policy.graphql

query listPolicies($input: ListPoliciesInput!) {
    listPolicies(input: $input) {
        start
        count
        total
        policies {
            urn
            type
            name
            description
            state
            resources {
                type
                allResources
                resources
                filter {
                    criteria {
                        field
                        values {
                            value
                            entity {
                                ...searchResultFields
                            }
                        }
                        condition
                    }
                }
            }
            privileges
            actors {
                users
                groups
                roles
                allUsers
                allGroups
                resourceOwners
                resourceOwnersTypes
                resolvedOwnershipTypes {
                    urn
                    info {
                        name
                    }
                }
                resolvedUsers {
                    username
                    urn
                    properties {
                        active
                        displayName
                        title
                        firstName
                        lastName
                        fullName
                        email
                    }
                    editableProperties {
                        displayName
                        pictureLink
                        teams
                        title
                        skills
                    }
                }
                resolvedGroups {
                    name
                    urn
                    properties {
                        displayName
                        description
                        email
                    }
                    editableProperties {
                        description
                        slack
                        email
                    }
                }
                resolvedRoles {
                    urn
                    type
                    name
                    description
                }
            }
            editable
        }
    }
}

query getGrantedPrivileges($input: GetGrantedPrivilegesInput!) {
    getGrantedPrivileges(input: $input) {
        privileges
    }
}

mutation createPolicy($input: PolicyUpdateInput!) {
    createPolicy(input: $input)
}

mutation updatePolicy($urn: String!, $input: PolicyUpdateInput!) {
    updatePolicy(urn: $urn, input: $input)
}

mutation deletePolicy($urn: String!) {
    deletePolicy(urn: $urn)
}