A valid request URL is required to generate request examples{
"result": true,
"info": "<string>"
}{
"timestamp": "2023-11-07T05:31:56Z",
"status": 404,
"error": "Not Found",
"message": "Not Found.",
"path": "/api/v1/rbac-manager/policies/srn2:policy%23missing"
}{
"timestamp": "2023-11-07T05:31:56Z",
"status": 404,
"error": "Not Found",
"message": "Not Found.",
"path": "/api/v1/rbac-manager/policies/srn2:policy%23missing"
}{
"timestamp": "2023-11-07T05:31:56Z",
"status": 404,
"error": "Not Found",
"message": "Not Found.",
"path": "/api/v1/rbac-manager/policies/srn2:policy%23missing"
}Simulate access
Evaluates whether a subject would be allowed to perform an action on a resource, taking every role
assigned to the subject into account. Pass policyDocumentJson to test a policy document that is
not saved yet. Policy changes can take up to an hour to propagate, so test here before saving.
A valid request URL is required to generate request examples{
"result": true,
"info": "<string>"
}{
"timestamp": "2023-11-07T05:31:56Z",
"status": 404,
"error": "Not Found",
"message": "Not Found.",
"path": "/api/v1/rbac-manager/policies/srn2:policy%23missing"
}{
"timestamp": "2023-11-07T05:31:56Z",
"status": 404,
"error": "Not Found",
"message": "Not Found.",
"path": "/api/v1/rbac-manager/policies/srn2:policy%23missing"
}{
"timestamp": "2023-11-07T05:31:56Z",
"status": 404,
"error": "Not Found",
"message": "Not Found.",
"path": "/api/v1/rbac-manager/policies/srn2:policy%23missing"
}Authorizations
A StarTree API token or a service token (st-<accessKey>-<secretKey>).
Body
The subject to simulate, as a map from subject type to subject. Use the same subject types as role assignments.
Show child attributes
Show child attributes
{ "user-email": "jane.doe@example.com" }
SRN of the resource to test access to.
"srn2:cluster#my-cluster:table#myTable"
The policy document as a JSON string (escape the inner quotes). See Custom Policy Configuration for the format.
"{\"version\":\"v1\",\"statements\":[{\"effect\":\"allow\",\"actions\":[\"query\"],\"resources\":[\"srn2:cluster#*:table#myTable\"]}]}"
When true (the default), the caller's own roles are evaluated together with subjectTypeToSubject. Set to false to evaluate only the subjects you pass.
Was this page helpful?