Is there a way to see all the Roles that have permission to perform a certain action on a given Type?

#1

I am interested in confirming that a certain action is prohibited or allowed across a large series of Roles/AdminGroups. Is there an API that does something like:

TypeName.RolesThatPermitAction(“action”)
Returns the Roles that permit a given action on the type.

0 Likes

#2

See the “Authorizer” type, in particular you may be interested in:

  1. actionPermissions -> Get the Permissions associated with the given action in the tenant and tag specified.
  2. actionGroups -> Get the authorization action groups for given action.
1 Like

#3

Authorizer.actionAuthzRoles() -> Get the list of roles that are authorized to invoke given action.

1 Like