List role assignments (GET /v3/role_assignments{?group.id,role.id,scope.domain.id,scope.project.id,user.id})

Lists role assignments.

Request headers

Content-type

Indicates the format of content defined in the MIME specification.

Specify application/json. (required)

Data type Cardinality
xsd:string 1..1

Accept

Indicates the accept format defined in the MIME specification.

Specify application/json. (optional)

Data type Cardinality
xsd:string 1..1

X-Auth-Token

Valid authentication token

Data type Cardinality
xsd:string 1..1

Request parameters

group.id

ID of the group

Data type Cardinality Parent element Child element
xsd:string 0..1 None None

role.id

Role ID

When specifying a role ID to filter the results, it is necessary to also specify one of the following: domain ID, project ID, group ID, or user ID

Data type Cardinality Parent element Child element
xsd:string 0..1 xsd:string 0..1

scope.domain.id

Domain ID

Data type Cardinality Parent element Child element
xsd:string 0..1 xsd:string 0..1

scope.project.id

Project ID

Data type Cardinality Parent element Child element
xsd:string 0..1 xsd:string 0..1

user.id

User ID

Data type Cardinality Parent element Child element
xsd:string 0..1 xsd:string 0..1

Response headers

HTTP status code

Returns the HTTP status code of the request.

One of the following values will be returned.

200:
Normal completion
400:
Invalid access (invalid parameter, etc.)
401:
Authentication error
403:
Cannot access (no privileges)
404:
No applicable resources
409:
Data conflict occurred
500:
Unexpected error
501:
Has not been implemented
503:
Cannot use service
Data type Cardinality
int 1..1

Vary

By setting or changing the following header, notification is given that expressions can be requested in a different file format.

X-Auth-Token

Data type Cardinality
xsd:string 1..1

Content-Type

Indicates the format of content defined in the MIME specification.

application/json

Data type Cardinality
xsd:string 1..1

Content-Length

Indicates the length of an entity in bytes.

Data type Cardinality
int 1..1

Date

Indicates the date when the request was created.

Data type Cardinality
date 1..1

Response elements

role_assignments

role_assignments object

Data type Cardinality Parent element Child element
Element 1..1 None (role_assignment)

(role_assignment)

role_assignment object (object name is not displayed)

Data type Cardinality Parent element Child element
Element 1..n role_assignments scope

role

user

group

links

scope

scope object

Data type Cardinality Parent element Child element
Element 1..1 (role_assignment) project

domain

OS-INHERIT:inherited_to

project

project object

Data type Cardinality Parent element Child element
Element 0..1 scope id

id

Project ID

Data type Cardinality Parent element Child element
xsd:string 0..1 project None

domain

domain object

Data type Cardinality Parent element Child element
Element 0..1 scope id

id

Project ID or domain ID

Data type Cardinality Parent element Child element
xsd:string 0..1 project, domain None

OS-INHERIT:inherited_to

INHERIT assignment destination

Data type Cardinality Parent element Child element
xsd:string 0..1 scope None

role

role object

Data type Cardinality Parent element Child element
Element 1..1 (role_assignment) id

id

Role ID

Data type Cardinality Parent element Child element
xsd:string 1..1 role None

user

user object

Data type Cardinality Parent element Child element
Element 0..1 (role_assignment) id

id

User ID

Data type Cardinality Parent element Child element
xsd:string 0..1 user None

group

group object

Data type Cardinality Parent element Child element
Element 0..1 (role_assignment) id

id

ID of the group

Data type Cardinality Parent element Child element
xsd:string 0..1 group None

links

links object

Data type Cardinality Parent element Child element
Element 1..1 (role_assignment) assignment

membership

assignment

Link information of assignment

Data type Cardinality Parent element Child element
xsd:string 1..1 links None

membership

Link information of membership

Data type Cardinality Parent element Child element
xsd:string 1..1 links None

links

Link information

Data type Cardinality Parent element Child element
Element 1..1 None self

previous

next

Example of request


GET /v3/role_assignments?user.id=--user_id--
X-Auth-Token: MIIIHgYJKoZIhvcNAQcCoIIIDzCCCAsCAQExC . . .

Example of response


HTTP/1.1 200 OK
Vary: X-Auth-Token
Content-Type: application/json
Content-Length: 484693
Date: Fri, 05 Sep 2014 09:00:51 GMT

{
    "role_assignments": [
        {
            "scope": {
                "project": {
                    "id": "--project-id--"
                }
            },
            "role": {
                "id": "--role-id--"
            },
            "user": {
                "id": "--user-id--"
            },
            "links": {
                "assignment": "http://identity.cloud.global.fujitsu.com/v3/projects/--project-id--/users/"--user-id--/roles/--role-id--"
            }
        },
      . . .
        {
            "scope": {
                "project": {
                    "id": "--project-id--"
                }
                "OS-INHERIT:inherited_to": "projects"
            },
            "role": {
                "id": "--role-id--"
            },
            "user": {
                "id": "--user-id--"
            },
            "links": {
                "assignment": "http://identity.jp-east-1.cloud.global.fujitsu.com/v3/OS-INHERIT/domains/--domain_id--/groups/--group_id--/roles/--role_id--/inherited_to_projects",
                "membership": "http://identity:5000/v3/groups/--group-id--/users/--user_id--"
            }
        }
    ],
    "links": {
        "self": "http://identity.jp-east-1.cloud.global.fujitsu.com/v3/groups/--group_id--/users/--user_id--",
        "previous": null,
        "next": null
    }
}