curl --request GET \
--url https://api.studio.prisme.ai/v2/orgs/{orgSlug}/workspaces/{workspaceIdOrSlug}/privileges \
--header 'Authorization: Bearer <token>'const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.studio.prisme.ai/v2/orgs/{orgSlug}/workspaces/{workspaceIdOrSlug}/privileges', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.studio.prisme.ai/v2/orgs/{orgSlug}/workspaces/{workspaceIdOrSlug}/privileges"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text){
"orgSlug": "<string>",
"workspaceId": "<string>",
"privileges": {
"accessManager": {
"enabled": true,
"serviceAccounts": {
"defaultRoleSlug": "<string>",
"allowedRoleSlugs": [
"<string>"
]
},
"apiKeys": {
"allowedPermissions": [
"<string>"
],
"allowedScopes": [
"<string>"
]
}
}
},
"id": "<string>",
"workspaceSlug": "<string>",
"createdBy": "<string>",
"updatedBy": "<string>",
"createdAt": "<string>",
"updatedAt": "<string>"
}{
"error": "AuthenticationError",
"message": "Unauthenticated"
}{
"error": "ObjectNotFound",
"message": "<string>"
}Get Org Workspace Privileges
Get workspace privileges for an organization. Requires the
orgs:workspace-privileges:read permission, held by Owner and
SuperAdmin by default.
workspaceIdOrSlug accepts either a raw workspace ID, or
slug:<slug> for slug-based lookup. Bare IDs work even when the
underlying workspace has been deleted, so orphan rows remain
inspectable. Authorization is enforced before workspace resolution,
so non-authorized callers always get 403 (never 404).
curl --request GET \
--url https://api.studio.prisme.ai/v2/orgs/{orgSlug}/workspaces/{workspaceIdOrSlug}/privileges \
--header 'Authorization: Bearer <token>'const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.studio.prisme.ai/v2/orgs/{orgSlug}/workspaces/{workspaceIdOrSlug}/privileges', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.studio.prisme.ai/v2/orgs/{orgSlug}/workspaces/{workspaceIdOrSlug}/privileges"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text){
"orgSlug": "<string>",
"workspaceId": "<string>",
"privileges": {
"accessManager": {
"enabled": true,
"serviceAccounts": {
"defaultRoleSlug": "<string>",
"allowedRoleSlugs": [
"<string>"
]
},
"apiKeys": {
"allowedPermissions": [
"<string>"
],
"allowedScopes": [
"<string>"
]
}
}
},
"id": "<string>",
"workspaceSlug": "<string>",
"createdBy": "<string>",
"updatedBy": "<string>",
"createdAt": "<string>",
"updatedAt": "<string>"
}{
"error": "AuthenticationError",
"message": "Unauthenticated"
}{
"error": "ObjectNotFound",
"message": "<string>"
}Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Path Parameters
Workspace ID, or slug:<workspaceSlug> for slug addressing.
Response
Workspace privileges
Org-specific workspace privileges configuration
Organization that owns these privilege settings
Canonical workspace ID. The authoritative key — immutable across slug renames.
Workspace privileges configuration for privileged module access
Hide child attributes
Hide child attributes
Configuration for access-manager module privileges
Hide child attributes
Hide child attributes
Whether access-manager module is enabled for this workspace
Service account minting gates. Omit if the workspace does not use serviceAccount instructions.
API key minting gates. Omit if the workspace does not use apiKey instructions.
Hide child attributes
Hide child attributes
Fully-qualified permission patterns the workspace may attach to API keys. Trailing * matches any suffix.
Fully-qualified scope patterns the workspace may attach to API keys. Trailing * matches any suffix.
Workspace slug captured at write time and refreshed on each upsert. Denormalized — never used as a lookup key. May be stale relative to the workspace's current slug between writes; treat as advisory for display only.
Was this page helpful?