Database Role
List database roles¶
GET/api/v2/databases/{database}/database-roles
List database roles
Path Parameters¶
Parameter | Type | Description |
---|---|---|
database | string | Identifier (i.e. name) for the database to which the resource belongs. You can use the /api/v2/databases GET request to get a list of available databases. |
Query Parameters¶
Parameter | Type | Description |
---|---|---|
showLimit | integer | Query parameter to limit the maximum number of rows returned by a command. |
fromName | string | Query parameter to enable fetching rows only following the first row whose object name matches the specified string. Case-sensitive and does not have to be the full name. |
Response¶
Code | Description | |||||||||
---|---|---|---|---|---|---|---|---|---|---|
200 | successful [
{
"name": "string",
"comment": "string",
"created_on": "2019-08-24T14:15:22Z",
"granted_to_roles": 0,
"granted_to_database_roles": 0,
"granted_database_roles": 0,
"owner": "string",
"owner_role_type": "string"
}
]
| |||||||||
202 | Successfully accepted the request, but it is not completed yet. {
"code": "392604",
"message": "Request execution in progress. Use the provided location header or result handler ID to perform query monitoring and management."
}
|
400 | Bad Request. The request payload is invalid or malformed. This happens if the application didn't send the correct request payload. The response body may include the error code and message indicating the actual cause. The application must reconstruct the request body for retry. |
401 | Unauthorized. The request is not authorized. This happens if the attached access token is invalid or missing. The response body may include the error code and message indicating the actual cause, e.g., expired, invalid token. The application must obtain a new access token for retry. |
403 | Forbidden. The request is forbidden. This can also happen if the request is made even if the API is not enabled. |
404 | Not Found. The request endpoint is not valid. This happens if the API endpoint does not exist, or if the API is not enabled. |
405 | Method Not Allowed. The request method doesn't match the supported API. This happens, for example, if the application calls the API with GET method but the endpoint accepts only POST. |
408 | Request Timeout. This indicates that the request from the client timed out and was not completed by the server. |
409 | Conflict. The requested operation could not be performed due to a conflicting state that could not be resolved. This usually happens when a CREATE request was performed when there is a pre-existing resource with the same name, and also without one of the options orReplace/ifNotExists. |
410 | Gone. This error is primarily intended to assist the task of web maintenance by notifying the recipient that the resource is intentionally unavailable. |
429 | Limit Exceeded. The number of requests hit the rate limit. The application must slow down the frequency of hitting the API endpoints. |
500 | Internal Server Error. The server hit an unrecoverable system error. The response body may include the error code and message for further guidance. The application owner may need to reach out the customer support. |
503 | Service Unavailable. The request was not processed due to server side timeouts. The application may retry with backoff. The jittered backoff is recommended. |
504 | Gateway Timeout. The request was not processed due to server side timeouts. The application may retry with backoff. The jittered backoff is recommended. |
Parameter | Type | Description |
---|
Create a database role¶
POST/api/v2/databases/{database}/database-roles
Create a database role
Query Parameters¶
Parameter | Type | Description |
---|---|---|
createMode | string | Query parameter allowing support for different modes of resource creation. Possible values include:
|
Parameter | Type | Description |
---|
{
"name": "string",
"comment": "string",
"created_on": "2019-08-24T14:15:22Z",
"granted_to_roles": 0,
"granted_to_database_roles": 0,
"granted_database_roles": 0,
"owner": "string",
"owner_role_type": "string"
}
Response¶
Code | Description | ||||
---|---|---|---|---|---|
200 | Successful request. {
"status": "Request successfully completed"
}
| ||||
202 |
400 | |
401 | |
403 | |
404 | |
405 | |
408 | |
409 | |
410 | |
429 | |
500 | |
503 | |
504 |
Parameter | Type | Description |
---|---|---|
status | string | Message returned by the server. |
Delete a database role¶
DELETE/api/v2/databases/{database}/database-roles/{name}
Delete a database role
Path Parameters¶
Parameter | Type | Description |
---|---|---|
name | Identifier (i.e. name) for the resource. |
Query Parameters¶
Parameter | Type | Description |
---|---|---|
ifExists | boolean | Query parameter that specifies how to handle the request for a resource that does not exist:
|
Response¶
Code | Description |
---|---|
200 | |
202 |
400 | |
401 | |
403 | |
404 | |
405 | |
408 | |
409 | |
410 | |
429 | |
500 | |
503 | |
504 |
Create a new database role by cloning from the specified resource¶
POST/api/v2/databases/{database}/database-roles/{name}:clone
Create a new database role by cloning from the specified resource
Query Parameters¶
Parameter | Type | Description |
---|---|---|
targetDatabase | string | Database of the target resource. Defaults to the source's database |
Parameter | Type | Description |
---|
{
"name": "string"
}
Response¶
Code | Description |
---|---|
200 | |
202 |
400 | |
401 | |
403 | |
404 | |
405 | |
408 | |
409 | |
410 | |
429 | |
500 | |
503 | |
504 |
List all grants to the role¶
GET/api/v2/databases/{database}/database-roles/{name}/grants
List all grants to the role
Response¶
Code | Description | ||||||
---|---|---|---|---|---|---|---|
200 | successful [
{
"securable": {
"database": "string",
"schema": "string",
"service": "string",
"name": "string"
},
"containing_scope": {
"database": "string",
"schema": "string"
},
"securable_type": "string",
"grant_option": true,
"privileges": [
"string"
],
"created_on": "2019-08-24T14:15:22Z",
"granted_by": "string"
}
]
| ||||||
202 |
400 | |
401 | |
403 | |
404 | |
405 | |
408 | |
409 | |
410 | |
429 | |
500 | |
503 | |
504 |
Parameter | Type | Description |
---|
Grant privileges to the role¶
POST/api/v2/databases/{database}/database-roles/{name}/grants
Grant privileges to the role
Parameter | Type | Description |
---|
{
"securable": {
"database": "string",
"schema": "string",
"service": "string",
"name": "string"
},
"containing_scope": {
"database": "string",
"schema": "string"
},
"securable_type": "string",
"grant_option": true,
"privileges": [
"string"
],
"created_on": "2019-08-24T14:15:22Z",
"granted_by": "string"
}
Response¶
Code | Description |
---|---|
200 | |
202 |
400 | |
401 | |
403 | |
404 | |
405 | |
408 | |
409 | |
410 | |
429 | |
500 | |
503 | |
504 |
Revoke grants from the role¶
POST/api/v2/databases/{database}/database-roles/{name}/grants:revoke
Revoke grants from the role
Query Parameters¶
Parameter | Type | Description |
---|---|---|
mode | string | Query parameter determines whether the revoke operation succeeds or fails for the privileges, based on the whether the privileges had been re-granted to another role.
|
Parameter | Type | Description |
---|
{
"securable": {
"database": "string",
"schema": "string",
"service": "string",
"name": "string"
},
"containing_scope": {
"database": "string",
"schema": "string"
},
"securable_type": "string",
"grant_option": true,
"privileges": [
"string"
],
"created_on": "2019-08-24T14:15:22Z",
"granted_by": "string"
}
Response¶
Code | Description |
---|---|
200 | |
202 |
400 | |
401 | |
403 | |
404 | |
405 | |
408 | |
409 | |
410 | |
429 | |
500 | |
503 | |
504 |
List all future grants to the role¶
GET/api/v2/databases/{database}/database-roles/{name}/future-grants
List all future grants to the role
Response¶
Code | Description | ||||||
---|---|---|---|---|---|---|---|
200 | successful [
{
"securable": {
"database": "string",
"schema": "string",
"service": "string",
"name": "string"
},
"containing_scope": {
"database": "string",
"schema": "string"
},
"securable_type": "string",
"grant_option": true,
"privileges": [
"string"
],
"created_on": "2019-08-24T14:15:22Z",
"granted_by": "string"
}
]
| ||||||
202 |
400 | |
401 | |
403 | |
404 | |
405 | |
408 | |
409 | |
410 | |
429 | |
500 | |
503 | |
504 |
Parameter | Type | Description |
---|
Grant future privileges to the role¶
POST/api/v2/databases/{database}/database-roles/{name}/future-grants
Grant future privileges to the role
Parameter | Type | Description |
---|
{
"securable": {
"database": "string",
"schema": "string",
"service": "string",
"name": "string"
},
"containing_scope": {
"database": "string",
"schema": "string"
},
"securable_type": "string",
"grant_option": true,
"privileges": [
"string"
],
"created_on": "2019-08-24T14:15:22Z",
"granted_by": "string"
}
Response¶
Code | Description |
---|---|
200 | |
202 |
400 | |
401 | |
403 | |
404 | |
405 | |
408 | |
409 | |
410 | |
429 | |
500 | |
503 | |
504 |
Revoke future grants from the role¶
POST/api/v2/databases/{database}/database-roles/{name}/future-grants:revoke
Revoke future grants from the role
Parameter | Type | Description |
---|
{
"securable": {
"database": "string",
"schema": "string",
"service": "string",
"name": "string"
},
"containing_scope": {
"database": "string",
"schema": "string"
},
"securable_type": "string",
"grant_option": true,
"privileges": [
"string"
],
"created_on": "2019-08-24T14:15:22Z",
"granted_by": "string"
}
Response¶
Code | Description |
---|---|
200 | |
202 |
400 | |
401 | |
403 | |
404 | |
405 | |
408 | |
409 | |
410 | |
429 | |
500 | |
503 | |
504 |