Skip to main content

Update an action's permissions

PATCH 

/v1/actions/:action_identifier/permissions

This route allows you to update the permissions of a self-service action.

To learn more about action RBAC, check out the documentation.

Request

Path Parameters

    action_identifier stringrequired

    The identifier of the action you want to update permissions for.

Body

    execute

    object

    An object used to define who can execute the action.

    users string[]

    The email addresses of the users who can execute the action.

    roles string[]

    The roles that can execute the action.

    teams string[]

    The names of the teams whose members can execute the action.

    ownedByTeam boolean

    Relevant only for DAY-2/DELETE actions. If true, any member of the team that the entity belongs to can execute the action.

    policy

    object

    An optional custom policy the determines if action execution is allowed.
    See instructions and examples here.

    queries

    object

    required

    One or more queries to fetch data from your software catalog.

    property name*

    object

    combinator required

    Possible values: [and, or]

    rules

    object[]

    required

  • Array [

  • anyOf

    property stringrequired
    operator required

    Possible values: [>, >=, <, <=]

    value numberrequired
  • ]

  • conditions string[]required

    Possible values: >= 1

    JQ expressions that run against the provided queries, and resolve to a boolean value (true = allowed to execute).

    approve

    object

    An object used to define who can approve the action.

    users string[]

    The email addresses of the users who can approve the action.

    roles string[]

    The roles that can approve the action.

    teams string[]

    The names of the teams whose members can approve the action.

    policy

    object

    An optional custom policy the determines who can approve the action.
    See instructions and examples here.

    queries

    object

    required

    One or more queries to fetch data from your software catalog.

    property name*

    object

    combinator required

    Possible values: [and, or]

    rules

    object[]

    required

  • Array [

  • anyOf

    property stringrequired
    operator required

    Possible values: [>, >=, <, <=]

    value numberrequired
  • ]

  • conditions string[]required

    Possible values: >= 1

    JQ expressions that run against the provided queries, and resolve to an array of strings (email addresses of users who can approve the action).

Responses

Success

Loading...