Skip to main content
GET
Read a resource access list

Authorizations

Authorization
string
header
required

Effective API key. Send Authorization: Bearer sk-eai-...

Path Parameters

resource
string
required

Resource identifier. Currently supported: records:<type>:<UUID>.

Maximum string length: 256
Pattern: ^[a-z][a-z0-9_-]*:[A-Za-z0-9][A-Za-z0-9:_-]*$

Response

Current access list.

access
object
required

Map up to 100 principals to reader, editor or owner. Exactly one user must be owner. Principals: user:<positive numeric ID>, group:<UUID>, mc:<UUID>:member, mc:<UUID>:editor or mc:<UUID>:manager; UUIDs must be lowercase. Access writes require users remaining in the resulting list to be active organization members, and remaining groups and Mission Controls to be visible to the caller. member includes all Mission Control members; editor and manager select those exact tiers.

typeAccess
enum<string> | null
required

For records, limits inherited record-type access to reader or editor; null disables that inheritance. It never increases a principal’s record-type role. This does not change the record type shares. Organization administrator permissions still apply.

Available options:
reader,
editor,
null
resource
string
required
availableRoles
enum<string>[]
required
Available options:
reader,
editor,
owner
accessEtag
string
required

Quoted sharing revision for If-Match on Access PUT/PATCH. Not the record content ETag.

Pattern: ^"[0-9a-f]{64}"$