Skip to content

Permission schemes overview ​

Permission schemes are the named bundles of grants a role can carry.

The permission scheme object ​

Attributes ​

  • description string

    Free-form description.

  • id string (uuid)

    Unique identifier.

  • is_system boolean

    Whether the scheme is a built-in system scheme.

  • name string

    Display name.

  • namespace string

    The namespace.

  • permissions array of string

    The permissions.

  • slug string

    The slug.

  • sort_order integer

    Manual ordering weight. Lower sorts first.

  • updated_at string (date-time)

    When the permission scheme was last updated.

Response200
json
{
  "description": "What this is for.",
  "id": "b7e42a19-3c5d-4f80-9a26-8d1c0f4e7b53",
  "is_system": false,
  "name": "Example name",
  "namespace": "instance",
  "permissions": ["example"],
  "slug": "my-team",
  "sort_order": 65535,
  "updated_at": "2026-01-14T09:22:41.478363Z"
}

Endpoints ​

MethodPathDescription
GET/api/v2/workspaces/{slug}/permission-schemes/List permission schemes
GET/api/v2/workspaces/{slug}/permission-schemes/{pk}/Get a permission scheme

Response shaping ​

Every permission scheme read accepts ?fields= for sparse responses. See Sparse fields. Errors follow the shared problem+json contract.