---
title: "SourcedAdminRight"
url: "https://dev.developer-internal.sanofi.com/apis/plta-permissions-api-cbz/versions/88cdfef8-3b56-44ca-883d-5b15378e5a3a/schemas/SourcedAdminRight"
---

> Full API specification: https://dev.developer-internal.sanofi.com/apis/plta-permissions-api-cbz/versions/88cdfef8-3b56-44ca-883d-5b15378e5a3a.md

# SourcedAdminRight

An admin right, tagged with where it comes from - held directly by the user, or inherited through membership of a role.

## OpenAPI definition

```yaml
openapi: 3.1.0
info:
  title: Permission Administration API
  version: 1.5.0
servers:
  - url: https://dev.api.sanofi.com/permissions
components:
  schemas:
    SourcedAdminRight:
      description: An admin right, tagged with where it comes from - held directly by
        the user, or inherited through membership of a role.
      properties:
        actionRestriction:
          description: Name of the action that restricts the action usable in this
            operation to a specific hierarchy. Absent if the operation is not
            restricted to a specific action.
          examples:
            - write_narrative
            - read_compound
          type: string
        adminRightId:
          description: The unique identifier of the underlying admin right, for use with
            DELETE /adminRights/{adminRightId}. Only present when source is
            "DIRECT" - a role-derived grant is deleted through DELETE
            /roles/{roleName}/adminGrants/{adminGrantId} instead, which is a
            different id.
          format: uuid
          readOnly: true
          type: string
        operationName:
          description: Name of the operation.
          examples:
            - manageActions
            - manageResources
            - manageAccessRights
            - manageRoles
          type: string
        resourceRestriction:
          description: Name of the resource that restricts the resource usable in this
            operation to a specific hierarchy. Absent if the operation is not
            restricted to a specific resource.
          examples:
            - compound_1245
            - study_1245
          type: string
        source:
          description: Where this admin right comes from. "DIRECT" if held directly by the
            user, or "ROLE#<roleName>" if inherited through membership of that
            role.
          examples:
            - DIRECT
            - ROLE#clintrials:study-reader
          readOnly: true
          type: string
        userId:
          description: The id of the user, as stored in IDP. For Sanofi internal user, it
            would be the oid (Unique identifier of the user in Azure AD). Always
            equal to the userId path parameter.
          readOnly: true
          type: string
      required:
        - operationName
        - userId
        - source
      type: object
```