GOgocrisp
platform

Explain Fga Check

Explain how a service account obtained an FGA relation on an object when allowed.

Runs check first; when denied, returns allowed=false with no graph. When allowed, recursively walks OpenFGA expand trees pruned to branches that prove the requested service account.

post/api/platform/service-accounts/{service_account_id}/fga-check/explain

Request

  • Base URL
    https://app.gocrisp.com (the document declares no server; this is the origin it was published from)
  • URL
    https://app.gocrisp.com/api/platform/service-accounts/{service_account_id}/fga-check/explain
  • Auth
    OAuth 2
    Authorization code: https://login.gocrisp.com/authorize
    Token URL: https://login.gocrisp.com/oauth/token

Path parameters

service_account_idstring required

Service account whose principal is checked

Request body

objectTypestring required
objectIdstring required
relationstring required

Response

Successful Response

allowedboolean required
userstring required
relationstring required
objectstring required
summarystring nullable
truncatedboolean
warningsstring[]

Changes

No recorded changes to this operation across all 26 revisions of this API.