GoodMemGoodMem
ReferenceAPIREST APIAccess Policy

Get a scoped role assignment

GET /v1/access-policy/role-assignments/{id}: Reads one live assignment, or one revoked historical assignment when includeRevoked is true, after requiring MANAGE_ACCESS on its policy target.

Reads one live assignment, or one revoked historical assignment when includeRevoked is true, after requiring MANAGE_ACCESS on its policy target.

GET
/v1/access-policy/role-assignments/{id}

Authorization

x-api-key<token>

In: header

Path Parameters

idstring

Role-assignment UUID

Query Parameters

includeRevoked?boolean

Include a revoked historical row

Defaultfalse

Response Body

curl -X GET "https://your-goodmem-server.example.com/v1/access-policy/role-assignments/9f75bfdf-6c08-4ccc-b945-8688d91ef25d?includeRevoked=true"
{
  "roleAssignmentId": "9f75bfdf-6c08-4ccc-b945-8688d91ef25d",
  "principalId": "70e025f6-76ca-4cbe-b8fc-7dab8e84590a",
  "role": "ROOT",
  "assignedResource": {
    "kind": "INSTANCE",
    "resourceId": "550e8400-e29b-41d4-a716-446655440000"
  },
  "assignedAt": 0,
  "assignedById": "114ad558-323d-4b76-85b8-37af103b8650",
  "revokedAt": 0,
  "revokedById": "ab882e21-ea3f-4c29-9040-49be3cc93162"
}
Empty
Empty
Empty
Empty
Empty
Empty

Get an authorization grant

GET /v1/access-policy/grants/{id}: Reads one live grant, or one revoked historical grant when includeRevoked is true, after requiring MANAGE_ACCESS on its policy target.

List authorization grants

GET /v1/access-policy/grants: Lists grants attached to one resource. MANAGE_ACCESS is required on that resource; continuation tokens are bound to the caller and filters.