Get user permissions for governance

GET

/api/v1/rbac/user/permissions

curl --request GET \
  --url https://localhost:8080/api/v1/rbac/user/permissions \
  --header 'Authorization: <Authorization>'

Return the authenticated user’s organization memberships, project assignments, and effective permissions in the governance-service contract format

Authorizations

• BearerAuth
• ApiKeyAuth

Responses

200

User permissions and context

Media type application/json

object

email

string

isSystemAdmin

boolean

joinedAt

string

lastLoginAt

string

name

string

organizations

Array<object>

object

organizationId

integer

roles

Array<string>

Allowed values: organization_owner project_owner implementation_owner implementation_contributor audit_owner audit_contributor project_viewer

permissions

object

key

additional properties

Array<string>

Allowed values: manage_org_settings manage_org_users create_projects edit_project_settings archive_projects manage_project_members create_policies apply_project_policies archive_project_policies create_certificates revoke_certificates create_indicators archive_indicators apply_indicators activate_indicators disable_indicators create_declarations submit_controls_for_review determine_control_outcomes create_comments upload_demo_data view_project_data

pictureUrl

string

projects

Array<object>

object

organizationId

integer

projectId

integer

roles

Array<string>

Allowed values: organization_owner project_owner implementation_owner implementation_contributor audit_owner audit_contributor project_viewer

status

boolean

userId

string

Example

{
  "organizations": [
    {
      "roles": [
        "organization_owner"
      ]
    }
  ],
  "permissions": {
    "additionalProperty": [
      "manage_org_settings"
    ]
  },
  "projects": [
    {
      "roles": [
        "organization_owner"
      ]
    }
  ]
}

400

Could not determine a unique organization for this request

Media type application/json

object

error

string

error_description

string

Example

{
  "error": "Unauthorized",
  "error_description": "Invalid token"
}

401

Unauthorized

Media type application/json

object

error

string

error_description

string

Example

{
  "error": "Unauthorized",
  "error_description": "Invalid token"
}

500

Internal server error

Media type application/json

object

error

string

error_description

string

Example

{
  "error": "Unauthorized",
  "error_description": "Invalid token"
}