GET /openapi/memorylake/admin/v1/access-groups/{group_id}/effective-permissions
Permission required:
access_group:viewPath Parameters
string
required
Identifier
curl -X GET 'https://app.memorylake.ai/openapi/memorylake/admin/v1/access-groups/7013fb5c15cfb29411f040967354b8a3/effective-permissions' \
-H 'Authorization: Bearer sk_xxxxxx'
Response
object
Show Access Group Effective Permissions object
Show Access Group Effective Permissions object
string
The group
integer
Number of members
string
Display name
array
Every permission the group grants, each with where it comes from: the base (inherits_from) or the group’s own permission list
Show Effective Permission object
Show Effective Permission object
array
Instances the group gives access to, per resource type
Show Access Scope Entry object
Show Access Scope Entry object
string
all = every instance; instances = only the listed ones
string
Resource type, e.g. memorylake:project (see GET /permission-catalog)
array
Read-only. Instance-level actions the member’s role grants for this type — the most a scope entry can allow.
array
The instances, when mode is instances
Show Access Scope Instance object
Show Access Scope Instance object
string
Instance id, as returned by the data API
array
Actions allowed on this instance. Omit for every action the member’s role allows.
array
Read-only. The subset of actions the member’s CURRENT role still grants.
string
Read-only. The permission level, when via_permission_level is true. One of:
read, write, manage.array
Read-only. Actions stored here that the member’s current role no longer grants.
boolean
Read-only. The member reaches this instance through a permission level granted on it, not through this scope. May be echoed back on write; such instances are skipped.
string
Parent workspace of a project instance. Required when writing a project instance.
object
The base role or base access group; omitted when the group has neither
array
Permissions in the group’s own list that do not take effect
{
"success": true,
"message": "Operation completed successfully",
"data": {
"group_id": "cda040c43b8de706929b9cfad8d35791",
"member_count": 1,
"name": "Example name",
"permissions": [
{
"permission": "example",
"sources": [
{
"type": "role",
"id": "7ea9bf65e6937c3c168bc7a2a0f6fbf2",
"name": "Example name"
}
]
}
],
"scopes": [
{
"mode": "all",
"resource_type": "example",
"available_actions": [
"example"
],
"instances": [
{
"id": "bc572b050c9920425b5fd75681eccbb2",
"actions": [],
"effective_actions": [],
"permission_level": "read",
"shadowed_actions": [],
"via_permission_level": false,
"workspace_id": "0fa2d21dc175adc7a003e0b37f156cb1"
}
]
}
],
"inherits_from": {
"type": "role",
"id": "7ea9bf65e6937c3c168bc7a2a0f6fbf2",
"name": "Example name"
},
"overridden_permissions": [
"example"
]
}
}
Errors
Errors answer withsuccess: false, a message and an error_code. See Error Codes for every code.
| Status | Meaning |
|---|---|
401 | The API key is missing, invalid, disabled or expired |
403 | The key is not allowed to do this |
404 | The resource does not exist |
422 | The body or a parameter failed validation |
429 | Too many requests. Wait for the time in Retry-After |
500 | Server-side error |