1. Docs
  2. Reference
  3. REST API Docs
  4. Schema
  5. RbacScopeGroup

RbacScopeGroup

    RbacScopeGroup represents a group of scopes for a resource group

    Properties

    • name enum required
      The name of this scope group.
      Values: Stacks, Stack deployments, Stack webhooks, Stack tags, Stack deployment schedules, Agent pools, Environments, Environment webhooks, Environment tags, Environment versions, Environment schedules, Environment secrets rotation, Accounts, Scans, Policy queue, Policy evaluator, Stack management, Environment management, Insights account management, Insights policy management, Organization, Membership, Organization access tokens, Teams, SSO, Audit logs, Roles, Search, Copilot, Organization annotations, OIDC, Templates, Deployments, Organization webhooks, Approvals
    • scopes array[RbacScope] required
      The list of scopes in this group.
    • name enum required
      The permission name for this scope.
      Values: , stack:list, project:encrypt, project:decrypt, project_annotations:read, project_annotations:update, stack:read, stack:write, stack:import, stack:export, stack:encrypt, stack:decrypt, stack:create, stack:rename, stack:delete, stack:cancel_update, stack:transfer, stack:list_deleted, stack:restore_deleted, stack_deployment:create, stack_deployment:read, stack_deployment_settings:write, stack_deployment_settings:read, stack_deployment_settings:encrypt, stack_deployment_cache:read, stack_webhook:read, stack_webhook:create, stack_webhook:update, stack_webhook:delete, stack_access:read, stack_access:update, stack_tags:update, stack_annotations:read, stack_annotations:update, stack_schedule:create, stack_schedule:update, stack_schedule:read, stack_schedule:delete, stack_schedule:pause, stack_schedule:resume, organization:read_usage, organization:update, organization:rename, organization:delete, organization:change_backend, organization:billing, organization:potential, organization:transfer_stacks, saml:read, saml:update, audit_logs:read, audit_logs:export, scim:read, scim:update, scim:delete, tags:read, org_integrations:read, org_integrations:update, integrations:update, integrations:read, invites:read, invites:create, org_requests:read, org_requests:update, org_member_access:read, org_member:read, org_member:delete, org_member:add, org_member:update, org_member:set_admin, org_token:read, org_token:create, org_token:delete, auth_policies:read, auth_policies:update, oidc_issuers:read, oidc_issuers:update, oidc_issuers:regenerate_thumbprints, oidc_issuers:create, oidc_issuers:delete, agent_pool:read, agent_pool:create, agent_pool:update, agent_pool:delete, organization_webhook:read, organization_webhook:create, organization_webhook:update, organization_webhook:delete, resources:index, resources:search, resources:dashboard, templates:read, templates_source:read, templates_source:update, templates_source:delete, templates_source:create, services:create, services:read, services:write, services:admin, deployments:read, deployments:pause, deployments:resume, deployments:read_usage, organization_annotations:read, organization_annotations:update, policy_groups:create, policy_groups:read, policy_groups:update, policy_groups:delete, policy_pack:create, policy_pack:read, policy_pack:update, policy_pack:delete, policy_results:read, environment:create, environment:list, environment:read, environment:open, environment:write, environment:delete, environment_settings:read, environment_settings:update, environment:clone, environment:rotate, environment:rotate_history, environment:list_deleted, environment:restore_deleted, environment_yaml:open, environment_schedule:create, environment_schedule:read, environment_schedule:update, environment_schedule:pause, environment_schedule:resume, environment_schedule:delete, environment_tags:list, environment_tag:read, environment_tag:create, environment_tag:update, environment_tag:delete, environment_version:create, environment_version:read, environment_version:update, environment_version:delete, environment_version:retract, environment_version:open, environment_webhook:read, environment_webhook:create, environment_webhook:update, environment_webhook:delete, environment_access:read, environment_access:update, team:list, team:read, team:create, team:update, team:delete, team:create_token, team:list_tokens, team:delete_token, github_team:create, insights_account:list, insights_account:read, insights_account:create, insights_account:update, insights_account:delete, insights_account:update_policy_results, insights_account_access:read, insights_account_access:update, insights_account:scan, insights_account_scan:read, insights_account_scan:update, insights_account_scan:cancel, insights_account_scan:pause, insights_account_scan:resume, insights_policy_queue:read, insights_policy_evaluator:read, insights_policy_evaluator:delete, insights_policy_evaluator:ensure, insights_policy_evaluator:update, ai_conversations:list_all, ai_conversations:read, ai_conversations:create, ai_conversations:update, role:create, role:read, role:update, role:delete, change_gate:create, change_gate:update, change_gate:delete
    • metadata RbacScopeMetadata required
      Metadata associated with this scope.