How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

ThoughtSpot Security API

The Security API from ThoughtSpot — 10 operation(s) for security.

ThoughtSpot Security API is one of 29 APIs that ThoughtSpot publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Security. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, a getting-started guide, and authentication docs.

This API exposes 10 operations across 10 paths, and defines 29 schemas. It is described by OpenAPI 3.2.0, at version 2.0.

Requests are made against a single base URL, {base-url}.

10 operations 10 paths 29 schemas 10 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
2.0
Base URL
https://my.thoughtspot.cloud/api/rest/2.0
Authentication
HTTP Bearer
Resource Areas
1

Authentication & Security 1

ThoughtSpot Security API declares 1 security scheme for authenticating requests. It accepts HTTP bearer tokens (bearerAuth). By default, every request must be authenticated.

Paths & Operations 10

Across 10 paths, the API surfaces 10 operations — 10 POST. Each is listed below with its method, path, parameters, and response codes.

Security 10
POST
/api/rest/2.0/security/metadata/assign
Version: 9.0.0.cl or later Transfers the ownership of one or several objects from one user to another. Requires ADMINISTRATION (Can administer ThoughtSpot) privilege. If [Role-Based Access Control (R…
assignChangeAuthor body → 204400401403500
POST
/api/rest/2.0/security/column/rules/fetch
Beta Version: 10.12.0.cl or later Fetches column security rules for specified tables. This API endpoint retrieves column-level security rules configured for tables. It returns information about which…
fetchColumnSecurityRules body → 200400401403500
POST
/api/rest/2.0/security/metadata/fetch-object-privileges
Version: 26.3.0.cl or later This API fetches the object privileges present for the given list of principals (user or group), on the given set of objects. It supports pagination, which can be enabled…
fetchObjectPrivileges body → 200400401403500
POST
/api/rest/2.0/security/principals/fetch-permissions
Version: 9.0.0.cl or later Fetches object permission details for a given principal object such as a user and group. Requires view access to the metadata object. Usage guidelines To get a list of all…
fetchPermissionsOfPrincipals body → 200400401403500
POST
/api/rest/2.0/security/metadata/fetch-permissions
Version: 9.0.0.cl or later Fetches permission details for a given metadata object. Requires view access to the metadata object. Usage guidelines To fetch a list of users and groups for a metadata obj…
fetchPermissionsOnMetadata body → 200400401403500
POST
/api/rest/2.0/security/metadata/manage-object-privilege
Version: 26.3.0.cl or later This API allows the addition or deletion of object level privileges for a set of users and groups, on a set of metadata objects. It provides users to access certain featur…
manageObjectPrivilege body → 204400401403500
POST
/api/rest/2.0/security/metadata/publish
Version: 26.5.0.cl or later Allows publishing metadata objects across organizations in ThoughtSpot. Requires ADMINISTRATION role and TENANT scope. The API endpoint allows publishing the following typ…
publishMetadata body → 204400401403500
POST
/api/rest/2.0/security/metadata/share
Version: 9.0.0.cl or later Allows sharing one or several metadata objects with users and groups in ThoughtSpot. Requires edit access to the metadata object. Supported metadata objects: Liveboards Vis…
shareMetadata body → 204400401403500
POST
/api/rest/2.0/security/metadata/unpublish
Version: 26.5.0.cl or later Allows unpublishing metadata objects from organizations in ThoughtSpot. Requires ADMINISTRATION role and TENANT scope. The API endpoint allows unpublishing the following t…
unpublishMetadata body → 204400401403500
POST
/api/rest/2.0/security/column/rules/update
Beta Version: 10.12.0.cl or later Creates, updates, or deletes column security rules for specified tables. This API endpoint allows you to create, update, or delete column-level security rules on col…
updateColumnSecurityRules body → 204400401403500

Schemas 29

The contract defines 29 schemas that model the data the API accepts and returns. The most detailed are ShareMetadataRequest (10 properties), FetchPermissionsOnMetadataRequest (6 properties), FetchPermissionsOfPrincipalsRequest (5 properties), ManageObjectPrivilegeRequest (5 properties). Each schema is shown below with its type and property counts.

ManageObjectPrivilegeRequest
object
5 properties 5 required
ShareMetadataRequest
object
10 properties 2 required
ColumnSecurityRuleResponse
object
3 properties
UpdateColumnSecurityRulesRequest
object
4 properties 1 required
ColumnSecurityRuleTableInput
object
2 properties
ShareMetadataTypeInput
object
2 properties 1 required
SharePermissionsInput
object
3 properties 2 required
ColumnSecurityRuleColumn
object
2 properties 2 required
ColumnSecurityRuleGroup
object
2 properties 2 required
ColumnSecurityRule
object
3 properties 1 required
AssignChangeAuthorRequest
object
3 properties 2 required
ColumnSecurityRuleSourceTable
object
2 properties 2 required
UnpublishMetadataRequest
object
4 properties 3 required
ObjectPrivilegesOfMetadataResponse
object
1 property
AuthorMetadataTypeInput
object
MetadataType InputType used in Author API's
2 properties 1 required
FetchObjectPrivilegesRequest
object
4 properties 1 required
FetchColumnSecurityRulesRequest
object
1 property 1 required
PublishMetadataListItem
object
2 properties 1 required
PrincipalsInput
object
2 properties 1 required
ColumnSecurityRuleGroupOperation
object
2 properties 2 required
ColumnSecurityRuleUpdate
object
3 properties 1 required
ErrorResponse
object
1 property
PermissionOfPrincipalsResponse
object
1 property
FetchPermissionsOfPrincipalsRequest
object
5 properties 1 required
ObjectPrivilegesMetadataInput
object
2 properties 1 required
PermissionsMetadataTypeInput
object
MetadataType InputType used in Permission API's
2 properties 1 required
PermissionOfMetadataResponse
object
1 property
PublishMetadataRequest
object
3 properties 2 required
FetchPermissionsOnMetadataRequest
object
6 properties 1 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

thoughtspot-security-api-openapi.yml Raw ↑

Other APIs ThoughtSpot publishes across the network.

ThoughtSpot AI API
ThoughtSpot Authentication API
ThoughtSpot Collections API
ThoughtSpot Connection Configurations API
ThoughtSpot Connections API
ThoughtSpot Custom Action API
ThoughtSpot Custom Calendars API
ThoughtSpot Data API
ThoughtSpot DBT API
ThoughtSpot Email Customization API
ThoughtSpot Groups API
ThoughtSpot Input Tables API
Where this information came from

This is an independent, third-party profile of ThoughtSpot Security API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.