Record representing an owner-authored grant of capabilities to a member. The record key is the stable membership id from PostgreSQL. This record is the portable grant; a record written by the member must never be treated as authorization.
Record Key
any
Any valid record key
Properties
createdAt
string
datetime
Required
When the grant was created.
member
string
did
Required
DID of the account granted access.
permissions
array
of
string
Required
Capabilities granted to the member. An empty list is read-only (viewer) access.
maxLength: 4 itemssubject
ref
com.atproto.repo.strongRef
Required
Strong reference to the owner's at.marque.team record.
updatedAt
string
datetime
Required
When the grant was last updated.
View raw schema
{
"key": "any",
"type": "record",
"record": {
"type": "object",
"required": [
"subject",
"member",
"permissions",
"createdAt",
"updatedAt"
],
"properties": {
"member": {
"type": "string",
"format": "did",
"description": "DID of the account granted access."
},
"subject": {
"ref": "com.atproto.repo.strongRef",
"type": "ref",
"description": "Strong reference to the owner's at.marque.team record."
},
"createdAt": {
"type": "string",
"format": "datetime",
"description": "When the grant was created."
},
"updatedAt": {
"type": "string",
"format": "datetime",
"description": "When the grant was last updated."
},
"permissions": {
"type": "array",
"items": {
"type": "string",
"knownValues": [
"dns.records.write",
"dns.nameservers.write",
"dns.dnssec.write",
"integrations.atproto.write"
]
},
"maxLength": 4,
"description": "Capabilities granted to the member. An empty list is read-only (viewer) access."
}
}
},
"description": "Record representing an owner-authored grant of capabilities to a member. The record key is the stable membership id from PostgreSQL. This record is the portable grant; a record written by the member must never be treated as authorization."
}