GOgocrisp
platform

Run Fga Check

Run an ad-hoc FGA check for a service account against an arbitrary object.

The identifier is resolved to its canonical service_account:<segment> subject (gcpsa|{uniqueId} when GCP-mapped, else the dock id) and the check is evaluated against the requested relation and object. Requires editor on the members-service-accounts module instance (POST maps to the editor relation on the parent router gate).

post/api/platform/service-accounts/{service_account_id}/fga-check

Request

  • Base URL
    https://app.gocrisp.com (the document declares no server; this is the origin it was published from)
  • URL
    https://app.gocrisp.com/api/platform/service-accounts/{service_account_id}/fga-check
  • Auth
    OAuth 2
    Authorization code: https://login.gocrisp.com/authorize
    Token URL: https://login.gocrisp.com/oauth/token

Path parameters

service_account_idstring required

Service account whose principal is checked

Request body

objectTypestring required
objectIdstring required
relationstring required

Response

Successful Response

allowedboolean required
userstring required
relationstring required
objectstring required

Changes

No recorded changes to this operation across all 26 revisions of this API.