GetUserDelegations

Get the delegations a user holds now.

Only an Administrator can call this route. It cannot be run as another user, who is never an Administrator.

A delegation is listed whether it was granted with Update User Delegations or in the application, and one that has been revoked is not. Each is returned as it appears in Get Available Delegations, sorted by name, so the two lists can be compared.

Headers

GET /api/ss/user/:id/delegations HTTP/1.1
Host: demo.attackforge.com
X-SSAPI-KEY: APIKey
Content-Type: application/json

Request

Path Parameters

id - string | required

ID of the user. Must be a 24-character hexadecimal id.

Example

Request

curl --request GET \
	--url https://demo.attackforge.com/api/ss/user/5eacb8450c8d520a8281e539/delegations \
	--header 'content-type: application/json' \
	--header 'x-ssapi-key: ************'

Response

{
  "count": 999,
  "delegations": [
    {
      "name": "create-projects",
      "description": "Allow user to create new projects, edit their projects, and manage access to their projects."
    }
  ]
}

Access and failures

Errors are returned in error, with a count of 0 and an empty list:

• Unauthorized - the caller is not an Administrator.

• User Not Found or Error Finding User - the user could not be found.

• Error Finding Delegations - the user's delegations could not be read.