Cognite Groups API

openapi: 3.2.0
info:
  title: Cognite 3D Asset Mapping Groups API
  description: "# Introduction\nThis is the reference documentation for the Cognite API with\nan overview of all the available methods.\n\n# Postman\nSelect the **Download** button to download our OpenAPI specification to get started.\n\nTo import your data into Postman, select **Import**, and the Import modal opens.\nYou can import items by dragging or dropping files or folders. You can choose how to import your API and manage the import settings in **View Import Settings**.\n\nIn the Import Settings, set the **Folder organization** to **Tags**, select\n**Enable optional parameters** to turn off the settings, and select **Always inherit authentication** to turn on the settings. Select **Import**.\n\nSet the Authorization to **Oauth2.0**. By default, the settings are for Open Industrial Data. Navigate to [Cognite Hub](https://hub.cognite.com/open-industrial-data-211) to understand how to get the credentials for use in Postman.\n\nFor more information, see [Getting Started with Postman](https://developer.cognite.com/dev/guides/postman/).\n\n# Pagination\nMost resource types can be paginated, indicated by the field `nextCursor` in the response.\nBy passing the value of `nextCursor` as the cursor you will get the next page of `limit` results.\nNote that all parameters except `cursor` has to stay the same.\n\n# Parallel retrieval\nAs general guidance, Parallel Retrieval is a technique that should be used when due to query complexity, retrieval of data in a single request is significantly slower than it would otherwise be for a simple request.  Parallel retrieval does not act as a speed multiplier on optimally running queries.  By parallelizing such requests, data retrieval performance can be tuned to meet the client application needs. \n\nCDF supports parallel retrieval through the `partition` parameter, which has the format `m/n` where `n` is the amount of partitions you would like to split the entire data set into.\nIf you want to download the entire data set by splitting it into 10 partitions, do the following in parallel with `m` running from 1 to 10:\n  - Make a request to `/events` with `partition=m/10`.\n  - Paginate through the response by following the cursor as explained above. Note that the `partition` parameter needs to be passed to all subqueries.\n\nProcessing of parallel retrieval requests is subject to concurrency quota availability. The request returns the `429` response upon exceeding concurrency limits. See the Request throttling chapter below.\n\nTo prevent unexpected problems and to maximize read throughput, you should at most use 10 partitions. \nSome CDF resources will automatically enforce a maximum of 10 partitions.\nFor more specific and detailed information, please read the ```partition``` attribute documentation for the CDF resource you're using.  \n\n# Requests throttling\nCognite Data Fusion (CDF) returns the HTTP `429` (too many requests) response status code when project capacity exceeds the limit.\n\nThe throttling can happen:\n  - If a user or a project sends too many (more than allocated) concurrent requests.\n  - If a user or a project sends a too high (more than allocated) rate of requests in a given amount of time.\n\nCognite recommends using a retry strategy based on truncated exponential backoff to handle sessions with HTTP response codes 429.\n\nCognite recommends using a reasonable number (up to 10) of  `Parallel retrieval` partitions.\n\nFollowing these strategies lets you slow down the request frequency to maximize productivity without having to re-submit/retry failing requests.\n\nSee more [here](https://docs.cognite.com/dev/concepts/resource_throttling).\n\n# API versions\n## Version headers\nThis API uses calendar versioning, and version names follow the `YYYYMMDD` format.\nYou can find the versions currently available by using the version selector at the top of this page.\n\nTo use a specific API version, you can pass the `cdf-version: $version` header along with your requests to the API.\n\n## Beta versions\nThe beta versions provide a preview of what the stable version will look like in the future.\nBeta versions contain functionality that is reasonably mature, and highly likely to become a part of the stable API.\n\nBeta versions are indicated by a `-beta` suffix after the version name. For example, the beta version header for the\n2023-01-01 version is then `cdf-version: 20230101-beta`.\n\n## Alpha versions\nAlpha versions contain functionality that is new and experimental, and not guaranteed to ever become a part of the stable API.\nThis functionality presents no guarantee of service, so its use is subject to caution.\n\nAlpha versions are indicated by an `-alpha` suffix after the version name. For example, the alpha version header for\nthe 2023-01-01 version is then `cdf-version: 20230101-alpha`."
  version: v1
  contact:
    name: Cognite Support
    url: https://support.cognite.com
    email: support@cognite.com
servers:
- url: https://{cluster}.cognitedata.com/api/v1/projects/{project}
  description: The URL for the CDF cluster to connect to
  variables:
    cluster:
      enum:
      - api
      - az-tyo-gp-001
      - az-eastus-1
      - az-power-no-northeurope
      - westeurope-1
      - asia-northeast1-1
      - gc-dsm-gp-001
      default: api
      description: The CDF cluster to connect to
    project:
      default: publicdata
      description: The CDF project name.
security:
- oidc-token:
  - https://{cluster}.cognitedata.com/.default
- oauth2-client-credentials:
  - https://{cluster}.cognitedata.com/.default
- oauth2-open-industrial-data:
  - https://api.cognitedata.com/.default
- oauth2-auth-code:
  - https://{cluster}.cognitedata.com/.default
tags:
- name: Groups
  description: 'Groups are used to give principals the capabilities to access CDF resources.

