ETethiack
organizations

Set the partner access level

Set how much delegated access this organization grants its partner.

Args: organization_id (int): Identifier of the organization. body (PartnerAccessUpdateRequest): The new consent level. db (AsyncSession): Request-scoped database session. context (ActiveContext): Resolved caller identity and scope.

put/v1/organizations/{organization_id}/partner-access

Request

  • Base URL
    https://api.ethiack.com (the document declares no server; this is the origin it was published from)
  • Auth
    none declared

Path parameters

organization_idinteger required

Request body

level'none' | 'read_only' | 'full' required

How much delegated access the org grants its managing partner.

Stored by member NAME (NONE/READ_ONLY/FULL) per the project's enum-column convention; the lowercase value is the wire form that reaches Cerbos principal attributes.

Attributes: NONE: No delegated access (the default; replaces the legacy accept_impersonation = false). READ_ONLY: The partner may operate the org read-only. Enforced by the operating_partner / operating_partner_writer Cerbos composites (ENG-1467): operating_partner grants reads at any access level, while operating_partner_writer additionally requires operating_access == "full", so a READ_ONLY-pinned partner never reaches a write. FULL: The partner may operate the org, reads and writes (models legacy impersonation's write surface).

Response

Successful Response

Changes

No recorded changes to this operation across all 1 revision of this API.