{
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"created_at": "2023-11-07T05:31:56Z",
"updated_at": "2023-11-07T05:31:56Z",
"user": "<string>",
"group": "<string>",
"secret": "<string>",
"live_connection": "<string>",
"granted_by": "<string>",
"tool_scope": "<unknown>"
}Secrets & live connections
Object permission object
A single grant on a secret or a live connection.
The shape of a grant on the axis that sits outside the Catalog. Same skeleton as the Catalog permission object, plus one field the Catalog does not have.
Exactly one of
| Field | Type | Notes |
|---|---|---|
id | UUID | |
permission_level | viewer | editor | manager | |
tool_scope | array of strings, or null | Live connections only. null means the connection’s full available set, and keeps tracking it as tools change. |
user | UUID | Expandable. |
group | UUID | Expandable. |
secret | UUID | Expandable. |
live_connection | UUID | Expandable. |
granted_by | UUID | Expandable. |
created_at | datetime | |
updated_at | datetime |
user / group is set, and exactly one of secret / live_connection.
A
manager grant never carries a tool_scope — a manager holds the full set by definition. Reading tool_scope: null on a manager row therefore tells you nothing about intent.A grant of access to a secret or a live connection.
manager- Managereditor- Editorviewer- Viewer
Available options:
manager, editor, viewer User (Expandable)
Group (Expandable)
Secret (Expandable)
Live connection (Expandable)
Granted by (Expandable)
Live connections only: subset of the connection's available tools this access may use (NULL = the full available set, tracking it as it changes; MANAGER grants are always NULL)
Was this page helpful?