governance module route (requires governance:rbac:admin)

POST

/v1/m/governance/rbac/inheritance-filters

curl --request POST \
  --url https://example.com/v1/m/governance/rbac/inheritance-filters \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "created_by": "example", "id": "example", "scope_class": "example", "scope_ref": "example", "scope_tree": "workspace" }'

• this engine

Stores one inheritance filter on a workspace, agent group or folder for one resource class. Only an admin of the node may set it. Rights that reach the node from above stop applying to that class there; grants at or below it and forbids are unchanged.

Authorizations

• bearerAuth
• browserSession

Parameters

Header Parameters

X-Olivares-Tenant

string format: uuid

Target tenant id; required when the principal can act in more than one tenant.

Request Body ^required

Media type application/json

object

created_by

Any of:

string

Output field accepted by the DTO but ignored on create.

string

null

null

id

Any of:

string

Output field accepted by the DTO but ignored on create.

string

null

null

scope_class

required

The resource kind of the scope tree whose inherited rights the node stops.

string

/.*\S.*/

scope_ref

required

Identifies an existing workspace, agent group or folder resource.

string

/.*\S.*/

scope_tree

required

string

Allowed values: workspace agent_group folder

Responses

200

OK

Media type application/json

object

Example ^generated

{}

400

Bad request

Media type application/json

object

Example ^generated

{}

401

Unauthenticated

Media type application/json

object

Example ^generated

{}

403

Forbidden

Media type application/json

object

Example ^generated

{}

404

Not found

Media type application/json

object

Example ^generated

{}

409

Conflict / setup required

Media type application/json

object

Example ^generated

{}

429

Rate limited

Media type application/json

object

Example ^generated

{}