OPopal
resources

POST /resources/{resource_id}/custom-access-levels

Changed on

Creates a custom access level on a resource. If the resource is a parent type, the role is created on all child resources.

Request

  • Base URL
    https://api.opal.dev/v1
  • Auth
    HTTP bearer

Path parameters

resource_idstring uuid required

The ID of the resource.

Request body

policystring nullable

The policy document.

requestable_by_defaultboolean

Whether the role is requestable. Defaults to false.

stackable_sensitivity_indexinteger nullable

The sensitivity index. Null to leave unranked.

Example request

{
  "access_level": {
    "access_level_name": "AdminRole",
    "access_level_remote_id": "arn:aws:iam::590304332660:role/AdministratorAccess"
  }
}

Response

The created custom access level.

resource_custom_access_level_idstring uuid required

The unique ID of the custom access level.

resource_idstring uuid required

The resource this access level belongs to.

policystring nullable

The policy document for this access level.

requestable_by_defaultboolean required

Whether this role is requestable.

stackable_sensitivity_indexinteger nullable

The sensitivity index in the access hierarchy. Null if unranked.

member_resource_idsstring[] nullable

When addressed via a parent resource, lists the child resource IDs that back this aggregated entry.

created_atstring date-time
updated_atstring date-time

Example response

{
  "access_level": {
    "access_level_name": "AdminRole",
    "access_level_remote_id": "arn:aws:iam::590304332660:role/AdministratorAccess"
  }
}

Changes