

200

OK

*/*

401

Unauthorized

*/*

get

/directory/orgs/{organizationId}/users/{userId}/permissions/{namespace}

HTTPcURLJavaScriptPython

GET /directory/orgs/{organizationId}/users/{userId}/permissions/{namespace} HTTP/1.1
Host: gateway.dev.klustr.io
Authorization: Bearer YOUR_OAUTH2_TOKEN
Accept: */*

[
  {
    "subject": {},
    "scope": {},
    "object": {}
  }
]

Retrieve permissions for a specific user and object

get

This endpoint returns the permissions associated with a specified user for a given namespace and object. It provides insights into the user's roles and groups, helping to understand their access rights. This information is crucial for managing user permissions effectively within the organization.

👤 User Credential: You must login and authenticate a user and use their access token to invoke this service. This will operate the action under the specified user.

🔒 Permission: org.user.permissions.list is required in order for the call to succeed. You must configure permissions for the person or service calling this endpoint and add this permission to their identity.

Authorizations

authorizationCode

OAuth2clientCredentialsRequired

An OIDC service account that was authenticated.

Authorization URL: Token URL:

Path parameters

userIdstringRequired

namespacestringRequired

organizationIdstringRequired

object_idstringRequired

Responses

200

OK

*/*

401

Unauthorized

*/*

get

/directory/orgs/{organizationId}/users/{userId}/permissions/{namespace}/{object_id}

HTTPcURLJavaScriptPython

GET /directory/orgs/{organizationId}/users/{userId}/permissions/{namespace}/{object_id} HTTP/1.1
Host: gateway.dev.klustr.io
Authorization: Bearer YOUR_OAUTH2_TOKEN
Accept: */*

[
  {
    "subject": {},
    "scope": {},
    "object": {}
  }
]