Infisical Identity Specific Privileges V2 API
The Identity Specific Privileges V2 API from Infisical — 3 operation(s) for identity specific privileges v2.
OpenAPI Specification
openapi: 3.0.3
info:
title: Infisical Admin Identity Specific Privileges V2 API
description: List of all available APIs that can be consumed
version: 0.0.1
servers:
- url: https://us.infisical.com
description: Production server (US)
- url: https://eu.infisical.com
description: Production server (EU)
- url: http://localhost:8080
description: Local server
tags:
- name: Identity Specific Privileges V2
paths:
/api/v2/identity-project-additional-privilege:
post:
operationId: createIdentityProjectAdditionalPrivilege
tags:
- Identity Specific Privileges V2
description: Add an additional privilege for identity.
requestBody:
required: true
content:
application/json:
schema:
type: object
properties:
identityId:
type: string
minLength: 1
description: The ID of the machine identity to create the privilege for.
projectId:
type: string
minLength: 1
description: The ID of the project of the identity in.
slug:
type: string
minLength: 1
maxLength: 60
description: The slug of the privilege to create.
permissions:
type: array
items:
anyOf:
- type: object
properties:
subject:
type: string
enum:
- secrets
description: The entity this permission pertains to.
inverted:
type: boolean
description: Whether rule allows or forbids.
action:
anyOf:
- type: string
enum:
- read
- describeSecret
- readValue
- create
- edit
- delete
- type: array
items:
type: string
enum:
- read
- describeSecret
- readValue
- create
- edit
- delete
minItems: 1
description: Describe what action an entity can take.
conditions:
type: object
properties:
environment:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
$glob:
type: string
minLength: 1
additionalProperties: false
secretPath:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
$glob:
type: string
minLength: 1
additionalProperties: false
secretName:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
$glob:
type: string
minLength: 1
additionalProperties: false
secretTags:
type: object
properties:
$in:
type: array
items:
type: string
minLength: 1
$all:
type: array
items:
type: string
minLength: 1
additionalProperties: false
eventType:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
additionalProperties: false
additionalProperties: false
description: When specified, only matching conditions will be allowed to access given resource.
required:
- subject
- action
additionalProperties: false
- type: object
properties:
subject:
type: string
enum:
- secret-folders
description: The entity this permission pertains to.
inverted:
type: boolean
description: Whether rule allows or forbids.
action:
anyOf:
- type: string
enum:
- read
- create
- edit
- delete
- type: array
items:
type: string
enum:
- read
- create
- edit
- delete
minItems: 1
description: Describe what action an entity can take.
conditions:
type: object
properties:
environment:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
additionalProperties: false
secretPath:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
$glob:
type: string
minLength: 1
additionalProperties: false
additionalProperties: false
description: When specified, only matching conditions will be allowed to access given resource.
required:
- subject
- action
additionalProperties: false
- type: object
properties:
subject:
type: string
enum:
- secret-imports
description: The entity this permission pertains to.
inverted:
type: boolean
description: Whether rule allows or forbids.
action:
anyOf:
- type: string
enum:
- read
- create
- edit
- delete
- type: array
items:
type: string
enum:
- read
- create
- edit
- delete
minItems: 1
description: Describe what action an entity can take.
conditions:
type: object
properties:
environment:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
$glob:
type: string
minLength: 1
additionalProperties: false
secretPath:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
$glob:
type: string
minLength: 1
additionalProperties: false
additionalProperties: false
description: When specified, only matching conditions will be allowed to access given resource.
required:
- subject
- action
additionalProperties: false
- type: object
properties:
subject:
type: string
enum:
- dynamic-secrets
description: The entity this permission pertains to.
inverted:
type: boolean
description: Whether rule allows or forbids.
action:
anyOf:
- type: string
enum:
- read-root-credential
- create-root-credential
- edit-root-credential
- delete-root-credential
- lease
- type: array
items:
type: string
enum:
- read-root-credential
- create-root-credential
- edit-root-credential
- delete-root-credential
- lease
minItems: 1
description: Describe what action an entity can take.
conditions:
type: object
properties:
environment:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
$glob:
type: string
minLength: 1
additionalProperties: false
secretPath:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
$glob:
type: string
minLength: 1
additionalProperties: false
metadata:
type: object
properties:
$elemMatch:
type: object
properties:
key:
type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
additionalProperties: false
value:
type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
additionalProperties: false
additionalProperties: false
required:
- $elemMatch
additionalProperties: false
additionalProperties: false
description: When specified, only matching conditions will be allowed to access given resource.
required:
- subject
- action
additionalProperties: false
- type: object
properties:
subject:
type: string
enum:
- identity
description: The entity this permission pertains to.
inverted:
type: boolean
description: Whether rule allows or forbids.
action:
anyOf:
- type: string
enum:
- read
- create
- edit
- delete
- grant-privileges
- assign-role
- assign-additional-privileges
- assume-privileges
- revoke-auth
- create-token
- get-token
- delete-token
- type: array
items:
type: string
enum:
- read
- create
- edit
- delete
- grant-privileges
- assign-role
- assign-additional-privileges
- assume-privileges
- revoke-auth
- create-token
- get-token
- delete-token
minItems: 1
description: Describe what action an entity can take.
conditions:
type: object
properties:
identityId:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
additionalProperties: false
assignableRole:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
additionalProperties: false
assignableSubject:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
$glob:
type: string
minLength: 1
additionalProperties: false
assignableAction:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
$glob:
type: string
minLength: 1
additionalProperties: false
additionalProperties: false
description: When specified, only matching conditions will be allowed to access given resource.
required:
- subject
- action
additionalProperties: false
- type: object
properties:
subject:
type: string
enum:
- ssh-hosts
description: The entity this permission pertains to.
action:
anyOf:
- type: string
enum:
- read
- create
- edit
- delete
- issue-host-cert
- type: array
items:
type: string
enum:
- read
- create
- edit
- delete
- issue-host-cert
minItems: 1
description: Describe what action an entity can take.
inverted:
type: boolean
description: Whether rule allows or forbids.
conditions:
type: object
properties:
hostname:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$glob:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
additionalProperties: false
additionalProperties: false
description: When specified, only matching conditions will be allowed to access given resource.
required:
- subject
- action
additionalProperties: false
- type: object
properties:
subject:
type: string
enum:
- pki-subscribers
description: The entity this permission pertains to.
action:
anyOf:
- type: string
enum:
- read
- create
- edit
- delete
- issue-cert
- list-certs
- type: array
items:
type: string
enum:
- read
- create
- edit
- delete
- issue-cert
- list-certs
minItems: 1
description: Describe what action an entity can take.
inverted:
type: boolean
description: Whether rule allows or forbids.
conditions:
type: object
properties:
name:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$glob:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
additionalProperties: false
additionalProperties: false
description: When specified, only matching conditions will be allowed to access given resource.
required:
- subject
- action
additionalProperties: false
- type: object
properties:
subject:
type: string
enum:
- certificate-templates
description: The entity this permission pertains to.
action:
anyOf:
- type: string
enum:
- read
- create
- edit
- delete
- issue-cert
- list-certs
- type: array
items:
type: string
enum:
- read
- create
- edit
- delete
- issue-cert
- list-certs
minItems: 1
description: Describe what action an entity can take.
inverted:
type: boolean
description: Whether rule allows or forbids.
conditions:
type: object
properties:
name:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$glob:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
additionalProperties: false
# --- truncated at 32 KB (337 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/infisical/refs/heads/main/openapi/infisical-identity-specific-privileges-v2-api-openapi.yml