Get All Permission Groups
GET/authz/v1/permission_group
Returns the list of all existing Default and Custom Permission Groups.
Request
Query Parameters
To include associated roles in the response
To include permitted features in the response
Responses
- 200
- 4XX
Successful operation
- application/json
- Schema
- Example (from schema)
Schema
- Array [
- ]
Permission Group Name
Permission Group Description
Possible values: [Default
, Custom
]
Permission Group Type
associatedRoles object
Map of associated role Ids and Names
Map of associated role Ids and Names
features object
List of Prisma Cloud Features
Prisma Cloud Feature Name. Prisma Cloud feature names can be retreived from GET: /authz/v1/feature API Endpoint
operations objectrequired
A mapping of operations and a boolean value representing whether the privilege to perform the operation needs to be granted.
A mapping of operations and a boolean value representing whether the privilege to perform the operation needs to be granted.
acceptAccountGroups
acceptResourceLists
acceptCodeRepositories
Boolean value signifying whether this is a custom (i.e. user-defined) permission group. Is set to true if the attribute value of permissionGroupType is set to CUSTOM
Permission Group ID
[
{
"name": "string",
"description": "string",
"type": "Default",
"lastModifiedBy": "string",
"lastModifiedTs": 0,
"associatedRoles": {},
"features": {
"featureName": "string",
"operations": {}
},
"acceptAccountGroups": true,
"acceptResourceLists": true,
"acceptCodeRepositories": true,
"custom": true,
"id": "string"
}
]
Client error
Response Headers
x-redlock-status string
error description
- application/json
- Schema
- Example (from schema)
Schema
- Array [
- ]
Permission Group Name
Permission Group Description
Possible values: [Default
, Custom
]
Permission Group Type
associatedRoles object
Map of associated role Ids and Names
Map of associated role Ids and Names
features object
List of Prisma Cloud Features
Prisma Cloud Feature Name. Prisma Cloud feature names can be retreived from GET: /authz/v1/feature API Endpoint
operations objectrequired
A mapping of operations and a boolean value representing whether the privilege to perform the operation needs to be granted.
A mapping of operations and a boolean value representing whether the privilege to perform the operation needs to be granted.
acceptAccountGroups
acceptResourceLists
acceptCodeRepositories
Boolean value signifying whether this is a custom (i.e. user-defined) permission group. Is set to true if the attribute value of permissionGroupType is set to CUSTOM
Permission Group ID
[
{
"name": "string",
"description": "string",
"type": "Default",
"lastModifiedBy": "string",
"lastModifiedTs": 0,
"associatedRoles": {},
"features": {
"featureName": "string",
"operations": {}
},
"acceptAccountGroups": true,
"acceptResourceLists": true,
"acceptCodeRepositories": true,
"custom": true,
"id": "string"
}
]