{"templateId":"openapi_docs","sharedDataIds":{"openAPIDocsStore":"oas-openapi/content-intelligence.yaml","sidebar":"sidebar-sidebars.yaml"},"props":{"definitionId":"openapi/content-intelligence.yaml","dynamicMarkdocComponents":[],"baseSlug":"/openapi/content-intelligence","seo":{"title":"Access Control","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]},"description":"Access Control provides fine-grained, resource-level authorization on top of the\nrole-based model. Where [Roles](#tag/Roles) and [Permissions](#tag/Permissions) define\nwhat a user can do in general, Access Control governs what a user can do to a\nspecific resource (e.g., a particular document, channel, or brand).\n\nDocument-level access supports two grant types:\n\n| Grant | Description |\n|---|---|\n| `READ` | User can view and retrieve the resource |\n| `MODIFY` | User can update or delete the resource |\n\n- `has-access` — evaluate whether the calling user has access to a specific resource;\n  the primary authorization check for content-level operations\n- `retrieve-resource-groups` — list the logical resource groups a user has access to,\n  used for scoping queries and UI navigation\n- `grant-access` — explicitly grant a user or group access to a specific resource\n- `revoke-access` — remove a previously granted resource-level access\n"},"itemId":"access-control","disableAutoScroll":true,"metadata":{"subType":"openapi-operation"},"compilationErrors":[],"markdown":{"partials":{},"variables":{"rbac":{"teams":["anonymous"]},"user":{},"remoteAddr":{"hostname":"api.tenovos.com","port":4000,"ipAddress":"216.73.217.51"},"lang":"default_locale","env":{"PUBLIC_REDOCLY_BRANCH_NAME":"main"}}},"pagePropGetterError":{"message":"","name":""}},"slug":"/openapi/content-intelligence/access-control","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}