Skip to main content
A Catalog grant is always one recipient on one resource at one level. There is no row that means “these three tables” — Assign Permissions expands a bulk request into individual grants, and each one is an object of this shape. Exactly one of user / group is set, and exactly one of layer / folder / table / volume. The rest are null. That is a database constraint, not a convention, so you can branch on it safely. Any field marked expandable can be inflated into the full object with ?expand= — see Expanding Responses.
Field types and formats are also rendered on the operation pages, for example under the response of List Permissions.
id
string<uuid>
required
read-only
permission_level
enum<string>
required
  • manager - Manager
  • editor - Editor
  • viewer - Viewer
Available options:
manager,
editor,
viewer
created_at
string<date-time>
required
read-only
updated_at
string<date-time>
required
read-only
user
string
required
read-only

User (Expandable)

group
string
required
read-only

Group (Expandable)

layer
string
required
read-only

Layer (Expandable)

folder
string
required
read-only

Folder (Expandable)

table
string
required
read-only

Table (Expandable)

volume
string
required
read-only

Volume (Expandable)

granted_by
string
required
read-only

Granted by (Expandable)