Permission APIs
The Permissions interface enables the management and querying of permissions within Venafi Trust Protection Platformβ’. Permissions grant principals (users and groups) privileges to objects within Trust Protection Platform. In the Permissions interface, when a HTTP GET retrieves the permissions for a specific principal, both the effective and Implicit Permissions are returned.POST, PUT, or DELETE operations in this interface can successfully apply Effective Permissions parameters to principals in different identity providers. What is the difference between Credentials, Permissions, and Identity?
- Credentials endpoints manage certificate and other activities. For more information, see Credentials APIs.
- Identity endpoints manage Venafi users. For more information, see Identity APIs.
- Permissions endpoints grant principals (users and groups) privileges to objects within Trust Protection Platform.
ποΈ Get trustees
_Required scope: security_
ποΈ Get assigned permissions
_Required scope: security_
ποΈ Get effective permissions
_Required scope: security_
ποΈ Grant permissions
_Required scope: security:manage_
ποΈ Revoke permissions
_Required scope: security:delete_
ποΈ Update permissions
_Required scope: security:manage_
ποΈ Refresh permissions
_Required scope: security_
ποΈ Gets object trustees
Returns a list of identities with permission to the object
ποΈ Get assigned permissions of a local identity
Returns the assigned permissions of the local identity for the object
ποΈ Get effective permissions of local identity
Returns the effective permissions of the local principal for the object
ποΈ Get assigned permissions of an identity
Returns the assigned permissions of the principal
ποΈ Delete permissions
Deletes the permissions of the principal
ποΈ Add permissions
Adds permissions to an object
ποΈ Update permissions
Update permissions to an object
ποΈ Get effective permissions of an identity
Returns the effective permissions of the principal
ποΈ Gets the effective permissions of the session's user for the given object.
Returns the effective permissions of the caller
ποΈ Delete permissions
Deletes the permissions of the local principal
ποΈ Add permissions
Adds permissions to an object
ποΈ Update permissions
Update permissions to an object