Search
K
plta-permissions-api-cbz

Retrieve the access rights of a user

Retrieve the access rights of a user, held either directly or through role membership. An access right is a combination of an Action (with its hierarchy) and a Resource.

get
https://dev.api.sanofi.com/permissions/users/{userId}/accessRights

Path Parameters

userIdstringrequired

The id of the user, as stored in IDP. For Sanofi internal user, it would be the oid (Unique identifier of the user in Azure AD)

Response

application/json

Success

An access right, tagged with where it comes from - held directly by the user, or inherited through membership of a role.

actionNamestringrequired

Name of the action.

Example:read_narrative, write_compound

resourceNamestringrequired

Name of the resource.

Example:compound_1245

sourcestringrequiredread-only

Where this access right comes from. “DIRECT” if held directly by the user, or “ROLE#” if inherited through membership of that role.

Example:DIRECT, ROLE#clintrials:study-reader

userIdstringrequiredread-only

The id of the user, as stored in IDP. For Sanofi internal user, it would be the oid (Unique identifier of the user in Azure AD). Always equal to the userId path parameter.

get/users/{userId}/accessRights
 
application/json