Changelog - 3.36.0
Released on
Permissions API
A new Permissions API lets you manage who can access your universes. You can give a specific user of your organization, or your whole organization, an access level on a universe, and revoke it:
READ_ONLY: read the universeREAD_WRITE: also add and remove entities, and give READ_ONLY or READ_WRITE access to other usersOWNER: also rename and delete the universe, and manage its access
A universe can now have several owners, and always keeps at least one. Users with account management rights in your organization can manage access on all its universes, private ones included. See Share a universe for the details.
The Users routes help you find the identifiers of the users of your organization. They are experimental and may change.
New routes:
- List Access Grants
- List Resource Access Grants
- Grant Access
- Revoke Access
- Get Current User
- List Users
Access level on universes
The universe routes now return an access_level field: your effective access level on the universe (OWNER, READ_WRITE or READ_ONLY), so you know what you can do with it without calling the Permissions API.
The owner_id and company_ids fields are deprecated: use access_level and the Permissions API instead.
Impacted routes: