Skip to content
Trusty Sweep Developers

A delegation grant was created

POST

Delivered as a CloudEvents 1.0 envelope whose data is a DelegationGrant. Batched ≤ 20 per delivery as a JSON array; signed with Sweep-Signature.

Request Body

Section titled “Request Body”
Media typeapplication/json
Array
object
specversion
required
string
Allowed values: 1.0
id
required

Prefixed ULID (evt_…)

string
/^evt_[0-9A-HJKMNP-TV-Z]{26}$/
source
required

Https://api.trustysweep.com

string
type
required

Event type from events.json, e.g. sweep.execution.completed

string
time
required
string format: date-time
subject

Primary resource id

string
datacontenttype
string
Allowed values: application/json
data
required
object
key
additional properties
sweepsimulated

CloudEvents extension: true in developer test mode.

boolean
type
required
Allowed value: sweep.grant.created
data
required

Versioned user delegation grant constraining what a principal may do on behalf of a user.

object
id
required

Prefixed ULID (grt_…)

string
/^grt_[0-9A-HJKMNP-TV-Z]{26}$/
version
required
integer
userId
required
string
tenantId
required
string
principalId
required
string
status
required
string
Allowed values: active revoked expired
createdAt
required
string format: date-time
expiresAt
One of:
string format: date-time
revokedAt
One of:
string format: date-time
operations
required
Array<string>
Allowed values: discover preserve write remove restore migrate monitor automate billable_execute
actions
required
Array<string>
Allowed values: read_inventory read_quota read_vault search_vault create_plan preserve trash restore copy move migrate_external unsubscribe monitor automate manage_grants delete_vault_object delete_account permanent_delete
sources
One of:
Array<string>
containers
One of:
Array<string>
assetKinds
One of:
Array<string>
maxObjectsPerPlan
One of:
integer
maxBytesPerPlan
One of:
integer
maxPlansPerDay
One of:
integer
allowedDestinations
One of:
Array<string>
allowExternalDestinations
boolean
allowDestructive
boolean
allowAutomatic
boolean
requireShadowPlan
boolean
requireHumanApprovalAbove
string
Allowed values: read low medium high critical
minConfidence
number
commercialCeilingCents
One of:
integer
timeWindow
One of:
object
startHourUtc
required
integer
endHourUtc
required
integer

Responses

Section titled “Responses”

200

Section titled “200”

Acknowledge with any 2xx within 10 seconds