AdminGrant
objectAn admin right (an operation, with optional action/resource restrictions) attached to a role. Every member of the role inherits it. The restrictions must be within the role’s declared scope. The caller must already hold an admin right covering the exact operation and restrictions being granted.
Name of the action that will restrict the action usable in this operation to a specific hierarchy, within the role’s scope.
Example:write_narrative, read_compound
The unique identifier of the admin grant, mostly for deletion purpose.
Name of the operation.
Example:manageActions, manageResources, manageAccessRights
Name of the resource that will restrict the resource usable in this operation to a specific hierarchy, within the role’s scope.
Example:compound_1245, study_1245
The name of the role this grant is attached to, as given in the path.