    One principal can be a member in multiple groups and one group can have multiple members. Note that having more than 20 groups per principal is not supported and may result in login issues.


    Groups can either be managed through the external identity provider for the project or managed by CDF.

    - **Group Membership Managed Externally**: Groups membership is managed by the external identity provider. It is not possible edit or see the members of these groups in CDF.

    - **Group Membership Managed within CDF**: Lets you see and edit group membership in CDF instead of relying on the external identity provider.

    '
paths:
  /groups:
    get:
      tags:
      - Groups
      summary: List groups
      description: '


        > **Required capabilities:** `groupsAcl:LIST`


        Retrieves a list of groups the asking principal a member of. Principals with groups:list capability can optionally ask for all groups in a project.'
      operationId: getGroups
      parameters:
      - name: all
        in: query
        description: Whether to get all groups, only available with the groups:list acl.
        schema:
          type: boolean
          default: false
      responses:
        '200':
          description: A list of groups.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DataGroup'
      x-capability:
      - groupsAcl:LIST
      x-code-samples:
      - lang: JavaScript
        label: JavaScript SDK
        source: 'const groups = await client.groups.list({ all: true });'
      - lang: Python
        label: Python SDK
        source: 'my_groups = client.iam.groups.list()


          all_groups = client.iam.groups.list(all=True)

          '
    post:
      tags:
      - Groups
      summary: Create groups
      description: '


        > **Required capabilities:** `groupsAcl:CREATE`


        Creates one or more named groups, each with a set of capabilities. All users with any group membership in a CDF project automatically get the `userProfilesAcl:READ` capability and can search for other users. If not assigned automatically, user profiles must be enabled for the project. To enable user profiles, contact [support](https://support.cognite.com/).'
      operationId: createGroups
      requestBody:
        description: List of groups to create.
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/DataGroupSpec'
        required: true
      responses:
        '201':
          description: A list of the created groups.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DataGroup'
        '400':
          $ref: '#/components/responses/MissingField'
      x-capability:
      - groupsAcl:CREATE
      x-code-samples:
      - lang: JavaScript
        label: JavaScript SDK
        source: "const createdGroups = await client.groups.create([{\n  name: 'Developers',\n  capabilities: [{\n    assetsAcl: {\n      actions: ['READ'],\n      scope: { all: {}}\n    }\n  }],\n}]);"
      - lang: Python
        label: Python SDK
        source: "from cognite.client.data_classes import GroupWrite\nfrom cognite.client.data_classes.capabilities import AssetsAcl, EventsAcl\nmy_capabilities = [\n    AssetsAcl([AssetsAcl.Action.Read], AssetsAcl.Scope.All()),\n    EventsAcl([EventsAcl.Action.Write], EventsAcl.Scope.DataSet([123, 456]))]\nmy_group = GroupWrite(name=\"My Group\", capabilities=my_capabilities)\nres = client.iam.groups.create(my_group)\n\ngrp = GroupWrite(\n    name=\"Externally managed group\",\n    capabilities=my_capabilities,\n    source_id=\"b7c9a5a4...\")\nres = client.iam.groups.create(grp)\n\nfrom cognite.client.data_classes import ALL_USER_ACCOUNTS\nall_group = GroupWrite(\n    name=\"Everyone is welcome!\",\n    capabilities=my_capabilities,\n    members=ALL_USER_ACCOUNTS,\n)\nuser_list_group = GroupWrite(\n    name=\"Specfic users only\",\n    capabilities=my_capabilities,\n    members=[\"XRsSD1k3mTIKG\", \"M0SxY6bM9Jl\"])\nres = client.iam.groups.create([user_list_group, all_group])\n\nfrom cognite.client.data_classes.capabilities import Capability\nunparsed_capabilities = [\n    {'assetsAcl': {'actions': ['READ', 'WRITE'], 'scope': {'all': {}}}},\n    {'eventsAcl': {'actions': ['WRITE'], 'scope': {'datasetScope': {'ids': [123]}}}},\n]\nacls = [Capability.load(cap) for cap in unparsed_capabilities]\ngroup = GroupWrite(name=\"Another group\", capabilities=acls)\n"
  /groups/delete:
    post:
      tags:
      - Groups
      summary: Delete groups
      description: '


        > **Required capabilities:** `groupsAcl:DELETE`


        Deletes the groups with the given IDs.'
      operationId: deleteGroups
      requestBody:
        description: List of group IDs to delete
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/DataLong'
        required: true
      responses:
        '200':
          $ref: '#/components/responses/EmptyResponse'
      x-capability:
      - groupsAcl:DELETE
      x-code-samples:
      - lang: JavaScript
        label: JavaScript SDK
        source: await client.groups.delete([921923342342323, 871621872721323]);
      - lang: Python
        label: Python SDK
        source: 'client.iam.groups.delete(1)

          '
components:
  schemas:
    GroupMetadata:
      type: object
      description: 'Custom, immutable application specific metadata. String key -> String value. Limits: Key are at most 32 bytes. Values are at most 512 bytes. Up to 16 key-value pairs. Total size is at most 4096.'
      additionalProperties:
        type: string
        maxLength: 512
      x-maxKeyLength: 32
      x-maxTotalSize: 4096
      maxProperties: 16
    cognitesequences_aclScope:
      type: object
      oneOf:
      - title: all
        properties:
          all:
            $ref: '#/components/schemas/generic_aclAllScope'
      - title: datasetScope
        properties:
          datasetScope:
            $ref: '#/components/schemas/cognitedatasets_aclIdScope'
      title: Sequences:Scope
    extractionpipelines_aclAction:
      type: string
      enum:
      - READ
      - WRITE
      default: READ
      title: Extraction Pipelines:Action
    cogniteanalytics_aclAcl:
      type: object
      required:
      - actions
      - scope
      properties:
        actions:
          type: array
          items:
            $ref: '#/components/schemas/cogniteanalytics_aclAction'
        scope:
          $ref: '#/components/schemas/cogniteanalytics_aclScope'
      title: Acl:Analytics
    cognitesequences_aclAction:
      type: string
      enum:
      - READ
      - WRITE
      default: READ
      title: Sequences:Action
    GroupSourceId:
      type: string
      description: ID of the group in the source. If this is the same ID as a group in the IdP, a principal in that group will implicitly be a part of this group as well.
      example: b7c9a5a4-99c2-4785-bed3-5e6ad9a78603
    cognitegroups_aclAcl:
      type: object
      required:
      - actions
      - scope
      properties:
        actions:
          type: array
          items:
            $ref: '#/components/schemas/cognitegroups_aclAction'
        scope:
          $ref: '#/components/schemas/cognitegroups_aclScope'
      title: Acl:Group
    annotations_aclScope:
      type: object
      oneOf:
      - title: all
        properties:
          all:
            $ref: '#/components/schemas/generic_aclAllScope'
      title: Annotations:Scope
    cognitedigitaltwin_aclAcl:
      type: object
      required:
      - actions
      - scope
      properties:
        actions:
          type: array
          items:
            $ref: '#/components/schemas/cognitedigitaltwin_aclAction'
        scope:
          $ref: '#/components/schemas/cognitedigitaltwin_aclScope'
      title: Acl:DigitalTwin
    limits_aclAction:
      type: string
      enum:
      - READ
      - WRITE
      default: READ
      title: Limits:Action
    cognitedatamodels_aclScope:
      type: object
      oneOf:
      - title: all
        properties:
          all:
            $ref: '#/components/schemas/generic_aclAllScope'
      - title: spaceIdScope
        properties:
          spaceIdScope:
            $ref: '#/components/schemas/cognitedatamodels_aclSpaceIdScope'
      title: DataModels:Scope
    streams_aclAction:
      type: string
      enum:
      - READ
      - CREATE
      - DELETE
      default: READ
      title: Streams:Action
    cognitegeospatial_aclAcl:
      type: object
      required:
      - actions
      - scope
      properties:
        actions:
          type: array
          items:
            $ref: '#/components/schemas/cognitegeospatial_aclAction'
        scope:
          $ref: '#/components/schemas/cognitegeospatial_aclScope'
      title: Acl:Geospatial
    extractionruns_aclAction:
      type: string
      enum:
      - READ
      - WRITE
      default: READ
      title: Extraction Pipelines Runs:Action
    DataGroupSpec:
      type: object
      required:
      - items
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/GroupSpec'
    cognitedatasets_aclIdScope:
      type: object
      properties:
        ids:
          type: array
          items:
            type: integer
            format: uint64
          title: DataSet IDs
      title: Scope:DataSetsIdScope
    cognitetypes_aclScope:
      type: object
      properties:
        all:
          $ref: '#/components/schemas/generic_aclAllScope'
      title: Types:Scope
    cogunits_aclAcl:
      type: object
      required:
      - actions
      - scope
      properties:
        actions:
          type: array
          items:
            $ref: '#/components/schemas/cogunits_aclAction'
        scope:
          $ref: '#/components/schemas/cogunits_aclScope'
      title: Acl:CogUnits
    GroupTokenAttributes:
      type: object
      description: Attributes derived from access token.
      properties:
        appIds:
          type: array
          description: 'List of applications (represented by their application ID) this group is valid for. If present, must contain at least one item. If not set or null, the group will be valid for all apps.

