curl --request GET \
--url https://api.studio.prisme.ai/v2/orgs/{orgSlug}/workspace-privileges \
--header 'Authorization: Bearer <token>'const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.studio.prisme.ai/v2/orgs/{orgSlug}/workspace-privileges', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.studio.prisme.ai/v2/orgs/{orgSlug}/workspace-privileges"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text){
"results": [
{
"orgSlug": "<string>",
"workspaceId": "<string>",
"privileges": {
"accessManager": {
"enabled": true,
"serviceAccounts": {
"defaultRoleSlug": "<string>",
"allowedRoleSlugs": [
"<string>"
]
},
"apiKeys": {
"allowedPermissions": [
"<string>"
],
"allowedScopes": [
"<string>"
]
}
}
},
"id": "<string>",
"workspaceSlug": "<string>",
"createdBy": "<string>",
"updatedBy": "<string>",
"createdAt": "<string>",
"updatedAt": "<string>"
}
],
"total": 123
}{
"error": "AuthenticationError",
"message": "Unauthenticated"
}{
"error": "ForbiddenError",
"message": "Forbidden"
}List Org Workspace Privileges
List all workspace privileges for an organization. Requires the
orgs:workspace-privileges:read permission, held by Owner and
SuperAdmin by default. Any role granted this permission via a custom
role or org API key also has access. The default Admin role does not
have it — trust grants are an Owner-level decision.
curl --request GET \
--url https://api.studio.prisme.ai/v2/orgs/{orgSlug}/workspace-privileges \
--header 'Authorization: Bearer <token>'const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.studio.prisme.ai/v2/orgs/{orgSlug}/workspace-privileges', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.studio.prisme.ai/v2/orgs/{orgSlug}/workspace-privileges"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text){
"results": [
{
"orgSlug": "<string>",
"workspaceId": "<string>",
"privileges": {
"accessManager": {
"enabled": true,
"serviceAccounts": {
"defaultRoleSlug": "<string>",
"allowedRoleSlugs": [
"<string>"
]
},
"apiKeys": {
"allowedPermissions": [
"<string>"
],
"allowedScopes": [
"<string>"
]
}
}
},
"id": "<string>",
"workspaceSlug": "<string>",
"createdBy": "<string>",
"updatedBy": "<string>",
"createdAt": "<string>",
"updatedAt": "<string>"
}
],
"total": 123
}{
"error": "AuthenticationError",
"message": "Unauthenticated"
}{
"error": "ForbiddenError",
"message": "Forbidden"
}Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Path Parameters
Response
List of workspace privileges
Hide child attributes
Hide child attributes
Organization that owns these privilege settings
Canonical workspace ID. The authoritative key — immutable across slug renames.
Workspace privileges configuration for privileged module access
Hide child attributes
Hide child attributes
Configuration for access-manager module privileges
Hide child attributes
Hide child attributes
Whether access-manager module is enabled for this workspace
Service account minting gates. Omit if the workspace does not use serviceAccount instructions.
API key minting gates. Omit if the workspace does not use apiKey instructions.
Hide child attributes
Hide child attributes
Fully-qualified permission patterns the workspace may attach to API keys. Trailing * matches any suffix.
Fully-qualified scope patterns the workspace may attach to API keys. Trailing * matches any suffix.
Workspace slug captured at write time and refreshed on each upsert. Denormalized — never used as a lookup key. May be stale relative to the workspace's current slug between writes; treat as advisory for display only.
Was this page helpful?