Access list

The following endpoints let you view and manage the access list (entity ACL) of a connection — the users granted a role on it.

List a connection's access list

get

/teams/{teamId}/connections/{connectionId}/access-list

Returns the access list (entity ACL) of a connection — the principals granted a role on it.

A caller holding the entity use permission on the connection sees every member; any other member of the connection's team sees only the Entity Admins. The connection must belong to the team in the path.

Requires the locked connections feature to be enabled for the organization the team belongs to; otherwise the endpoint returns 400 (IM903).

Required scopes

This endpoint requires the following scopes:

Authorizations

AuthorizationstringRequired

Authorize the API call with your API token in the Authorization header with the value: Token your-api-token.

If you don't have an API token yet, please refer to the "Authentication" section to learn how to create one.

Path parameters

teamIdinteger · min: 1Required

The ID of the team that owns the connection.

Example: 1

connectionIdintegerRequired

The ID of the connection. You can get connection ID's of all your connections with the the List connections endpoint.

Example: 128

Responses

200

The access-list members visible to the caller.

application/json

400

The locked connections feature is not enabled for the organization (IM903).

403

The caller is not allowed to view this access list (IM002).

404

The connection does not exist in the given team (IM304).

get/teams/{teamId}/connections/{connectionId}/access-list

GET /api/v2/teams/{teamId}/connections/{connectionId}/access-list HTTP/1.1
Host: eu1.make.com
Authorization: Token your-api-token
Accept: */*

{
  "accessList": [
    {
      "membershipType": "user",
      "membershipId": 128,
      "role": "entity:entity-admin",
      "name": "Jane Doe",
      "email": "jane.doe@example.com"
    },
    {
      "membershipType": "user",
      "membershipId": 214,
      "role": "entity:entity-member",
      "name": "John Smith",
      "email": "john.smith@example.com"
    }
  ]
}

Add a member to a connection's access list

post

/teams/{teamId}/connections/{connectionId}/access-list/users

Adds a user to a connection's access list (entity ACL) with a role.

Requires entity manage on the connection, and the target user must already be a member of the connection's team. Returns 409 when the user is already on the access list and 400 when they are not a team member or the feature is disabled.

Required scopes

This endpoint requires the following scopes:

Authorizations

AuthorizationstringRequired

Authorize the API call with your API token in the Authorization header with the value: Token your-api-token.

If you don't have an API token yet, please refer to the "Authentication" section to learn how to create one.

Path parameters

teamIdinteger · min: 1Required

The ID of the team that owns the connection.

Example: 1

connectionIdintegerRequired

The ID of the connection. You can get connection ID's of all your connections with the the List connections endpoint.

Example: 128

Body

userIdinteger · min: 1Required

The id of the user to add. Must already be a member of the entity's team.

Example: 214

rolestring · enumRequired

The entity-tier role to grant the user on the connection or key.

Example: entity:entity-memberPossible values:

Responses

200

The created access-list member.

application/json

400

The locked connections and keys feature is disabled (IM903), or the user is not a team member / the role is invalid (IM005).

403

The caller lacks entity manage on the connection (IM002).

404

The connection does not exist in the given team (IM304).

409

The user is already on the connection's access list (SC409).

post/teams/{teamId}/connections/{connectionId}/access-list/users

POST /api/v2/teams/{teamId}/connections/{connectionId}/access-list/users HTTP/1.1
Host: eu1.make.com
Authorization: Token your-api-token
Content-Type: application/json
Accept: */*
Content-Length: 44

{
  "userId": 214,
  "role": "entity:entity-member"
}

{
  "member": {
    "membershipType": "user",
    "membershipId": 214,
    "role": "entity:entity-member",
    "name": "John Smith",
    "email": "john.smith@example.com"
  }
}

Remove a member from a connection's access list

delete

/teams/{teamId}/connections/{connectionId}/access-list/users/{userId}

Removes a user from a connection's access list.

Requires entity manage. Returns 404 if the user is not on the access list, and 409 if removing them would leave the connection without an Entity Admin.

Required scopes

This endpoint requires the following scopes:

Authorizations

AuthorizationstringRequired

Authorize the API call with your API token in the Authorization header with the value: Token your-api-token.

If you don't have an API token yet, please refer to the "Authentication" section to learn how to create one.

Path parameters

teamIdinteger · min: 1Required

The ID of the team that owns the connection.

Example: 1

connectionIdintegerRequired

The ID of the connection. You can get connection ID's of all your connections with the the List connections endpoint.

Example: 128

userIdinteger · min: 1Required

The ID of the user to remove.

Example: 214

Responses

204

The user was removed from the access list.

No content

400

The locked connections and keys feature is disabled (IM903).

403

The caller lacks entity manage on the connection (IM002).

404

The connection is not in the team, or the user is not on its access list (IM304 / SC404).

409

Removing the user would leave the connection without an Entity Admin (SC409).

delete/teams/{teamId}/connections/{connectionId}/access-list/users/{userId}

DELETE /api/v2/teams/{teamId}/connections/{connectionId}/access-list/users/{userId} HTTP/1.1
Host: eu1.make.com
Authorization: Token your-api-token
Accept: */*

No content

Change a connection access-list member's role

patch

/teams/{teamId}/connections/{connectionId}/access-list/users/{userId}

Changes the entity-tier role of a user already on a connection's access list.

Requires entity manage. Returns 404 if the user is not on the access list, and 409 if the change would demote the connection's last Entity Admin.

Required scopes

This endpoint requires the following scopes:

Authorizations

AuthorizationstringRequired

Authorize the API call with your API token in the Authorization header with the value: Token your-api-token.

If you don't have an API token yet, please refer to the "Authentication" section to learn how to create one.

Path parameters

teamIdinteger · min: 1Required

The ID of the team that owns the connection.

Example: 1

connectionIdintegerRequired

The ID of the connection. You can get connection ID's of all your connections with the the List connections endpoint.

Example: 128

userIdinteger · min: 1Required

The ID of the user whose role to change.

Example: 214

Body

rolestring · enumRequired

The entity-tier role to set for the user on the connection or key.

Example: entity:entity-adminPossible values:

Responses

200

The updated access-list member.

application/json

400

The locked connections and keys feature is disabled (IM903), or the role is invalid (IM005).

403

The caller lacks entity manage on the connection (IM002).

404

The connection is not in the team, or the user is not on its access list (IM304 / SC404).

409

The change would leave the connection without an Entity Admin (SC409).

patch/teams/{teamId}/connections/{connectionId}/access-list/users/{userId}

PATCH /api/v2/teams/{teamId}/connections/{connectionId}/access-list/users/{userId} HTTP/1.1
Host: eu1.make.com
Authorization: Token your-api-token
Content-Type: application/json
Accept: */*
Content-Length: 30

{
  "role": "entity:entity-admin"
}

{
  "member": {
    "membershipType": "user",
    "membershipId": 214,
    "role": "entity:entity-admin",
    "name": "John Smith",
    "email": "john.smith@example.com"
  }
}

PreviousConnections NextCredential Requests

Last updated 43 minutes ago