---
title: "Batch Check Catalog Actions"
method: POST
path: "/management/v1/action/batch-check"
tags: ["authorization"]
---

# Batch Check Catalog Actions

`POST /management/v1/action/batch-check`

## Request

- Base URL: `https://localhost`
- URL: `https://localhost/management/v1/action/batch-check`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/lakekeeper/apis/lakekeeper-management-api/docs/management/v1/action/batch-check/post.ts> (a function with typed inputs; its response is checked against the schema)

Performs authorization checks for multiple catalog actions in a single request.
This endpoint allows checking permissions across different resource types (servers, projects,
warehouses, namespaces, tables, and views) efficiently.

The endpoint supports:
- Checking actions for different identities (users or roles)
- Mixing different resource types in a single batch
- Optional error-on-not-found behavior (default: treat missing resources as denied)

Each check in the request can optionally override the identity being checked.
If no identity is specified, the current user's identity is used.

## Request body

- CatalogActionsBatchCheckRequest
  - `checks` CatalogActionCheckItem[], required: List of checks to perform
    - `id` string, nullable: Optional identifier for this check (returned in response). If not specified, the index in the request array will be used.
    - `identity` union: Identifies a user or a role
      - object: Id of the user
        - `user` string, required: Id of the user
      - object: Id of the role
        - `role` string, uuid, required: Id of the role
    - `operation` union, required: Represents an action on an object
      - object
        - `server` object, required
          - `action` union, required
            - object: Can create items inside the server (can create Warehouses).
              - …
            - object: Can update all users on this server.
              - …
            - object: Can delete all users on this server.
              - …
            - object: Can List all users on this server.
              - …
            - object: Can provision user
              - …
      - object
        - `project` object, required
          - `action` union, required
            - object
              - …
            - object
              - …
            - object
              - …
            - object
              - …
            - object
              - …
            - object
              - …
            - object
              - …
            - object
              - …
            - object
              - …
            - object
              - …
            - object
              - …
            - object
              - …
            - object
              - …
            - object
              - …
          - `project-id` string, uuid, nullable
      - object
        - `warehouse` object, required
          - `action` union, required
            - object
              - …
            - object
              - …
            - object
              - …
            - object
              - …
            - object
              - …
            - object
              - …
            - object
              - …
            - object
              - …
            - object
              - …
            - object
              - …
            - object
              - …
            - object
              - …
            - object
              - …
            - object
              - …
            - object
              - …
            - object
              - …
            - object
              - …
            - object
              - …
            - object
              - …
            - object
              - …
            - object
              - …
            - object
              - …
          - `warehouse-id` string, uuid, required
      - object
        - `namespace` union, required
          - object
            - `namespace-id` string, uuid, required
            - `warehouse-id` string, uuid, required
            - `action` union, required
              - …
          - object
            - `namespace` string[], required
            - `warehouse-id` string, uuid, required
            - `action` union, required
              - …
      - object
        - `table` union, required
          - object
            - `table-id` string, uuid, required
            - `warehouse-id` string, uuid, required
            - `action` union, required
              - …
          - object
            - `namespace` string[], required
            - `table` string, required: Name of the table, view, or generic table.
            - `warehouse-id` string, uuid, required
            - `action` union, required
              - …
      - object
        - `view` union, required
          - object
            - `table-id` string, uuid, required
            - `warehouse-id` string, uuid, required
            - `action` union, required
              - …
          - object
            - `namespace` string[], required
            - `table` string, required: Name of the table, view, or generic table.
            - `warehouse-id` string, uuid, required
            - `action` union, required
              - …
      - object
        - `generic-table` union, required
          - object
            - `table-id` string, uuid, required
            - `warehouse-id` string, uuid, required
            - `action` union, required
              - …
          - object
            - `namespace` string[], required
            - `table` string, required: Name of the table, view, or generic table.
            - `warehouse-id` string, uuid, required
            - `action` union, required
              - …
  - `error-on-not-found` boolean: If true, return 404 error when resources are not found. If false, treat missing resources as denied (allowed = false). Defaults to false.

## Response `200`

Batch check results

- CatalogActionsBatchCheckResponse
  - `results` CatalogActionsBatchCheckResult[], required
    - `allowed` boolean, required
    - `id` string, nullable

## Other responses

- `4XX`

---

[API](https://skmtc.dev/lakekeeper/apis/lakekeeper-management-api.md) - [All operations](https://skmtc.dev/lakekeeper/apis/lakekeeper-management-api/llms.txt) - [OpenAPI document](https://skmtc.dev/lakekeeper/apis/lakekeeper-management-api/revisions/c5cb9a12a98c?raw)