Skip to main content

PolicyEntity

A kind of thing an ABAC policy can be attached to — a project, an environment, a resource, and so on.

Every action in the policy catalog acts on exactly one entity, encoded as the prefix of the action id (project in project:view). Use policyEntities to enumerate every entity with its description when building a policy-authoring UI.

type PolicyEntity {
id: ID!
description: String!
}

Fields

PolicyEntity.id ● ID! non-null scalar {#id}

Stable identifier for the entity, matching the prefix of action ids (for example project, environment, resource_type).

PolicyEntity.description ● String! non-null scalar {#description}

Human-readable description of what this entity represents in Massdriver.

Returned By

policyEntities query

Member Of

PolicyAction object