GetGroupFlowTriggerAccess

Get the access a group gives its members to each kind of flow trigger.

Only an Administrator can call this route. It cannot be run as another user, who is never an Administrator. The Flows module must be enabled.

Each level is 'Create', 'Run' or 'None', and a level that has never been set is 'None'. The levels come back in the properties that Patch Group Flow Trigger Access takes, so the response can be sent straight back.

These are the group's own levels, as set on its Other Access page in the application. A member has the highest of their own level and their groups' levels. An archived group gives its members nothing, and cannot be read here.

Headers

GET /api/ss/group/:id/flow-trigger-access HTTP/1.1
Host: demo.attackforge.com
X-SSAPI-KEY: APIKey
Content-Type: application/json

Request

Path Parameters

id - string | required

ID of the user. Must be a 24-character hexadecimal id.

Example

Request

curl --request GET \
	--url https://demo.attackforge.com/api/ss/group/5eab99471e18050942c7607a/flow-trigger-access \
	--header 'content-type: application/json' \
	--header 'x-ssapi-key: ************'

Response

{
  "anonymous_http_trigger_level": "None",
  "authenticated_http_trigger_level": "Run",
  "custom_action_trigger_level": "None",
  "event_trigger_level": "Create",
  "scheduled_trigger_level": "None"
}

Access and failures

Errors are returned in error, with no levels: Unauthorized, Error Finding Group or Group Not Found. An archived group is not found.