Update

Update a specific privilege of an identity.

Authorizations

Authorization

string

header

required

An access token in Infisical

Body

application/json

privilegeSlug

string

required

The slug of the privilege to update.

Minimum length: 1

identityId

string

required

The ID of the identity to update.

Minimum length: 1

projectSlug

string

required

The slug of the project of the identity in.

Minimum length: 1

privilegeDetails

object

required

Show child attributes

privilegeDetails.slug

string

The new slug of the privilege to update.

Required string length: 1 - 60

privilegeDetails.permissions

object[]

@deprecated - use privilegePermission The permission object for the privilege.

• Read secrets

{ "permissions": [{"action": "read", "subject": "secrets"]}

• Read and Write secrets

{ "permissions": [{"action": "read", "subject": "secrets"], {"action": "write", "subject": "secrets"]}

• Read secrets scoped to an environment and secret path

- { "permissions": [{"action": "read", "subject": "secrets", "conditions": { "environment": "dev", "secretPath": { "$glob": "/" } }}] }

Show child attributes

privilegeDetails.permissions.action

enum<string>

required

Describe what action an entity can take. Possible actions: create, edit, delete, and read

Available options:

read,

create,

edit,

delete

privilegeDetails.permissions.subject

enum<string>

required

The entity this permission pertains to. Possible options: secrets, environments

Available options:

role,

member,

groups,

settings,

integrations,

webhooks,

service-tokens,

environments,

tags,

audit-logs,

ip-allowlist,

workspace,

secrets,

secret-rollback,

secret-approval,

secret-rotation,

identity,

certificate-authorities,

certificates

privilegeDetails.permissions.conditions

object

When specified, only matching conditions will be allowed to access given resource.

Show child attributes

privilegeDetails.permissions.conditions.environment

string

The environment slug this permission should allow.

privilegeDetails.permissions.conditions.secretPath

object

Show child attributes

privilegeDetails.permissions.conditions.secretPath.$glob

string

required

The secret path this permission should allow. Can be a glob pattern such as /folder-name/*/**

Minimum length: 1

privilegeDetails.privilegePermission

object

The permission object for the privilege.

Show child attributes

privilegeDetails.privilegePermission.actions

enum<string>[]

required

Describe what action an entity can take. Possible actions: create, edit, delete, and read

Available options:

read,

create,

edit,

delete

privilegeDetails.privilegePermission.subject

enum<string>

required

The entity this permission pertains to. Possible options: secrets, environments

Available options:

secrets

privilegeDetails.privilegePermission.conditions

object

required

When specified, only matching conditions will be allowed to access given resource.

Show child attributes

privilegeDetails.privilegePermission.conditions.environment

string

required

The environment slug this permission should allow.

privilegeDetails.privilegePermission.conditions.secretPath

object

Show child attributes

privilegeDetails.privilegePermission.conditions.secretPath.$glob

string

required

The secret path this permission should allow. Can be a glob pattern such as /folder-name/*/**

Minimum length: 1

privilegeDetails.isTemporary

boolean

Whether the privilege is temporary.

privilegeDetails.temporaryMode

enum<string>

Type of temporary access given. Types: relative

Available options:

relative

privilegeDetails.temporaryRange

string

TTL for the temporay time. Eg: 1m, 1h, 1d

privilegeDetails.temporaryAccessStartTime

string

ISO time for which temporary access should begin.

Response

200 - application/json

Default Response

privilege

object

required

Show child attributes

privilege.id

string

required

privilege.slug

string

required

privilege.projectMembershipId

string

required

privilege.permissions

object[]

required

Show child attributes

privilege.permissions.action

required

Minimum length: 1

privilege.permissions.subject

Minimum length: 1

privilege.permissions.conditions

object

Show child attributes

privilege.permissions.conditions.environment

string

privilege.permissions.conditions.secretPath

object

Show child attributes

privilege.permissions.conditions.secretPath.$glob

string

required

Minimum length: 1

privilege.createdAt

string

required

privilege.updatedAt

string

required

privilege.isTemporary

boolean

default:

false

privilege.temporaryMode

string | null

privilege.temporaryRange

string | null

privilege.temporaryAccessStartTime

string | null

privilege.temporaryAccessEndTime

string | null