Permissions

Global permission management and superuser access.

GET /api/users/{username}/global-permissions

Get user's global permissions.

Authentication: Required

Permissions: tenant:superuser

Path Parameters:

Parameter	Type	Description
username	string	Username

Response:

{
  "permissions": [
    "datasets:create",
    "reports:create",
    "users:view"
  ]
}

---

PUT /api/users/{username}/global-permissions

Set user's global permissions.

Authentication: Required

Permissions: tenant:superuser

Request Body:

{
  "permissions": [
    "datasets:create",
    "reports:create",
    "assistants:create"
  ]
}

Response:

Returns updated permissions list.

Use Case:

Grant or revoke global capabilities for a user.

---

Superuser Management

GET /api/users/{username}/superuser

Check if user has superuser privileges.

Permissions: tenant:superuser

Response:

{
  "username": "john.doe",
  "superuser": true
}

PUT /api/users/{username}/superuser

Grant superuser privileges.

Permissions: tenant:superuser

Request Body:

{
  "superuser": true
}

DELETE /api/users/{username}/superuser

Revoke superuser privileges.

Permissions: tenant:superuser

Response:

204 No Content on success.

---

Common Global Permissions

Permission	Description
users:view	View all users
users:create	Create new users
users:edit	Edit user accounts
users:delete	Delete users
datasets:create	Create datasets
reports:create	Create reports
assistants:create	Create AI assistants
teams:create	Create teams
tenant:superuser	Full system access