Skip to main content

revokeGridPermissions

Revoke a user's direct grants on a grid (deletes from the grid_user_direct_grants input table) and recompute their materialized effective ACL. Omit permissionKeys to remove ALL of the user's direct grants on the grid; pass a subset to remove only those keys. Does not affect permissions the user receives via group grants. Requires app-admin ('manage_apps'). DESTRUCTIVE for the targeted grants. Returns the user's remaining effective permission keys on the grid.

revokeGridPermissions(
input: RevokeGridPermissionsInput!
): GridUserPermissions!

Arguments

revokeGridPermissions.input ● RevokeGridPermissionsInput! non-null input

The app, grid, and target user; optionally the subset of permission keys to revoke (omit to revoke all of the user's direct grants).

Type

GridUserPermissions object

A user's effective (materialized) runtime permissions on one grid: the flattened union of direct + group grants, with expired grants excluded, that Buddy enforces.