            '
          items:
            type: string
            maxLength: 255
          maxItems: 255
    cognitetimeseries_aclAction:
      type: string
      enum:
      - READ
      - WRITE
      default: READ
      title: Timeseries:Action
    simulators_aclAction:
      type: string
      enum:
      - READ
      - WRITE
      - DELETE
      - RUN
      - MANAGE
      default: READ
      title: Simulators:Action
    locationfilters_aclScope:
      type: object
      oneOf:
      - title: all
        properties:
          all:
            $ref: '#/components/schemas/generic_aclAllScope'
      - title: idScope
        properties:
          idScope:
            $ref: '#/components/schemas/locationfilters_aclIdScope'
      title: Location Filters:Scope
    cogniteassets_aclAcl:
      type: object
      required:
      - actions
      - scope
      properties:
        actions:
          type: array
          items:
            $ref: '#/components/schemas/cogniteassets_aclAction'
        scope:
          $ref: '#/components/schemas/cogniteassets_aclScope'
      title: Acl:Asset
    cogniteevents_aclAction:
      type: string
      enum:
      - READ
      - WRITE
      default: READ
      title: Event:Action
    cogniteraw_aclScope:
      type: object
      oneOf:
      - title: all
        properties:
          all:
            $ref: '#/components/schemas/generic_aclAllScope'
      - title: tableScope
        properties:
          tableScope:
            $ref: '#/components/schemas/cogniteraw_aclDbsToTablesScope'
      title: Raw:Scope
    GroupBase:
      type: object
      required:
      - name
      properties:
        name:
          $ref: '#/components/schemas/GroupName'
        capabilities:
          $ref: '#/components/schemas/CogniteCapability'
        metadata:
          $ref: '#/components/schemas/GroupMetadata'
        attributes:
          $ref: '#/components/schemas/GroupAttributes'
    cognitesecuritycategories_aclScope:
      type: object
      oneOf:
      - title: all
        properties:
          all:
            $ref: '#/components/schemas/generic_aclAllScope'
      - title: idscope
        properties:
          idscope:
            $ref: '#/components/schemas/cognitesecuritycategories_aclIdScope'
      title: SecurityCategory:Scope
    cognitedatamodels_aclAction:
      type: string
      enum:
      - READ
      - WRITE
      default: READ
      title: DataModels:Action
    cognitelabels_aclAction:
      type: string
      enum:
      - READ
      - WRITE
      default: READ
      title: Labels:Action
    cognitedataproducts_aclDataProductScope:
      type: object
      properties:
        externalIds:
          type: array
          items:
            type: string
          title: External IDs
      title: Scope:DataProductScope
    entitymatching_aclAcl:
      type: object
      required:
      - actions
      - scope
      properties:
        actions:
          type: array
          items:
            $ref: '#/components/schemas/entitymatching_aclAction'
