Permissions

Debug permission evaluation for a specific operation

Get step-by-step evaluation of permissions for a user attempting a specific operation on a resource, showing which policies were evaluated and why the decision was made. Only admins can debug other users' permission evaluations.

get/v1/permissions/debug/evaluate

Request

  • Base URL: https://demo.getcollate.io/api
  • URL: https://demo.getcollate.io/api/v1/permissions/debug/evaluate
  • Auth: HTTP bearer

Query parameters

userstring required

Name of the user to evaluate permissions for

resourcestring required

Type of resource (e.g., table, database, pipeline)

resourceIdstring

UUID or Fully Qualified Name (FQN) of the specific resource instance (optional)

operation'All' | 'Create' | 'BulkCreate' | 'CreateIngestionPipelineAutomator' | 'CreateTests' | 'Delete' | 'ViewAll' | 'ViewBasic' | 'ViewUsage' | 'ViewTests' | 'ViewQueries' | 'ViewDataProfile' | 'ViewProfilerGlobalConfiguration' | 'ViewSampleData' | 'ViewTestCaseFailedRowsSample' | 'ViewCustomFields' | 'EditAll' | 'BulkUpdate' | 'EditCustomFields' | 'EditDataProfile' | 'EditDescription' | 'EditDisplayName' | 'EditLineage' | 'EditEntityRelationship' | 'EditPolicy' | 'EditOwners' | 'EditQueries' | 'EditReviewers' | 'EditRole' | 'EditSampleData' | 'EditStatus' | 'EditTags' | 'EditGlossaryTerms' | 'EditTeams' | 'EditTier' | 'EditCertification' | 'CreateTask' | 'EditTask' | 'EditTests' | 'EditUsage' | 'EditUsers' | 'EditLifeCycle' | 'EditKnowledgePanel' | 'EditPage' | 'EditIngestionPipelineStatus' | 'EditUserNotificationTemplate' | 'DeleteTestCaseFailedRowsSample' | 'Deploy' | 'Trigger' | 'Kill' | 'GenerateToken' | 'EditScim' | 'CreateScim' | 'DeleteScim' | 'ViewScim' | 'Impersonate' | 'AuditLogs' | 'ViewTestDefinitionLibrary' | 'EditTestDefinitionLibrary' | 'ResolveTask' | 'CloseTask' | 'ReassignTask' required

Operation to check (e.g., VIEW_ALL, EDIT_ALL, DELETE)

Response

Permission evaluation debug information

resourcestring
resourceIdstring
operation'All' | 'Create' | 'BulkCreate' | 'CreateIngestionPipelineAutomator' | 'CreateTests' | 'Delete' | 'ViewAll' | 'ViewBasic' | 'ViewUsage' | 'ViewTests' | 'ViewQueries' | 'ViewDataProfile' | 'ViewProfilerGlobalConfiguration' | 'ViewSampleData' | 'ViewTestCaseFailedRowsSample' | 'ViewCustomFields' | 'EditAll' | 'BulkUpdate' | 'EditCustomFields' | 'EditDataProfile' | 'EditDescription' | 'EditDisplayName' | 'EditLineage' | 'EditEntityRelationship' | 'EditPolicy' | 'EditOwners' | 'EditQueries' | 'EditReviewers' | 'EditRole' | 'EditSampleData' | 'EditStatus' | 'EditTags' | 'EditGlossaryTerms' | 'EditTeams' | 'EditTier' | 'EditCertification' | 'CreateTask' | 'EditTask' | 'EditTests' | 'EditUsage' | 'EditUsers' | 'EditLifeCycle' | 'EditKnowledgePanel' | 'EditPage' | 'EditIngestionPipelineStatus' | 'EditUserNotificationTemplate' | 'DeleteTestCaseFailedRowsSample' | 'Deploy' | 'Trigger' | 'Kill' | 'GenerateToken' | 'EditScim' | 'CreateScim' | 'DeleteScim' | 'ViewScim' | 'Impersonate' | 'AuditLogs' | 'ViewTestDefinitionLibrary' | 'EditTestDefinitionLibrary' | 'ResolveTask' | 'CloseTask' | 'ReassignTask'
allowedboolean
finalDecisionstring

Changes

No recorded changes to this operation across all 1 revision of this API.