创建用户组 - MemoryLake 中国站

curl -X POST 'https://app.memorylake.cn/openapi/memorylake/admin/v1/access-groups' \
  -H 'Authorization: Bearer sk_xxxxxx' \
  -H 'Idempotency-Key: 7c1d2e3f-0a9b-4c8d-b7e6-f5a4d3c2b1a0' \
  -H 'Content-Type: application/json' \
  -d '{
    "name": "Example name",
    "base_access_group_id": "654c7f7dfc968117cbb5a2e1e31a838e",
    "base_role_key": "tenant_member",
    "description": "Example description",
    "permissions": [
      {
        "action": "example",
        "resource_type": "example"
      }
    ]
  }'

{
  "success": true,
  "message": "Operation completed successfully",
  "data": {
    "created_at": 1760000000,
    "created_by": "example",
    "group_id": "6f8976043c3a1d0040a5853315a3c843",
    "member_count": 1,
    "name": "Example name",
    "permissions": [
      {
        "action": "example",
        "resource_type": "example"
      }
    ],
    "updated_at": 1760000000,
    "base_access_group_id": "d62d704744ca464eeee07a49ef8c2877",
    "base_role_key": "tenant_member",
    "description": "Example description",
    "scope_summary": [
      {
        "instance_count": 1,
        "resource_type": "example"
      }
    ]
  }
}

curl -X POST 'https://app.memorylake.cn/openapi/memorylake/admin/v1/access-groups' \
  -H 'Authorization: Bearer sk_xxxxxx' \
  -H 'Idempotency-Key: 7c1d2e3f-0a9b-4c8d-b7e6-f5a4d3c2b1a0' \
  -H 'Content-Type: application/json' \
  -d '{
    "name": "Example name",
    "base_access_group_id": "654c7f7dfc968117cbb5a2e1e31a838e",
    "base_role_key": "tenant_member",
    "description": "Example description",
    "permissions": [
      {
        "action": "example",
        "resource_type": "example"
      }
    ]
  }'

{
  "success": true,
  "message": "Operation completed successfully",
  "data": {
    "created_at": 1760000000,
    "created_by": "example",
    "group_id": "6f8976043c3a1d0040a5853315a3c843",
    "member_count": 1,
    "name": "Example name",
    "permissions": [
      {
        "action": "example",
        "resource_type": "example"
      }
    ],
    "updated_at": 1760000000,
    "base_access_group_id": "d62d704744ca464eeee07a49ef8c2877",
    "base_role_key": "tenant_member",
    "description": "Example description",
    "scope_summary": [
      {
        "instance_count": 1,
        "resource_type": "example"
      }
    ]
  }
}

POST /openapi/memorylake/admin/v1/access-groups

创建用户组。其权限来自一个可选基础——角色（base_role_key）或另一个用户组（base_access_group_id），在创建时固定——加上其自身的权限列表。仅所有者或管理员可创建基于 tenant_admin 的用户组。每个团队最多 200 个用户组。

所需权限： access_group:manage

如果改动会让某人获得管理员角色，或会缩小管理员能访问的范围，还需要由团队所有者或管理员操作。

请求头

string

可选。使用相同值重试会重放首次结果，而不会创建第二个用户组。

请求体

string

required

显示名称

string

可选，与 base_role_key 互斥。该用户组授予此用户组所授予的全部权限。

string

可选。该用户组授予此角色所授予的全部权限。授予 tenant_admin 需要所有者或管理员。可选值：tenant_member、tenant_admin。

string

可选描述

array

在基础之上额外授予的可选权限

Show Access Group Permission 对象

string

required

操作

string

required

资源类型（参见 GET /permission-catalog?grantable_to=access_group）

curl -X POST 'https://app.memorylake.cn/openapi/memorylake/admin/v1/access-groups' \
  -H 'Authorization: Bearer sk_xxxxxx' \
  -H 'Idempotency-Key: 7c1d2e3f-0a9b-4c8d-b7e6-f5a4d3c2b1a0' \
  -H 'Content-Type: application/json' \
  -d '{
    "name": "Example name",
    "base_access_group_id": "654c7f7dfc968117cbb5a2e1e31a838e",
    "base_role_key": "tenant_member",
    "description": "Example description",
    "permissions": [
      {
        "action": "example",
        "resource_type": "example"
      }
    ]
  }'

响应

object

Show Access Group 对象

integer

Unix 秒级时间戳

string

创建者的 principal_id

string

标识符

integer

成员数

string

显示名称

array

用户组在其基础角色或基础用户组之上额外授予的权限

Show Access Group Permission 对象

string

操作

string

资源类型（参见 GET /permission-catalog?grantable_to=access_group）

integer

Unix 秒级时间戳

string

该用户组授予此另一用户组所授予的全部权限。创建时确定，之后不可更改。

string

该用户组授予此角色（tenant_member 或 tenant_admin）所授予的全部权限。创建时确定，之后不可更改。

string

描述

array

用户组开放访问的实例，按资源类型计数

Show Access Group Scope Count 对象

integer

用户组向其成员开放访问的此类型实例

string

资源类型

{
  "success": true,
  "message": "Operation completed successfully",
  "data": {
    "created_at": 1760000000,
    "created_by": "example",
    "group_id": "6f8976043c3a1d0040a5853315a3c843",
    "member_count": 1,
    "name": "Example name",
    "permissions": [
      {
        "action": "example",
        "resource_type": "example"
      }
    ],
    "updated_at": 1760000000,
    "base_access_group_id": "d62d704744ca464eeee07a49ef8c2877",
    "base_role_key": "tenant_member",
    "description": "Example description",
    "scope_summary": [
      {
        "instance_count": 1,
        "resource_type": "example"
      }
    ]
  }
}

​请求头

​请求体

​响应

请求头

请求体

响应