        scope:
          $ref: '#/components/schemas/entitymatching_aclScope'
      title: Acl:Entity Matching
    agents_aclScope:
      type: object
      properties:
        all:
          $ref: '#/components/schemas/generic_aclAllScope'
      title: Agents:Scope
    cognitedigitaltwin_aclAction:
      type: string
      enum:
      - READ
      - WRITE
      default: READ
      title: DigitalTwin:Action
    locationfilters_aclAcl:
      type: object
      required:
      - actions
      - scope
      properties:
        actions:
          type: array
          items:
            $ref: '#/components/schemas/locationfilters_aclAction'
        scope:
          $ref: '#/components/schemas/locationfilters_aclScope'
      title: Acl:Location Filters
    cogniterobotics_aclAction:
      type: string
      enum:
      - READ
      - CREATE
      - UPDATE
      - DELETE
      default: READ
      title: Robotics:Action
    GroupSpec:
      allOf:
      - $ref: '#/components/schemas/GroupMembershipManagedExternallyOrInCdf'
      description: A specification for creating a new group
    cogunits_aclAction:
      type: string
      enum:
      - READ
      default: READ
      title: CogUnits:Action
    entitymatching_aclScope:
      type: object
      oneOf:
      - title: all
        properties:
          all:
            $ref: '#/components/schemas/generic_aclAllScope'
      title: Entity Matching:Scope
    cognitetimeseries_aclScope:
      type: object
      oneOf:
      - title: all
        properties:
          all:
            $ref: '#/components/schemas/generic_aclAllScope'
      - title: idscope
        properties:
          idscope:
            $ref: '#/components/schemas/cognitetimeseries_aclIdScope'
      - title: assetRootIdScope
        properties:
          assetRootIdScope:
            $ref: '#/components/schemas/cognitetimeseries_aclAssetRootIdScope'
      - title: datasetScope
        properties:
          datasetScope:
            $ref: '#/components/schemas/cognitedatasets_aclIdScope'
      title: Timeseries:Scope
    extractionruns_aclScope:
      type: object
      oneOf:
      - title: all
        properties:
          all:
            $ref: '#/components/schemas/generic_aclAllScope'
      - title: extractionpipelinescope
        properties:
          extractionpipelinescope:
            $ref: '#/components/schemas/extractionpipelines_aclIdScope'
      - title: datasetScope
        properties:
          datasetScope:
            $ref: '#/components/schemas/cognitedatasets_aclIdScope'
      title: Extraction Pipelines Runs:Scope
    cognitetransformations_aclAction:
      type: string
      enum:
      - READ
      - WRITE
      default: READ
      title: Transformations:Action
    cognitegeospatial_aclAction:
      type: string
      enum:
      - READ
      - WRITE
      default: READ
      title: Geospatial:Action
    ProjectUrlName:
      type: string
      description: 'The URL name of the project. This is used as part of the request path in API calls.


