Claude Platform Docs

권한

RBAC 역할 권한 목록 조회
beta.organization.rbac_roles.permissions.list(rbac_role_id, **kwargs) -> PageCursor<BetaRBACRolePermission>
GET/v1/organizations/rbac_roles/{rbac_role_id}/permissions

RBAC 역할이 부여하는 권한 목록을 조회합니다.

Models
class BetaRBACAllConnectorsPermissionResource { type: :all_connectors }
type: :all_connectors

Kind of resource the permission applies to.

class BetaRBACConnectorPermissionResource { type: :connector, connector_id }
type: :connector

Kind of resource the permission applies to.

connector_id: String

ID of the connector the permission applies to.

class BetaRBACConnectorScopePermissionResource { type: :connector_scope, connector_id, scope }
type: :connector_scope

Kind of resource the permission applies to.

connector_id: String

ID of the connector the permission applies to.

scope: String

OAuth scope the permission names — the role may receive this scope when tokens are minted for the connector.

Subject to the same encoding rule as tool_name: a scope containing characters outside [a-zA-Z0-9_-] (or colliding with a reserved form) appears server-encoded in a stable {prefix}_{32-hex} form. OAuth scopes routinely contain : and /, so most appear encoded.

class BetaRBACConnectorToolPermissionResource { type: :connector_tool, connector_id, tool_name }
type: :connector_tool

Kind of resource the permission applies to.

connector_id: String

ID of the connector the permission applies to.

tool_name: String

Published name of the connector tool the permission applies to.

When the published name contains characters outside [a-zA-Z0-9_-] (or collides with a reserved form), it is server-encoded into a stable {prefix}_{32-hex} form — a shortened readable prefix of the name plus a hash — from which the published name is not recoverable.

class BetaRBACOrganizationPermissionResource { type: :organization, organization_id }
type: :organization

Kind of resource the permission applies to.

organization_id: String

UUID of the organization the permission applies to.

class BetaRBACRolePermission { type: :rbac_role_permission, action, resource }