Create Multiple Access Rules | NVIDIA Run:ai Documentation

curl -X POST http://localhost:8080/api/v1/authorization/access-rules/batch-create \
     -H "Authorization: Bearer <token>" \
     -H "Content-Type: application/json" \
     -d '{
  "payload": {
    "roleId": 53142648,
    "subjects": [
      {
        "subjectId": "user@run.ai",
        "subjectType": "user"
      }
    ],
    "scopes": [
      {
        "scopeId": "string",
        "scopeType": "system"
      }
    ]
  }
}'

{
  "succeeded": [
    {
      "subjectId": "user@run.ai",
      "roleId": 53142648,
      "scopeId": "a418ed33-9399-48c0-a890-122cadd13bfd",
      "scopeType": "system",
      "subjectType": "user",
      "roleName": "admin",
      "scopeName": "tenant-x",
      "id": 32,
      "createdAt": "2024-01-15T09:30:00Z",
      "updatedAt": "2024-01-15T09:30:00Z",
      "tenantId": 1001,
      "createdBy": "user@run.ai",
      "clusterId": "71f69d83-ba66-4822-adf5-55ce55efd210",
      "deletedAt": "2024-01-15T09:30:00Z",
      "status": {
        "phase": "Ready",
        "message": "Failed to enforce department 'department-a'",
        "details": "NotReady: [cluster1-uuid]; Ready: [cluster2-uuid, cluster3-uuid]"
      }
    }
  ],
  "failed": [
    {
      "payload": {
        "subjectId": "user@run.ai",
        "roleId": 53142648,
        "scopeId": "a418ed33-9399-48c0-a890-122cadd13bfd",
        "scopeType": "system",
        "subjectType": "user",
        "clusterId": "71f69d83-ba66-4822-adf5-55ce55efd210"
      },
      "code": 1,
      "message": "string"
    }
  ]
}

Creates a batch of access rules in a single operation. Requires a list of access rule objects, each specifying the subject, role, and scope. Returns the result of the operation, including which rules were successfully created and any that failed, along with error messages if applicable.

Authentication

AuthorizationBearer

Bearer authentication

Request

This endpoint expects an object.

payloadobjectRequired

An array of access rule objects, each containing the role, subject, cluster, and scope to apply.

Response

Request completed successfully.

succeededlist of objectsOptional

failedlist of objectsOptional

Errors

400

Bad Request Error

401

Unauthorized Error

403

Forbidden Error

500

Internal Server Error

503

Service Unavailable Error