models module route (requires models:model-access:admin)

PUT

/v1/m/models/model-access/{id}

curl --request PUT \
  --url https://example.com/v1/m/models/model-access/example \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "budget_ref": "example", "description": "example", "effect": "", "id": "example", "subject_kind": "user", "subject_ref": "example", "surfaces": [ "" ], "target_kind": "model", "target_ref": "example", "workspace_ref": "example" }'

• this engine

Replaces one model-access rule; its subject and target references are validated.

Authorizations

• bearerAuth

Parameters

Path Parameters

id

required

string

Path parameter id.

Header Parameters

X-Olivares-Tenant

string format: uuid

Target tenant id; required when the principal can act in more than one tenant.

Request Body ^required

Media type application/json

object

budget_ref

string

description

string

effect

string

default: allow

Allowed values: "" allow forbid

id

string

subject_kind

required

string

Allowed values: user role user_group agent_group

subject_ref

required

string

>= 1 characters /\S/

surfaces

Array<string>

Allowed values: "" direct bedrock-mantle bedrock-legacy vertex foundry claude-platform-aws

target_kind

required

string

Allowed values: model model_group

target_ref

required

string

>= 1 characters /\S/

workspace_ref

string

Responses

200

OK

Media type application/json

object

Example ^generated

{}

400

Bad request

Media type application/json

object

Example ^generated

{}

401

Unauthenticated

Media type application/json

object

Example ^generated

{}

403

Forbidden

Media type application/json

object

Example ^generated

{}

404

Not found

Media type application/json

object

Example ^generated

{}

409

Conflict / setup required

Media type application/json

object

Example ^generated

{}

429

Rate limited

Media type application/json

object

Example ^generated

{}