Set Access Group Permissions

curl -X PUT 'https://app.memorylake.ai/openapi/memorylake/admin/v1/access-groups/7013fb5c15cfb29411f040967354b8a3/permissions' \
  -H 'Authorization: Bearer sk_xxxxxx' \
  -H 'Content-Type: application/json' \
  -d '{
    "permissions": [
      {
        "action": "example",
        "resource_type": "example"
      }
    ],
    "reason": "example"
  }'

{
  "success": true,
  "message": "Operation completed successfully",
  "data": {
    "group_id": "6bb71ef5236628d6e205696e676c1e4b",
    "permissions": [
      {
        "action": "example",
        "resource_type": "example"
      }
    ]
  }
}

curl -X PUT 'https://app.memorylake.ai/openapi/memorylake/admin/v1/access-groups/7013fb5c15cfb29411f040967354b8a3/permissions' \
  -H 'Authorization: Bearer sk_xxxxxx' \
  -H 'Content-Type: application/json' \
  -d '{
    "permissions": [
      {
        "action": "example",
        "resource_type": "example"
      }
    ],
    "reason": "example"
  }'

{
  "success": true,
  "message": "Operation completed successfully",
  "data": {
    "group_id": "6bb71ef5236628d6e205696e676c1e4b",
    "permissions": [
      {
        "action": "example",
        "resource_type": "example"
      }
    ]
  }
}

PUT /openapi/memorylake/admin/v1/access-groups/{group_id}/permissions

Replaces the group’s own permission list; [] removes every one of them. The base role or base group stays as it is. Only permissions in GET /permission-catalog?grantable_to=access_group are accepted. Sending If-Match also requires view: the current list is read to compare. The response carries an ETag header (the same value a GET of this resource returns). Send it back in If-Match to make the write conditional: when the resource has changed in the meantime the write is refused with 412 and nothing is changed. The check narrows, but does not fully close, the window for a concurrent overwrite — two writers that pass it at the same instant can both write.

Permission required: access_group:manage

When you send If-Match (the current list is read to compare): access_group:view
Changes that give someone an admin role, or that reduce what an admin can reach, also require the team owner or an admin.

Path Parameters

string

required

Identifier

Headers

string

Optional. The ETag from Get Access Group or a previous Set Access Group Permissions. The write is refused with 412 when the group’s permissions have changed since; omit it to overwrite unconditionally.

Request Body

array

required

The group’s complete permission list; [] removes all of them. The base role or base group is unaffected.

Show Access Group Permission object

string

required

Action

string

required

Resource type (see GET /permission-catalog?grantable_to=access_group)

string

required

Why the change is made; recorded in the audit log

curl -X PUT 'https://app.memorylake.ai/openapi/memorylake/admin/v1/access-groups/7013fb5c15cfb29411f040967354b8a3/permissions' \
  -H 'Authorization: Bearer sk_xxxxxx' \
  -H 'Content-Type: application/json' \
  -d '{
    "permissions": [
      {
        "action": "example",
        "resource_type": "example"
      }
    ],
    "reason": "example"
  }'

Response

object

Show Access Group Permissions object

string

The group

array

Permissions the group grants on top of its base role or base group

Show Access Group Permission object

string

Action

string

Resource type (see GET /permission-catalog?grantable_to=access_group)

{
  "success": true,
  "message": "Operation completed successfully",
  "data": {
    "group_id": "6bb71ef5236628d6e205696e676c1e4b",
    "permissions": [
      {
        "action": "example",
        "resource_type": "example"
      }
    ]
  }
}

Errors

Errors answer with success: false, a message and an error_code. See Error Codes for every code.

Status	Meaning
`400`	A parameter or the body is invalid
`401`	The API key is missing, invalid, disabled or expired
`403`	The key is not allowed to do this
`404`	The resource does not exist
`409`	The request conflicts with the current state, e.g. a duplicate or a limit reached
`412`	The `If-Match` value no longer matches: the resource changed since you read it
`422`	The body or a parameter failed validation
`429`	Too many requests. Wait for the time in `Retry-After`
`500`	Server-side error
`503`	Temporarily unavailable. Retry later

MemoryLake API

Memory Router API

Set Access Group Permissions

Path Parameters

Headers

Request Body

Response

Errors

​Path Parameters

​Headers

​Request Body

​Response

​Errors

Path Parameters

Headers

Request Body

Response

Errors