---
title: "SourcedAccessRight"
url: "https://dev.developer-internal.sanofi.com/apis/plta-permissions-api-cbz/versions/88cdfef8-3b56-44ca-883d-5b15378e5a3a/schemas/SourcedAccessRight"
---

> Full API specification: https://dev.developer-internal.sanofi.com/apis/plta-permissions-api-cbz/versions/88cdfef8-3b56-44ca-883d-5b15378e5a3a.md

# SourcedAccessRight

An access right, tagged with where it comes from - held directly by the user, or inherited through membership of a role.

## OpenAPI definition

```yaml
openapi: 3.1.0
info:
  title: Permission Administration API
  version: 1.5.0
servers:
  - url: https://dev.api.sanofi.com/permissions
components:
  schemas:
    SourcedAccessRight:
      description: An access right, tagged with where it comes from - held directly by
        the user, or inherited through membership of a role.
      properties:
        actionName:
          description: Name of the action.
          examples:
            - read_narrative
            - write_compound
          type: string
        resourceName:
          description: Name of the resource.
          examples:
            - compound_1245
          type: string
        source:
          description: Where this access right comes from. "DIRECT" if held directly by
            the user, or "ROLE#<roleName>" if inherited through membership of
            that role.
          examples:
            - DIRECT
            - ROLE#clintrials:study-reader
          readOnly: true
          type: string
        userId:
          description: The id of the user, as stored in IDP. For Sanofi internal user, it
            would be the oid (Unique identifier of the user in Azure AD). Always
            equal to the userId path parameter.
          readOnly: true
          type: string
      required:
        - actionName
        - resourceName
        - userId
        - source
      type: object
```