Skip to main content
POST
Create a grant

Authorizations

Authorization
string
header
required

An opaque access token from /login or /refresh. Tokens are checked against the database on every request, so revocation is immediate.

Body

application/json
user_id
string<uuid>
required
permission
string
required
Example:

"host.access"

target_kind
enum<string>
required
Available options:
credential,
host,
group,
set,
backup,
global
target_id
string<uuid>

Required for every target_kind except global; omit for global.

Response

Grant created

id
string<uuid>
user_id
string<uuid>
permission
string
target_kind
enum<string>
Available options:
credential,
host,
group,
set,
backup,
global
target_id
string<uuid> | null
created_at
string<date-time>