---
title: "POST /orgs/{org_id}/iam/check"
method: POST
path: "/orgs/{org_id}/iam/check"
tags: ["iam"]
---

# POST /orgs/{org_id}/iam/check

`POST /orgs/{org_id}/iam/check`

Simulate authorization checks against a user's effective grants.

## Path parameters

- `org_id` string, required

## Request body

- CheckReqBody
  - `checks` CheckInput[], required — Authorization checks to evaluate. Up to 50 per request.
    - `action` string, required — IAM action key (for example `projects.envs.deploy`).
    - `resource` string, nullable — Concrete resource path for typed actions, or omit for org-wide actions.
  - `user_id` string, nullable — Target user to evaluate. Defaults to the caller.

## Response `200`

Per-check decisions + matched grants

- CheckResBody
  - `results` CheckResult[], required — One result per input check, in input order.
    - `action` string, required
    - `decision` 'allow' | 'deny_overrides' | 'no_allow' | 'superadmin', required
    - `matched_allows` GrantAttribution[], required — Grants that matched as `allow`. Empty for `no_allow` / `superadmin`.
      - `attachment_scope` string, nullable
      - `grant_resource` string, nullable
      - `role_id` string, required
      - `role_name` string, required
    - `matched_denies` GrantAttribution[], required — Grants that matched as `deny`. Non-empty only for `deny_overrides`.
      - `attachment_scope` string, nullable
      - `grant_resource` string, nullable
      - `role_id` string, required
      - `role_name` string, required
    - `resource` string, nullable
  - `user_id` string, required — Echoes the evaluated user id (input or caller).

## Other responses

- `403` — Forbidden
- `422` — Invalid request

## Changes

- **2026-06-05** `45de91fcec33` — 1 info
  - endpoint added
- **2026-03-16** `eb2c08128881` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/timbal-ai/apis/timbal-platform-api/changes/orgs/:org_id/iam/check/post.md)

---

[API](https://skmtc.dev/timbal-ai/apis/timbal-platform-api.md) · [All operations](https://skmtc.dev/timbal-ai/apis/timbal-platform-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/timbal-ai/timbal-platform-api/revisions/dd7e398ce0d3/schema)