PermissionTraceDto

Example

JSON

{
  "identity_id": "string",
  "permission": "string",
  "node_id": "string",
  "allowed": false,
  "denial_reason": "string",
  "effective_node_id": "string",
  "granting_role_ids": [
    "string"
  ],
  "granting_node_ids": [
    "string"
  ],
  "lineage": [
    {
      "node_id": "string",
      "name": "string",
      "node_type": "string",
      "depth": 0,
      "is_target": false,
      "assignments": [
        {
          "assignment_id": "string",
          "role_id": "string",
          "role_name": "string",
          "active": false,
          "effective_from": "string",
          "effective_to": "string",
          "grants_permission": false
        }
      ]
    }
  ]
}

Properties

9 properties 7 required

identity_id string Required

permission string Required

node_id string Required

allowed boolean Required

denial_reason string Optional

nullable

effective_node_id string Optional

The hierarchy node the decision was anchored to.

nullable

granting_role_ids array of string Required

granting_node_ids array of string Required

Lineage node IDs that carry a granting assignment — the inheritance path to highlight in the tree. Empty on a denial.

lineage array of PermissionTraceNodeDto Required

Root-first lineage of the target node, each with the identity's assignments observed at that node.

Was this page helpful?

Tell us how we can improve this guide.