Skip to main content
POST
Check permissions

Authorizations

Authorization
string
header
required

Bearer token authentication using OAuth2/OIDC tokens

Body

application/json
checks
object[]
required

List of permission checks to evaluate. Each check specifies an action and a target resource. Maximum 100 checks per request.

Required array length: 1 - 100 elements
subject
string

Principal to evaluate. Can be a user ID, API key ID, or service account clientId. If omitted, defaults to the authenticated caller. Only tenant administrators can specify a subject other than themselves.

Example:

"user-xyz789"

Response

Permission check results.

results
object[]
required

Positional results — results[i] corresponds to checks[i] in the request.