List users reachable by an object and relation.

POST

/api/rebac/list-users

Code sample: Shell / cURL

curl --request POST \
  --url https://auth.example.com/api/rebac/list-users \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "tenant_id": "tenant_123", "object": "document:doc_123", "relation": "viewer", "limit": 100 }'

Authorizations

• bearerAuth

Request Body ^required

Media type application/json

object

tenant_id

required

string

object

required

string

object_type

string

relation

required

string

limit

integer

cursor

string

Example

{
  "tenant_id": "tenant_123",
  "object": "document:doc_123",
  "relation": "viewer",
  "limit": 100
}

Responses

200

Successful JSON response.

Media type application/json

object

users

required

Array<string>

next_cursor

string

key

additional properties

Example

{
  "users": [
    "user:user_123"
  ],
  "next_cursor": "cursor_123"
}