Analyze access policies within account
This is the request body that accepts parameters based on which access policies will be analysed
Example response
{- "query_scope": {
- "filter": "INCLUDING_CHILD_SCOPE",
- "scope": {
- "account": "string",
- "org": "string",
- "project": "string"
}, - "include_access_policies_from_parent_scope": false
}, - "principal": {
- "scope_level": "string",
- "identifier": "string",
- "type": "USER"
}, - "permission_identifier": "string",
- "resource_group_identifier": "string",
- "role": {
- "identifier": "string",
- "scope_level": "string"
}, - "resource": {
- "identifier": "string",
- "type": "string",
- "attribute": {
- "property1": "string",
- "property2": "string"
}, - "scope": {
- "account": "string",
- "org": "string",
- "project": "string"
}
}, - "advance_options": {
- "expand_role": false,
- "expand_resource_group": false,
- "expand_user_group": false
}
}
{- "access_policy_analysis_response": [
- {
- "role_assignment": {
- "scope": {
- "account": "string",
- "org": "string",
- "project": "string"
}, - "role_assignment_id": "string",
- "principal": {
- "identifier": "string",
- "name": "string",
- "type": "string",
- "scope_level": "string"
}
}, - "principal": {
- "identifier": "string",
- "name": "string",
- "type": "string",
- "scope_level": "string"
}, - "resource_group": {
- "identifier": "string",
- "name": "string"
}, - "role": {
- "identifier": "string",
- "name": "string",
- "scope_level": "string"
}, - "permission": {
- "identifier": "string",
- "name": "string"
}, - "resource": {
- "identifier": "string",
- "type": "string",
- "attribute": {
- "property1": "string",
- "property2": "string"
}, - "scope": {
- "account": "string",
- "org": "string",
- "project": "string"
}
}
}
]
}