        Valid URL names contains between 3 and 32 characters, and may only contain

        English letters, digits and hyphens, must contain at least one letter

        and may not start or end with a hyphen.

        '
      minLength: 3
      maxLength: 32
      example: publicdata
    cognitetimeseriessubscriptions_aclScope:
      type: object
      oneOf:
      - title: all
        properties:
          all:
            $ref: '#/components/schemas/generic_aclAllScope'
      - title: datasetScope
        properties:
          datasetScope:
            $ref: '#/components/schemas/cognitedatasets_aclIdScope'
      title: TimeseriesSubscriptions:Scope
    cognitegeospatialcrs_aclAction:
      type: string
      enum:
      - READ
      - WRITE
      default: READ
      title: GeospatialCrs:Action
    generic_aclAllScope:
      type: object
      title: Scope:All
    cognitetimeseries_aclAcl:
      type: object
      required:
      - actions
      - scope
      properties:
        actions:
          type: array
          items:
            $ref: '#/components/schemas/cognitetimeseries_aclAction'
        scope:
          $ref: '#/components/schemas/cognitetimeseries_aclScope'
      title: Acl:Timeseries
    cogniterelationships_aclAcl:
      type: object
      required:
      - actions
      - scope
      properties:
        actions:
          type: array
          items:
            $ref: '#/components/schemas/cogniterelationships_aclAction'
        scope:
          $ref: '#/components/schemas/cogniterelationships_aclScope'
      title: Acl:Relationships
    cognitediagramparsing_aclAcl:
      type: object
      required:
      - actions
      - scope
      properties:
        actions:
          type: array
          items:
            $ref: '#/components/schemas/cognitediagramparsing_aclAction'
        scope:
          $ref: '#/components/schemas/cognitediagramparsing_aclScope'
      title: Acl:Asset
    cogniteprojects_aclAcl:
      type: object
      required:
      - actions
      - scope
      properties:
        actions:
          type: array
          items:
            $ref: '#/components/schemas/cogniteprojects_aclAction'
        scope:
          $ref: '#/components/schemas/cogniteprojects_aclScope'
      title: Acl:Project
    cogniterobotics_aclScope:
      type: object
      oneOf:
      - title: all
        properties:
          all:
            $ref: '#/components/schemas/generic_aclAllScope'
      - title: datasetScope
        properties:
          datasetScope:
            $ref: '#/components/schemas/cognitedatasets_aclIdScope'
      title: Robotics:Scope
    hostedextractors_aclAcl:
      type: object
      required:
      - actions
      - scope
      properties:
        actions:
          type: array
          items:
            $ref: '#/components/schemas/hostedextractors_aclAction'
        scope:
          $ref: '#/components/schemas/hostedextractors_aclScope'
      title: Acl:Hosted Extractors
    DataLong:
      type: object
      required:
      - items
      properties:
        items:
          type: array
          example:
          - 23872937137
          - 1238712837
          - 128371973
          minItems: 1
          uniqueItems: true
          items:
            type: integer
            format: int64
    streamrecords_aclAcl:
      type: object
      required:
      - actions
      - scope
      properties:
        actions:
          type: array
          items:
            $ref: '#/components/schemas/streamrecords_aclAction'
        scope:
          $ref: '#/components/schemas/streamrecords_aclScope'
      title: Acl:StreamRecords
    GroupMembershipManagedExternallyOrInCdf:
      oneOf:
      - title: managedExternally
        allOf:
        - $ref: '#/components/schemas/GroupBase'
        - type: object
          properties:
            sourceId:
              $ref: '#/components/schemas/GroupSourceId'
        description: Group membership managed by the external identity provider
      - title: managedInCDF
        allOf:
        - $ref: '#/components/schemas/GroupBase'
        - type: object
          properties:
            members:
              description: Specifies which principals are members of the group.
              oneOf:
              - title: PrincipalList
                type: array
                description: Grant capabilities to these specific principals.
                maxItems: 100
                items:
                  $ref: '#/components/schemas/PrincipalId'
              - title: allUserAccounts
                type: string
                enum:
                - allUserAccounts
                description: 'All authenticated user accounts in the organization will automatically become members of this

