API reference · Identity and tokens

What the caller may do in this organization

GET/v1/orgs/{org}/permissions

Permission: authenticated: any signed-in caller or API token
Operation: iam.permissions.get

Parameters

Name	In	Type	Required	Notes
`org`	path	string	yes	for example `"org_01h455vb4pex5vsknk084sn02q"`
`x-obhut-management-assignment`	header	string	no	Select one staff assignment. Direct membership remains the default. Bound API tokens use their stored source and ignore this selector. For example `"masg_01h455vb4pex5vsknk084sn02q"`

Response 200

Field	Type	Required	Notes
`permissions`	array of string	yes
`directRole`	string or null	yes
`management`	object or null	yes
`management.assignmentId`	string	yes	for example `"masg_01h455vb4pex5vsknk084sn02q"`
`management.linkId`	string	yes	for example `"mlink_01h455vb4pex5vsknk084sn02q"`
`management.providerOrgId`	string	yes	for example `"org_01h455vb4pex5vsknk084sn02q"`

Request shaped from the schemas

curl

curl 'https://api.obhut.io/v1/orgs/org_01h455vb4pex5vsknk084sn02q/permissions' \
  -H "Authorization: Bearer $OBHUT_TOKEN"

Response 200

{
  "permissions": [
    "string"
  ],
  "directRole": "owner",
  "management": {
    "assignmentId": "masg_01h455vb4pex5vsknk084sn02q",
    "linkId": "mlink_01h455vb4pex5vsknk084sn02q",
    "providerOrgId": "org_01h455vb4pex5vsknk084sn02q"
  }
}