GoodMemGoodMem
ReferenceAPIREST APIAccess Policy

List scoped role assignments

GET /v1/access-policy/role-assignments: Lists assignments attached to one required INSTANCE or SPACE boundary after requiring MANAGE_ACCESS. Continuation tokens are bound to the caller and filters.

Lists assignments attached to one required INSTANCE or SPACE boundary after requiring MANAGE_ACCESS. Continuation tokens are bound to the caller and filters.

GET
/v1/access-policy/role-assignments

Authorization

x-api-key<token>

In: header

Query Parameters

resourceKindstring

Required INSTANCE or SPACE kind

Value in"INSTANCE" | "SPACE"
resourceId?string

Required space UUID; omitted for INSTANCE

includeRevoked?boolean

Include revoked history

Defaultfalse
maxResults?integer

Page size; 0 or omission uses the default of 50, maximum 1,000

Default50
Formatint32
nextToken?string

Opaque continuation token

Response Body

curl -X GET "https://your-goodmem-server.example.com/v1/access-policy/role-assignments?resourceKind=SPACE&resourceId=550e8400-e29b-41d4-a716-446655440000&includeRevoked=true&maxResults=100&nextToken=string"
{
  "roleAssignments": [
    {
      "roleAssignmentId": "9f75bfdf-6c08-4ccc-b945-8688d91ef25d",
      "principalId": "70e025f6-76ca-4cbe-b8fc-7dab8e84590a",
      "assignedResource": {
        "resourceId": "550e8400-e29b-41d4-a716-446655440000"
      },
      "assignedById": "114ad558-323d-4b76-85b8-37af103b8650",
      "revokedById": "ab882e21-ea3f-4c29-9040-49be3cc93162"
    }
  ],
  "nextToken": "string"
}
Empty
Empty
Empty
Empty
Empty
Empty

List authorization grants

GET /v1/access-policy/grants: Lists grants attached to one resource. MANAGE_ACCESS is required on that resource; continuation tokens are bound to the caller and filters.

Revoke an authorization grant

DELETE /v1/access-policy/grants/{id}: Soft-revokes one grant and returns its durable historical row. Repeating the request is idempotent while the caller retains MANAGE_ACCESS on the target.