GrantKind

An installed connector definition for one native assignment shape. A Grant of this kind joins one declared principal entity to one declared target entity inside this Integration, and its normalized qualifiers complete that identity. Definitions describe observed capability; they do not themselves create desired access. Derived kinds are always read-only, while writable is true only when the connector declares and implements the paired add/remove operations.

type GrantKind {
  connector: String!
  derived: Boolean!
  effective_access: Boolean!
  hierarchy: Boolean!
  id: ID!
  installed_at: DateTimeISO!
  membership: Boolean!
  name: String!
  principal_entity_types: [String!]!
  propagates: Boolean!
  qualifiers: [GrantQualifierDefinition!]!
  retired_at: DateTimeISO
  target_entity_types: [String!]!
  validators: JSON!
  via_membership: String!
  writable: Boolean!
}

Fields

GrantKind.connector ● String! non-null scalar

GrantKind.derived ● Boolean! non-null scalar

Whether rows of this kind are computed from other evidence. Derived kinds are always read-only.

GrantKind.effective_access ● Boolean! non-null scalar

GrantKind.hierarchy ● Boolean! non-null scalar

GrantKind.id ● ID! non-null scalar

GrantKind.installed_at ● DateTimeISO! non-null scalar

GrantKind.membership ● Boolean! non-null scalar

GrantKind.name ● String! non-null scalar

GrantKind.principal_entity_types ● [String!]! non-null scalar

Entity kinds that may hold observed Grants. Policy-authored desired access targets accounts only.

GrantKind.propagates ● Boolean! non-null scalar

GrantKind.qualifiers ● [GrantQualifierDefinition!]! non-null object

Definitions for the normalized values that distinguish a complete Grant.

GrantKind.retired_at ● DateTimeISO scalar

GrantKind.target_entity_types ● [String!]! non-null scalar

Entity kinds that may be the target of this GrantKind, within the same Integration.

GrantKind.validators ● JSON! non-null scalar

Cross-field constraints evaluated after qualifier normalization.

GrantKind.via_membership ● String! non-null scalar

GrantKind.writable ● Boolean! non-null scalar

Whether the connector supports both adding and removing this kind; never inferred from schema shape.

Member Of

Integration object