Create Temporary

Create a temporary or a expiring specific privilege for identity.

Authorizations

Authorization

string

header

required

An access token in Infisical

Body

application/json

identityId

string

required

The ID of the identity to create.

Minimum length: 1

projectSlug

string

required

The slug of the project of the identity in.

Minimum length: 1

temporaryMode

enum<string>

required

Type of temporary access given. Types: relative

Available options:

relative

temporaryRange

string

required

TTL for the temporay time. Eg: 1m, 1h, 1d

temporaryAccessStartTime

string

required

ISO time for which temporary access should begin.

slug

string

The slug of the privilege to create.

Required string length: 1 - 60

permissions

object[]

@deprecated - use privilegePermission The permission object for the privilege.

• Read secrets

{ "permissions": [{"action": "read", "subject": "secrets"]}

• Read and Write secrets

{ "permissions": [{"action": "read", "subject": "secrets"], {"action": "write", "subject": "secrets"]}

• Read secrets scoped to an environment and secret path

- { "permissions": [{"action": "read", "subject": "secrets", "conditions": { "environment": "dev", "secretPath": { "$glob": "/" } }}] }

Show child attributes

permissions.action

enum<string>

required

Describe what action an entity can take. Possible actions: create, edit, delete, and read

Available options:

read,

create,

edit,

delete

permissions.subject

enum<string>

required

The entity this permission pertains to. Possible options: secrets, environments

Available options:

role,

member,

groups,

settings,

integrations,

webhooks,

service-tokens,

environments,

tags,

audit-logs,

ip-allowlist,

workspace,

secrets,

secret-rollback,

secret-approval,

secret-rotation,

identity,

certificate-authorities,

certificates

permissions.conditions

object

When specified, only matching conditions will be allowed to access given resource.

Show child attributes

permissions.conditions.environment

string

The environment slug this permission should allow.

permissions.conditions.secretPath

object

Show child attributes

permissions.conditions.secretPath.$glob

string

required

The secret path this permission should allow. Can be a glob pattern such as /folder-name/*/**

Minimum length: 1

privilegePermission

object

The permission object for the privilege.

Show child attributes

privilegePermission.actions

enum<string>[]

required

Describe what action an entity can take. Possible actions: create, edit, delete, and read

Available options:

read,

create,

edit,

delete

privilegePermission.subject

enum<string>

required

The entity this permission pertains to. Possible options: secrets, environments

Available options:

secrets

privilegePermission.conditions

object

required

When specified, only matching conditions will be allowed to access given resource.

Show child attributes

privilegePermission.conditions.environment

string

required

The environment slug this permission should allow.

privilegePermission.conditions.secretPath

object

Show child attributes

privilegePermission.conditions.secretPath.$glob

string

required

The secret path this permission should allow. Can be a glob pattern such as /folder-name/*/**

Minimum length: 1

Response

200 - application/json

Default Response

privilege

object

required

Show child attributes

privilege.id

string

required

privilege.slug

string

required

privilege.projectMembershipId

string

required

privilege.permissions

object[]

required

Show child attributes

privilege.permissions.action

required

Minimum length: 1

privilege.permissions.subject

Minimum length: 1

privilege.permissions.conditions

object

Show child attributes

privilege.permissions.conditions.environment

string

privilege.permissions.conditions.secretPath

object

Show child attributes

privilege.permissions.conditions.secretPath.$glob

string

required

Minimum length: 1

privilege.createdAt

string

required

privilege.updatedAt

string

required

privilege.isTemporary

boolean

default:

false

privilege.temporaryMode

string | null

privilege.temporaryRange

string | null

privilege.temporaryAccessStartTime

string | null

privilege.temporaryAccessEndTime

string | null