{
"id": "at.marque.team.member",
"defs": {
"main": {
"key": "any",
"type": "record",
"record": {
"type": "object",
"required": [
"subject",
"member",
"permissions",
"createdAt",
"updatedAt"
],
"properties": {
"member": {
"type": "string",
"format": "did",
"description": "DID of the account granted access."
},
"subject": {
"ref": "com.atproto.repo.strongRef",
"type": "ref",
"description": "Strong reference to the owner's at.marque.team record."
},
"createdAt": {
"type": "string",
"format": "datetime",
"description": "When the grant was created."
},
"updatedAt": {
"type": "string",
"format": "datetime",
"description": "When the grant was last updated."
},
"permissions": {
"type": "array",
"items": {
"type": "string",
"knownValues": [
"dns.records.write",
"dns.nameservers.write",
"dns.dnssec.write",
"integrations.atproto.write"
]
},
"maxLength": 4,
"description": "Capabilities granted to the member. An empty list is read-only (viewer) access."
}
}
},
"description": "Record representing an owner-authored grant of capabilities to a member. The record key is the stable membership id from PostgreSQL. This record is the portable grant; a record written by the member must never be treated as authorization."
}
},
"$type": "com.atproto.lexicon.schema",
"lexicon": 1,
"description": "An accepted team member grant, authored by the domain owner. Stored in the owner's repository."
}