                  group, granting them access to this project with the capabilities listed in this group.'
        description: Group membership managed in CDF
    cognitediagramparsing_aclScope:
      type: object
      oneOf:
      - title: all
        properties:
          all:
            $ref: '#/components/schemas/generic_aclAllScope'
      title: DiagramParsing:Scope
    cognitetransformations_aclAcl:
      type: object
      required:
      - actions
      - scope
      properties:
        actions:
          type: array
          items:
            $ref: '#/components/schemas/cognitetransformations_aclAction'
        scope:
          $ref: '#/components/schemas/cognitetransformations_aclScope'
      title: Acl:Transformations
    cogniteprojects_aclScope:
      type: object
      properties:
        all:
          $ref: '#/components/schemas/generic_aclAllScope'
      title: Project:Scope
    cognitethreed_aclScope:
      type: object
      oneOf:
      - title: all
        properties:
          all:
            $ref: '#/components/schemas/generic_aclAllScope'
      - title: datasetScope
        properties:
          datasetScope:
            $ref: '#/components/schemas/cognitedatasets_aclIdScope'
    DataGroup:
      type: object
      required:
      - items
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/Group'
    cogniteassets_aclAction:
      type: string
      enum:
      - READ
      - WRITE
      default: READ
      title: Asset:Action
    locationfilters_aclAction:
      type: string
      enum:
      - READ
      - WRITE
      default: READ
      title: Location Filters:Action
    cognitetypes_aclAcl:
      type: object
      required:
      - actions
      - scope
      properties:
        actions:
          type: array
          items:
            $ref: '#/components/schemas/cognitetypes_aclAction'
        scope:
          $ref: '#/components/schemas/cognitetypes_aclScope'
      title: Acl:Types
    cognitegeospatialcrs_aclAcl:
      type: object
      required:
      - actions
      - scope
      properties:
        actions:
          type: array
          items:
            $ref: '#/components/schemas/cognitegeospatialcrs_aclAction'
        scope:
          $ref: '#/components/schemas/cognitegeospatialcrs_aclScope'
      title: Acl:GeospatialCrs
    cogniterelationships_aclAction:
      type: string
      enum:
      - READ
      - WRITE
      default: READ
      title: Relationships:Action
    cogniterobotics_aclAcl:
      type: object
      required:
      - actions
      - scope
      properties:
        actions:
          type: array
          items:
            $ref: '#/components/schemas/cogniterobotics_aclAction'
        scope:
          $ref: '#/components/schemas/cogniterobotics_aclScope'
      title: Acl:Robotics
    cognitesecuritycategories_aclAction:
      type: string
      enum:
      - MEMBEROF
      - LIST
      - CREATE
      - DELETE
      - UPDATE
      default: MEMBEROF
      title: SecurityCategory:Action
    locationfilters_aclIdScope:
      type: object
      properties:
        ids:
          type: array
          items:
            type: integer
            format: uint64
          title: location filter IDs
      title: Scope:LocationFiltersIdScope
    cognitesecuritycategories_aclIdScope:
      type: object
      properties:
        ids:
          type: array
          items:
            type: string
            format: uint64
          title: security category IDs
      title: Scope:SecurityCategoryIdScope
    cogniteseismic_aclAction:
      type: string
      enum:
      - READ
      - WRITE
      default: READ
      title: Seismic:Action
    functions_aclAction:
      type: string
      enum:
      - READ
      - WRITE
      - RUN
      default: READ
      title: Functions:Action
    streams_aclScope:
      type: object
      oneOf:
      - title: all
        properties:
          all:
            $ref: '#/components/schemas/generic_aclAllScope'
      title: Streams:Scope
    cognitethreed_aclAction:
      type: string
      enum:
      - READ
      - CREATE
      - UPDATE
      - DELETE
      default: READ
      title: Threed:Action
    functions_aclAcl:
      type: object
      required:
      - actions
      - scope
      properties:
        actions:
          type: array
          items:
            $ref: '#/components/schemas/functions_aclAction'
        scope:
          $ref: '#/components/schemas/functions_aclScope'
      title: Acl:Functions
    CogniteCapability:
      type: array
      items:
        allOf:
        - oneOf:
          - title: agentsAcl
            required:
            - agentsAcl
            properties:
              agentsAcl:
                $ref: '#/components/schemas/agents_aclAcl'
          - title: analyticsAcl
            required:
            - analyticsAcl
            properties:
              analyticsAcl:
                $ref: '#/components/schemas/cogniteanalytics_aclAcl'
          - title: annotationsAcl
            properties:
              annotationsAcl:
                $ref: '#/components/schemas/annotations_aclAcl'
          - title: assetsAcl
            required:
            - assetsAcl
            properties:
              assetsAcl:
                $ref: '#/components/schemas/cogniteassets_aclAcl'
          - title: cogUnitsAcl
            required:
            - cogUnitsAcl
            properties:
              cogUnitsAcl:
                $ref: '#/components/schemas/cogunits_aclAcl'
          - title: dataModelInstancesAcl
            required:
            - dataModelInstancesAcl
            properties:
              dataM

# --- truncated at 32 KB (64 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/cognite/refs/heads/main/openapi/cognite-groups-api-openapi.yml