Identity & Access Management

Preview — pending review

This reference is generated from the platform API contract and is still under review. Operations, fields, and descriptions can change before publication.

Whether the caller may open projects under the subscription

GET
/tenants/{tenantId}/subscriptions/{subscriptionId}/project-creation

The CALLER's own answer: allowed is true when the caller holds a SUBSCRIPTION-level owner grant on the subscription or was named a project creator on it -- exactly the rule POST /tenants/{tenantId}/subscriptions/{subscriptionId}/projects applies. Readable by any member who reaches the subscription. Authorization: subscription not reached by the caller (or unknown) 404; an API token needs iam:read (403 TOKEN_SCOPE_MISSING). Async & state: Synchronous read; no state change. Errors: 401; 403 token scope; 404; 500. Idempotency/Concurrency: Safe; no idempotency key.

Authorization

bearerToken
headerAuthorizationBearer <token>

An API token (pc_live_…) or a service-account key (sak_live_…), created in Identity & Access Management and sent as Authorization: Bearer <token>. Requests are rate limited per credential and per tenant: every response carries X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset, and a refused request gets 429 RATE_LIMITED with Retry-After.

Path Parameters

tenantId*string

The tenant id.

subscriptionId*string

The subscription id (unique platform-wide, derived from the tenant id + the subscription's name at creation).

Response Body

The caller's project-creation right on the subscription.

application/json
  1. response

Whether the caller may open projects under the subscription.

allowed*boolean
curl -X GET "https://example.com/tenants/string/subscriptions/string/project-creation"
{  "allowed": true}