How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Lakekeeper Permissions Openfga API

Authorization and permissions management using OpenFGA

Lakekeeper Permissions Openfga API is one of 13 APIs that Lakekeeper publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include permissions-openfga. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, an API reference, authentication docs, and pricing.

This API exposes 39 operations across 30 paths, and defines 72 schemas. It is described by OpenAPI 3.2.0, at version 0.0.0.

Requests are made against a single base URL, {scheme}://{host}{basePath}.

39 operations 30 paths 72 schemas 27 GET12 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
0.0.0
Base URL
{scheme}://{host}/management/v1
Authentication
HTTP Bearer
Resource Areas
1

Authentication & Security 1

Lakekeeper Permissions Openfga API declares 1 security scheme for authenticating requests. It accepts HTTP bearer tokens (JWT) (bearerAuth). By default, every request must be authenticated.

Paths & Operations 39

Across 30 paths, the API surfaces 39 operations — 27 GET, 12 POST. Each is listed below with its method, path, parameters, and response codes.

permissions-openfga 39

Authorization and permissions management using OpenFGA

POST
/management/v1/permissions/check
Check if a specific action is allowed on the given object
check body → 200
GET
/management/v1/permissions/namespace/{namespace_id}
Get Authorization properties of a namespace
get_namespace_by_id 1 param → 200
GET
/management/v1/permissions/namespace/{namespace_id}/accessdeprecated
Get my access to a namespace
get_namespace_access_by_id 3 params → 200
GET
/management/v1/permissions/namespace/{namespace_id}/assignments
Get user and role assignments for a namespace
get_namespace_assignments_by_id 2 params → 200
POST
/management/v1/permissions/namespace/{namespace_id}/assignments
Update permissions for a namespace
update_namespace_assignments_by_id 1 param body → 204
GET
/management/v1/permissions/namespace/{namespace_id}/authorizer-actions
Get allowed Authorizer actions on a namespace
get_authorizer_namespace_actions 3 params → 200
POST
/management/v1/permissions/namespace/{namespace_id}/managed-access
Set managed access property of a namespace
set_namespace_managed_access 1 param body → 200
GET
/management/v1/permissions/project/accessdeprecated
Get my access to the default project
get_project_access 2 params → 200
GET
/management/v1/permissions/project/assignments
Get user and role assignments of a project
get_project_assignments 1 param → 200
POST
/management/v1/permissions/project/assignments
Update permissions for the default project
update_project_assignments body → 204
GET
/management/v1/permissions/project/authorizer-actions
Get allowed Authorizer actions on the default project
get_authorizer_project_actions 3 params → 200
GET
/management/v1/permissions/project/{project_id}/accessdeprecated
Get my access to a project
get_project_access_by_id 3 params → 200
GET
/management/v1/permissions/project/{project_id}/assignmentsdeprecated
Get user and role assignments to a project
get_project_assignments_by_id 2 params → 200
POST
/management/v1/permissions/project/{project_id}/assignments
Update permissions for a project
update_project_assignments_by_id 1 param body → 204
GET
/management/v1/permissions/role/{role_id}/accessdeprecated
Get my access to a role
get_role_access_by_id 1 param → 200
GET
/management/v1/permissions/role/{role_id}/assignments
Get user and role assignments of a role
get_role_assignments_by_id 2 params → 200
POST
/management/v1/permissions/role/{role_id}/assignments
update_role_assignments_by_id 1 param body → 204
GET
/management/v1/permissions/role/{role_id}/authorizer-actions
Get allowed Authorizer actions on a role
get_authorizer_role_actions 3 params → 200
GET
/management/v1/permissions/server/accessdeprecated
Get my access to the server
get_server_access 2 params → 200
GET
/management/v1/permissions/server/assignments
Get user and role assignments of the server
get_server_assignments 1 param → 200
POST
/management/v1/permissions/server/assignments
Update permissions for this server
update_server_assignments body → 204
GET
/management/v1/permissions/server/authorizer-actions
Get allowed Authorizer actions on the server
get_authorizer_server_actions 2 params → 200
GET
/management/v1/permissions/warehouse/{warehouse_id}
Get Authorization properties of a warehouse
get_warehouse_by_id 1 param → 200
GET
/management/v1/permissions/warehouse/{warehouse_id}/accessdeprecated
Get my access to a warehouse
get_warehouse_access_by_id 3 params → 200
GET
/management/v1/permissions/warehouse/{warehouse_id}/assignments
Get user and role assignments for a warehouse
get_warehouse_assignments_by_id 2 params → 200
POST
/management/v1/permissions/warehouse/{warehouse_id}/assignments
Update permissions for a warehouse
update_warehouse_assignments_by_id 1 param body → 204
GET
/management/v1/permissions/warehouse/{warehouse_id}/authorizer-actions
Get allowed Authorizer actions on a warehouse
get_authorizer_warehouse_actions 3 params → 200
GET
/management/v1/permissions/warehouse/{warehouse_id}/generic-table/{generic_table_id}/assignments
Get user and role assignments for a generic table
get_generic_table_assignments_by_id 3 params → 200
POST
/management/v1/permissions/warehouse/{warehouse_id}/generic-table/{generic_table_id}/assignments
Update permissions for a generic table
update_generic_table_assignments_by_id 2 params body → 204
GET
/management/v1/permissions/warehouse/{warehouse_id}/generic-table/{generic_table_id}/authorizer-actions
Get allowed Authorizer actions on a generic table
get_authorizer_generic_table_actions 4 params → 200
POST
/management/v1/permissions/warehouse/{warehouse_id}/managed-access
Set managed access property of a warehouse
set_warehouse_managed_access 1 param body → 200
GET
/management/v1/permissions/warehouse/{warehouse_id}/table/{table_id}/accessdeprecated
Get my access to a table
get_table_access_by_id 4 params → 200
GET
/management/v1/permissions/warehouse/{warehouse_id}/table/{table_id}/assignments
Get user and role assignments for a table
get_table_assignments_by_id 3 params → 200
POST
/management/v1/permissions/warehouse/{warehouse_id}/table/{table_id}/assignments
Update permissions for a table
update_table_assignments_by_id 2 params body → 204
GET
/management/v1/permissions/warehouse/{warehouse_id}/table/{table_id}/authorizer-actions
Get allowed Authorizer actions on a table
get_authorizer_table_actions 4 params → 200
GET
/management/v1/permissions/warehouse/{warehouse_id}/view/{view_id}/accessdeprecated
Get my access to a view
get_view_access_by_id 4 params → 200
GET
/management/v1/permissions/warehouse/{warehouse_id}/view/{view_id}/assignments
Get user and role assignments for a view
get_view_assignments_by_id 3 params → 200
POST
/management/v1/permissions/warehouse/{warehouse_id}/view/{view_id}/assignments
Update permissions for a view
update_view_assignments_by_id 2 params body → 204
GET
/management/v1/permissions/warehouse/{warehouse_id}/view/{view_id}/authorizer-actions
Get allowed Authorizer actions on a view
get_authorizer_view_actions 4 params → 200

