Claude Platform Docs

權限

列出 RBAC 角色權限
GET/v1/organizations/rbac_roles/{rbac_role_id}/permissions

列出 RBAC 角色所授予的權限。

Models
BetaRBACAllConnectorsPermissionResource object{ type: "all_connectors" }
type: "all_connectors"

Kind of resource the permission applies to.

defaultall_connectors
BetaRBACConnectorPermissionResource object{ type: "connector", connector_id }
type: "connector"

Kind of resource the permission applies to.

defaultconnector
connector_id: string

ID of the connector the permission applies to.

BetaRBACConnectorScopePermissionResource object{ type: "connector_scope", connector_id, scope }
type: "connector_scope"

Kind of resource the permission applies to.

defaultconnector_scope
connector_id: string

ID of the connector the permission applies to.

scope: string

OAuth scope the permission names — the role may receive this scope when tokens are minted for the connector.

Subject to the same encoding rule as tool_name: a scope containing characters outside [a-zA-Z0-9_-] (or colliding with a reserved form) appears server-encoded in a stable {prefix}_{32-hex} form. OAuth scopes routinely contain : and /, so most appear encoded.

BetaRBACConnectorToolPermissionResource object{ type: "connector_tool", connector_id, tool_name }
type: "connector_tool"

Kind of resource the permission applies to.

defaultconnector_tool
connector_id: string

ID of the connector the permission applies to.

tool_name: string

Published name of the connector tool the permission applies to.

When the published name contains characters outside [a-zA-Z0-9_-] (or collides with a reserved form), it is server-encoded into a stable {prefix}_{32-hex} form — a shortened readable prefix of the name plus a hash — from which the published name is not recoverable.

BetaRBACOrganizationPermissionResource object{ type: "organization", organization_id }
type: "organization"

Kind of resource the permission applies to.

defaultorganization
organization_id: string

UUID of the organization the permission applies to.

BetaRBACRolePermission object{ type: "rbac_role_permission", action, resource }