Your suggested change has been received. Thank you.

close

Authorization API (1.0)

Download OpenAPI specification:Download

Endpoint to make authorization decisions based on configured policies and relationship data

Authorization API

Authorize request

Make an authorization decision based on the configured policies.

Authorizations:
bearer
path Parameters
tenant
required
string

Your tenant code.

Request Body schema: application/json
object

The Actor which is attempting the action.

action
string

The action to authorize, e.g. subscription:delete. The Policy with this name will be executed. If the specified Policy does not exist, the response is by default 'deny'.

resource
object

The resource on which the action is attempted. This can be any Resource/Actor defined with the Relationship Management API, or even a resource not known to Scaled Access.

context
object

Any additional context that can be used by the policy to determine its decision.

Responses

Request samples

Content type
application/json
{
  • "subject": {
    },
  • "action": "string",
  • "resource": {
    },
  • "context": { }
}

Response samples

Content type
application/json
{
  • "outcome": "allow",
  • "reason": "string",
  • "obligations": [
    ]
}