Preview a team's permissions after assigning/removing permission sets

Compute exactly which actions the team WOULD grant its members after
assigning and/or unassigning the given permission sets. Nothing is written —
this is a dry-run for the team assignment flow.

Path Parameters:

team_id (int): the team the change is being previewed for.

Request Body (at least one of the two lists must be non-empty; the same set
may not appear in both):

permission_set_ids (list[uuid], optional): permission sets to
hypothetically assign.

remove_permission_set_ids (list[uuid], optional): permission sets to
hypothetically unassign. Removing a set the team does not hold is a no-op.
Unlike the user preview there is no inherited path to survive removal — a
team holds a set directly or not at all.

All referenced sets must exist in the organization, otherwise the request
fails with 404 listing the missing IDs (a preview over a partial selection
would be misleading).

Authorization:

Requires org manage (admin).

Returns:

200 OK: current_permissions, projected_permissions (scope union per
action) and changes (per-action before/after, only for actions that
change) under data.

400 Bad Request: If versioning fails or the body is invalid.

403 Forbidden: If the caller lacks org admin access.

404 Not Found: If the team or any referenced permission set does not exist.

500 Internal Server Error: On unhandled exceptions.

503 Service Unavailable: If the authorization service is unavailable.

Current Version:

2.0.0

curl --location --globoff 'https:///api/v2/teams//permission-sets/preview' \ --header 'X-Authorization-Consistency-Token;' \ --header 'Ocp-Apim-Subscription-Key: ' \ --header 'Authorization: Bearer ' \ --header 'Content-Type: application/json' \ --data '{ "permission_set_ids": [ "3f1c9b2a-0000-0000-0000-000000000001", "3f1c9b2a-0000-0000-0000-000000000002" ] }'

{ "success": true, "message": "string", "data": { "team_id": 0, "organization_id": 0, "current_permissions": { "agents": { "view": [ "all" ], "edit": [ "all" ], "delete": [ "all" ], "publish": [ "all" ], "create": true }, "corpora": { "view": [ "all" ], "edit": [ "all" ], "delete": [ "all" ], "create": true }, "workflows": { "view": [ "all" ], "edit": [ "all" ], "delete": [ "all" ], "create": true } }, "projected_permissions": {}, "changes": { "agents": { "view": { "before": [ "all" ], "after": [ "all" ] }, "edit": { "before": [ "all" ], "after": [ "all" ] }, "delete": { "before": [ "all" ], "after": [ "all" ] }, "publish": { "before": [ "all" ], "after": [ "all" ] }, "create": { "before": true, "after": true } }, "corpora": { "view": { "before": [ "all" ], "after": [ "all" ] }, "edit": { "before": [ "all" ], "after": [ "all" ] }, "delete": { "before": [ "all" ], "after": [ "all" ] }, "create": { "before": true, "after": true } }, "workflows": { "view": { "before": [ "all" ], "after": [ "all" ] }, "edit": { "before": [ "all" ], "after": [ "all" ] }, "delete": { "before": [ "all" ], "after": [ "all" ] }, "create": { "before": true, "after": true } } } } }

Preview a team's permissions after assigning/removing permission sets

Request

Responses