Permissions
SDK

Check resource permissions

Evaluate multiple Cerbos policy actions for a resource. The server resolves resource attributes from the database and builds the ABAC principal from the authenticated user.

post/v3/permissions/check

Request

  • Base URL: https://api.zephyr-cloud.io
  • URL: https://api.zephyr-cloud.io/v3/permissions/check
  • Auth: HTTP bearer

Request body

resourceKind'organization' | 'project' | 'application' | 'subscription' | 'team' | 'people' required

Cerbos resource kind

resourceIdstring required

Resource identifier (UUID or slug)

organizationIdstring

Organization UUID or slug. Required when resourceId is a name (not UUID) for project, application, or team resources to avoid cross-org ambiguity.

actionsstring[] required

Actions to check

Example request

{
  "resourceKind": "organization",
  "resourceId": "my-org",
  "organizationId": "my-org",
  "actions": [
    "update_organization",
    "delete_organization"
  ]
}

Response

Permission check results

Example response

{
  "value": {
    "results": {
      "update_organization": true,
      "delete_organization": false
    }
  }
}

Changes

No recorded changes to this operation across all 1 revision of this API.