Get Permission Group by ID
GET/authz/v1/permission_group/:id
Queries existing Permission Groups by ID and returns a specific permission group that matches the Permission Group ID
Request
Path Parameters
Permission Group ID
Query Parameters
To include associated roles in the response
Responses
- 200
- 4XX
Successful operation
- application/json
- Schema
- Example (from schema)
Schema
Permission Group Name
Permission Group Description
Possible values: [Default
, Custom
]
Permission Group Type
associatedRoles object
Map of associated role Ids and Names
Map of associated role Ids and Names
features object
List of Prisma Cloud Features
Prisma Cloud Feature Name. Prisma Cloud feature names can be retreived from GET: /authz/v1/feature API Endpoint
operations objectrequired
A mapping of operations and a boolean value representing whether the privilege to perform the operation needs to be granted.
A mapping of operations and a boolean value representing whether the privilege to perform the operation needs to be granted.
acceptAccountGroups
acceptResourceLists
acceptCodeRepositories
Boolean value signifying whether this is a custom (i.e. user-defined) permission group. Is set to true if the attribute value of permissionGroupType is set to CUSTOM
Permission Group ID
{
"name": "string",
"description": "string",
"type": "Default",
"lastModifiedBy": "string",
"lastModifiedTs": 0,
"associatedRoles": {},
"features": {
"featureName": "string",
"operations": {}
},
"acceptAccountGroups": true,
"acceptResourceLists": true,
"acceptCodeRepositories": true,
"custom": true,
"id": "string"
}
Client error
Response Headers
x-redlock-status string
error description
- application/json
- Schema
- Example (from schema)
Schema
Permission Group Name
Permission Group Description
Possible values: [Default
, Custom
]
Permission Group Type
associatedRoles object
Map of associated role Ids and Names
Map of associated role Ids and Names
features object
List of Prisma Cloud Features
Prisma Cloud Feature Name. Prisma Cloud feature names can be retreived from GET: /authz/v1/feature API Endpoint
operations objectrequired
A mapping of operations and a boolean value representing whether the privilege to perform the operation needs to be granted.
A mapping of operations and a boolean value representing whether the privilege to perform the operation needs to be granted.
acceptAccountGroups
acceptResourceLists
acceptCodeRepositories
Boolean value signifying whether this is a custom (i.e. user-defined) permission group. Is set to true if the attribute value of permissionGroupType is set to CUSTOM
Permission Group ID
{
"name": "string",
"description": "string",
"type": "Default",
"lastModifiedBy": "string",
"lastModifiedTs": 0,
"associatedRoles": {},
"features": {
"featureName": "string",
"operations": {}
},
"acceptAccountGroups": true,
"acceptResourceLists": true,
"acceptCodeRepositories": true,
"custom": true,
"id": "string"
}