What the caller holds in the organization, from grant. (any member)

The caller's own holdings from grant. (canon mn-9rzonp v27, a self read): grant.'s holdings read with the subject fixed to the caller's own Zitadel subject, proxied read-only with this API's own grant. credential. Any member of the organization. The route takes no subject: a request naming one is 400 invalid_subject and grant. is not called. Answers 404 exactly as an unknown route while the organization's effective grant capability flag is off. 503 grant_unavailable when grant. is not configured or does not answer; 403 grant_subject_unavailable when the caller has no Zitadel subject to send.