resourceGrants

Identities currently assigned to a resource (who has access). Non-revoked assignments only. Requires provisioning.read.

resourceGrants(
  resourceId: ID!
): [ResourceGrant!]!

Arguments

resourceGrants.resourceId ● ID! non-null scalar

Type

ResourceGrant object

One identity's current (non-revoked) assignment to a resource — a "who has access to resource X" row. Pass assigned_resource_id to entitlementGrants for the per-entitlement breakdown of that assignment.