Share a universe

Each access to a universe is an access grant: it gives a user, or your whole organization, an access level on the universe.

Access levels

Editing the universe covers renaming it, changing its description and deleting it.

Who can manage access

A READ_WRITE holder can only grant READ_ONLY or READ_WRITE to users of your organization, and revoke the grants they created.

Users with account management rights in your organization can manage access on all its universes, private ones included.

You can only give access to users of your own organization. Access to the universes provided by SESAMm is managed by SESAMm.

The list routes only return the grants you are allowed to see: a READ_WRITE holder sees their own grant and the grants they created, a READ_ONLY holder sees their own grant.

Give a user access to a universe

1. Find the user_id of the user with List Users.
2. Call Grant Access with the identifier of the universe, the user_id as grant_id and the access level:

{
  "grant_id": "3fa85f64-5717-4562-b3fc-2c963f66afa6",
  "access_level": "READ_WRITE"
}

The response contains the new grant and its acl_id, which you need to revoke it.

To give access to your whole organization, set grant_type to ORGANIZATION and grant_id to your organization identifier, the organization_id returned by Get Current User. grant_type defaults to USER.

Change or revoke an access

To remove an access, call Revoke Access with its acl_id. You can find it with List Resource Access Grants.

A user or an organization has only one grant per universe. To change an access level, revoke the grant, then grant the new level.

You cannot revoke the last OWNER of a universe.