Getting dashboard permissions

Use this request to get effective dashboard permissions. You need the GRANT permission for the dashboard.

GET

https://api.tracker.yandex.net/v3/dashboards/{dashboard_ID}/permissions

Request format

Before making a request, get permission to access the API.

GET /v3/dashboards/{dashboard_ID}/permissions
Host: api.tracker.yandex.net
Authorization: OAuth API_TOKEN
X-Org-ID or X-Cloud-Org-ID: ORGANIZATION_ID
Headers

  • Host: address of the node that provides the API.

  • Authorization: Authorization token about these formats:

    • OAuth OAUTH_TOKEN: For authorization using the OAuth 2.0 protocol. Learn more

    • Bearer IAM_TOKEN: For authorization using an IAM token, if a Yandex Identity Hub organization is linked to Tracker. Learn more

  • ID types

    X-Org-ID or X-Cloud-Org-ID: Organization ID.

    • Use the X-Org-ID header if a Tracker organization is linked to Yandex 360 for Business.

    • Use the X-Cloud-Org-ID header if a Tracker organization is linked to Yandex Identity Hub.

    Finding the ID

    To get the organization ID, go to Administration → Organizations and copy the value from the ID field.

Resource

Parameter

Description

Data type

dashboard_ID

Dashboard ID.

Number

Response format

If the request is successful, the API returns a response with code 200 OK.

The API returns an object with the effective dashboard permissions.

{
  "acl": {
    "READ": {
      "users": [],
      "groups": [
        {
          "self": "https://api.tracker.yandex.net/v3/groups/3",
          "id": "3",
          "display": "All employees"
        }
      ],
      "roles": []
    },
    "WRITE": {
      "users": [
        {
          "self": "https://api.tracker.yandex.net/v3/users/1234567890",
          "id": "1234567890",
          "display": "User"
        }
      ],
      "groups": [],
      "roles": [
        {
          "id": "OWNER",
          "name": "Owner"
        }
      ]
    },
    "GRANT": {
      "users": [],
      "groups": [],
      "roles": [
        {
          "id": "OWNER",
          "name": "Owner"
        }
      ]
    }
  }
}
Response parameters

Parameter

Description

Data type

acl

Effective permissions.

Object

inheritedFrom

Source of inherited permissions. Omitted when permissions are set directly on the dashboard.

Object

Fields of the acl object

Parameter

Description

Data type

READ

Subjects with read access.

Object

WRITE

Subjects with write access. Also grants READ.

Object

GRANT

Subjects who can manage access.

Object

Fields of the READ, WRITE, and GRANT objects

Parameter

Description

Data type

users

User references. User object fields.

Array of objects

groups

Group references with self, id, and display fields.

Array of objects

roles

System roles with id and name fields.

Array of objects

Fields of elements in the groups array

Parameter

Description

Data type

self

Group API resource URL.

String

id

Group ID.

String

display

Group name.

String

Fields of elements in the roles array

Parameter

Description

Data type

id

System role ID, for example OWNER.

String

name

Role name.

String

If the request is processed incorrectly, the API returns a response with an error code:

403
You are not authorized to perform this action. You can check what rights you have in the Tracker interface. The same rights are required to perform an action via the API and interface.

No GRANT permission for the dashboard.

404
The requested object was not found. You may have specified an invalid object ID or key.
Previous
Update a dashboard
Next
Update dashboard permissions