Skip to main content

CrossTenantGrantPermissionsDto

Namespace: Meshmakers.Octo.Communication.Contracts.DataTransferObjects

The allow-list of a tenant as a source of sibling-tenant grants: the target tenants whose administrators may look up this tenant's users by exact user name or e-mail and grant them access. GET/PUT {tenantId}/v1/crossTenantGrantPermissions of the identity service.

public record CrossTenantGrantPermissionsDto : IEquatable<CrossTenantGrantPermissionsDto>

Inheritance Object → CrossTenantGrantPermissionsDto
Implements IEquatable<CrossTenantGrantPermissionsDto>

Remarks:

An empty list means nobody, the default of every tenant. Only administrators of the tenant itself (roles UserManagement and TenantManagement, token issued for that tenant) read or change it; anyone else gets 403. The service trims, lower-cases and de-duplicates the entries; each entry is at most 64 ASCII letters, digits, - or _, at most 200 entries, never the tenant itself — otherwise 400 and nothing is changed. Entries are not checked for existence. Contract: docs/CONCEPT-SIBLING-TENANT-GRANTS.md §6 in octo-identity-services.

Properties​

TargetTenantIds​

The permitted target tenant ids. Required on PUT; [] withdraws every permission.

public List<string> TargetTenantIds { get; set; }

Property Value​

List<String>

Constructors​

CrossTenantGrantPermissionsDto()​

public CrossTenantGrantPermissionsDto()