Get privilege elevation assignments that are explicitly granted

  1. If the "Principal" user has no permission to run the command, nothing is returned. 2. Usually only one entry is returned. However, it is possible that multiple entries may be returned. One example is that the user may have both a permanent and temporary grants, or multiple temporary grants. The caller has to figure out what to do with multiple results. 3. If new columns are added in future releases, they will be returned as new optional properties. 4. Note that this API does not take into account of inheritance. It only returns the assignments that are explicitly assigned to the requested user/principal and scope. Use ListAssignments to get all the effective assignments, including ones from inheritance.
Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Body Params
string
required

whether the assignment is for a system or a system set. Must be Collection, or System

string

scope of rule. Values: 1. If "ScopeType" is "Collection", UUID of collection should be specified. 2. If "ScopeType" is "System", UUID of system should be specified.

string
required

UUID of privilege elevation command

string

Name of user/role/group in assignment. Either "PrincipalId" or "Principal" must be specified.

string

UUID of user/role/group in assignment. Either "PrincipalId" or "Principal" must be specified.

string
required

Principal type. Supported values: "User", "Group", "Role"

Response

Language
LoadingLoading…
Response
Choose an example:
*/*