Search allowed actions for the current user (render-time decision)
POST/api/v4/access_control/decisions/actions/search
Returns non-authoritative, render-time ABAC decisions for the current session user on a given resource and set of actions. Use these decisions to decide whether to show or hide UI controls before the user attempts an action.
The subject is always the authenticated session user; there is no way to probe another user's decisions. Server-side enforcement always re-evaluates the full policy on the actual request and remains the source of truth.
Gated by the PermissionPolicies feature flag and an Enterprise license.
When ABAC is inactive for the resource, every action is returned as
allowed: true, evaluated: true.
Permissions
Must be authenticated (any logged-in user).
Request
Responses
- 200
- 400
- 401
- 500
Render-time action decisions returned successfully.
Invalid or missing parameters in URL or request body
No access token provided
Something went wrong with the server