---
title: "Run Fga Check"
method: POST
path: "/api/platform/service-accounts/{service_account_id}/fga-check"
tags: ["platform"]
---

# Run Fga Check

`POST /api/platform/service-accounts/{service_account_id}/fga-check`

## Request

- Base URL: `https://app.gocrisp.com` (the document declares no server; this is the origin it was published from)
- URL: `https://app.gocrisp.com/api/platform/service-accounts/{service_account_id}/fga-check`
- Auth: OAuth 2
  - Authorization code: `https://login.gocrisp.com/authorize`
  - Token URL: `https://login.gocrisp.com/oauth/token`

Run an ad-hoc FGA ``check`` for a service account against an arbitrary object.

The identifier is resolved to its canonical ``service_account:<segment>``
subject (``gcpsa|{uniqueId}`` when GCP-mapped, else the dock id) and the
check is evaluated against the requested relation and object. Requires
``editor`` on the ``members-service-accounts`` module instance (POST maps to the editor
relation on the parent router gate).

## Path parameters

- `service_account_id` string, required: Service account whose principal is checked

## Request body

- FgaCheckRequest: Run an FGA ``check`` for a given principal against an arbitrary object.
  - `objectType` string, required
  - `objectId` string, required
  - `relation` string, required

## Response `200`

Successful Response

- FgaCheckResponse: Result of an FGA ``check`` for a principal.
  - `allowed` boolean, required
  - `user` string, required
  - `relation` string, required
  - `object` string, required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/gocrisp/apis/crisp-app-dock.md) - [All operations](https://skmtc.dev/gocrisp/apis/crisp-app-dock/llms.txt) - [OpenAPI document](https://skmtc.dev/gocrisp/apis/crisp-app-dock/revisions/28638f87e7d4?raw)