Skip to main content

Create a permission set on a model.

POST 
/v1/catalogs/:catalogId/models/:modelId/permission-sets

Grants the listed users and groups the listed scopes on the model. A model with no permission sets is not restricted: every user can see and query it. Adding the first set restricts the model to the principals its sets name. The names accepted here come from the Identities endpoints: getUsers returns the userName values valid in users, and getGroups the name values valid in groups. A username or group name that does not exist in the identity provider is ignored rather than rejected, and the rest of the set is still applied. Read the set back to confirm which principals were granted.

Request​

Path Parameters

    catalogId stringrequired

    Identifier of the catalog.

    modelId stringrequired

    Identifier of the model within the catalog.

Header Parameters

    Authorization string

Body

required

    name stringrequired

    Possible values: non-empty

    Display name of the permission set. Not required to be unique within the model.

    scopes string[]required

    Possible values: [ctas, discovery, query], >= 1

    Operations the listed principals may perform on the model. ctas allows aggregate creation, discovery allows the model to be listed and browsed, query allows queries against it.

    users string[]

    Possible values: non-empty

    Default value: ``

    Usernames granted the listed scopes. A username that does not exist in the identity provider is ignored; see the operation description.

    groups string[]

    Possible values: non-empty

    Default value: ``

    Group names granted the listed scopes. A group that does not exist in the identity provider is ignored; see the operation description.

Responses​

The permission set has been created.

Schema

    id uuidrequired

    Identifier of the created permission set.

Loading...