Schemas 72

The contract defines 72 schemas that model the data the API accepts and returns. The most detailed are UpdateWarehouseAssignmentsRequest (2 properties), UpdateProjectAssignmentsRequest (2 properties), UpdateServerAssignmentsRequest (2 properties), UpdateRoleAssignmentsRequest (2 properties). Each schema is shown below with its type and property counts.

GetOpenFGAWarehouseActionsResponse
object
1 property 1 required
GetNamespaceAssignmentsResponse
object
1 property 1 required
CheckRequest
object
Check if a specific action is allowed on the given object
2 properties 1 required
GetOpenFGARoleActionsResponse
object
1 property 1 required
ViewAssignment
GetOpenFGATableActionsResponse
object
1 property 1 required
GetViewAccessResponse
object
1 property 1 required
OpenFGAGenericTableAction
string
OpenFGARoleAction
string
UpdateGenericTableAssignmentsRequest
object
2 properties
WarehouseRelation
string
RoleRelation
string
NamespaceAction
string
GenericTableAction
string
OpenFGAWarehouseAction
string
ServerRelation
string
ProjectAssignment
UpdateViewAssignmentsRequest
object
2 properties
UpdateWarehouseAssignmentsRequest
object
2 properties
GetRoleAssignmentsResponse
object
1 property 1 required
NamespaceRelation
string
ProjectAction
string
GenericTableRelation
string
ProjectRelation
string
ServerAction
string
GenericTableAssignment
UserOrRole
Identifies a user or a role
UpdateProjectAssignmentsRequest
object
2 properties
GetRoleAccessResponse
object
1 property 1 required
RoleAction
string
WarehouseAction
string
NamespaceIdentOrUuid
Identifier for a namespace, either a UUID or its name and warehouse ID
OpenFGANamespaceAction
string
GetWarehouseAuthPropertiesResponse
object
1 property 1 required
GetOpenFGAProjectActionsResponse
object
1 property 1 required
GetTableAccessResponse
object
1 property 1 required
GetProjectAccessResponse
object
1 property 1 required
ViewAction
string
GetOpenFGANamespaceActionsResponse
object
1 property 1 required
ViewRelation
string
GetOpenFGAViewActionsResponse
object
1 property 1 required
TableAssignment
OpenFGAServerAction
string
UpdateRoleAssignmentsRequest
object
2 properties
CheckOperation
Represents an action on an object
GetViewAssignmentsResponse
object
1 property 1 required
WarehouseAssignment
GetWarehouseAccessResponse
object
1 property 1 required
UpdateTableAssignmentsRequest
object
2 properties
SetManagedAccessRequest
object
1 property 1 required
ServerAssignment
GetNamespaceAccessResponse
object
1 property 1 required
TableAction
string
RoleAssignment
GetGenericTableAssignmentsResponse
object
1 property 1 required
GetServerAssignmentsResponse
object
1 property 1 required
GetWarehouseAssignmentsResponse
object
1 property 1 required
TableRelation
string
GetOpenFGAServerActionsResponse
object
1 property 1 required
OpenFGAViewAction
string
GetProjectAssignmentsResponse
object
2 properties 2 required
NamespaceAssignment
GetTableAssignmentsResponse
object
1 property 1 required
GetOpenFGAGenericTableActionsResponse
object
1 property 1 required
GetServerAccessResponse
object
1 property 1 required
CheckResponse
object
1 property 1 required
TabularIdentOrUuid
Identifier for a tabular (table, view, or generic table) — either a UUID or its name and namespace. Wire format primary names are table-id and table; viewid /…
UpdateServerAssignmentsRequest
object
2 properties
OpenFGAProjectAction
string
OpenFGATableAction
string
UpdateNamespaceAssignmentsRequest
object
2 properties
GetNamespaceAuthPropertiesResponse
object
2 properties 2 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

lakekeeper-permissions-openfga-api-openapi.yml Raw ↑

Other APIs Lakekeeper publishes across the network.

Lakekeeper Generic Table (Data) API
Lakekeeper Authorization API
Lakekeeper Catalog API
Lakekeeper Configuration API
Lakekeeper OAuth2 API
Lakekeeper Permissions Cedar API
Lakekeeper Project API
Lakekeeper Role API
Lakekeeper Server API
Lakekeeper Tasks API
Lakekeeper User API
Lakekeeper Warehouse API
Where this information came from

This is an independent, third-party profile of Lakekeeper Permissions Openfga API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.