IdentitiesRightsize Identity Permissions

Rightsize Identity Permissions

Rightsize Identity Permissions

curl -X GET "https://api.prd.rad.security/accounts/example_string/identities/example_string/rightsize" \
  -H "Content-Type: application/json"
{
  "after": {
    "cluster_role_bindings": [
      {
        "annotations": {},
        "apiVersion": "example_string",
        "creationTimestamp": "example_string",
        "deletionGracePeriodSeconds": 42,
        "deletionTimestamp": "example_string",
        "finalizers": [
          "example_string"
        ],
        "generateName": "John Doe",
        "generation": 42,
        "kind": "example_string",
        "labels": {},
        "managedFields": [
          {
            "apiVersion": "example_string",
            "fieldsType": "example_string",
            "fieldsV1": {},
            "manager": "example_string",
            "operation": "example_string",
            "subresource": "example_string",
            "time": "example_string"
          }
        ],
        "name": "John Doe",
        "namespace": "John Doe",
        "ownerReferences": [
          {
            "apiVersion": "example_string",
            "blockOwnerDeletion": true,
            "controller": true,
            "kind": "example_string",
            "name": "John Doe",
            "uid": "example_string"
          }
        ],
        "resourceVersion": "example_string",
        "roleRef": {
          "apiGroup": "example_string",
          "kind": "example_string",
          "name": "John Doe"
        },
        "selfLink": "example_string",
        "subjects": [
          {
            "apiGroup": "example_string",
            "kind": "example_string",
            "name": "John Doe",
            "namespace": "John Doe"
          }
        ],
        "uid": "example_string"
      }
    ],
    "cluster_roles": [
      {
        "aggregationRule": {
          "clusterRoleSelectors": [
            {
              "matchExpressions": [
                {
                  "key": "example_string",
                  "operator": "example_string",
                  "values": [
                    "example_string"
                  ]
                }
              ],
              "matchLabels": {}
            }
          ]
        },
        "annotations": {},
        "apiVersion": "example_string",
        "creationTimestamp": "example_string",
        "deletionGracePeriodSeconds": 42,
        "deletionTimestamp": "example_string",
        "finalizers": [
          "example_string"
        ],
        "generateName": "John Doe",
        "generation": 42,
        "kind": "example_string",
        "labels": {},
        "managedFields": [
          {
            "apiVersion": "example_string",
            "fieldsType": "example_string",
            "fieldsV1": {},
            "manager": "example_string",
            "operation": "example_string",
            "subresource": "example_string",
            "time": "example_string"
          }
        ],
        "name": "John Doe",
        "namespace": "John Doe",
        "ownerReferences": [
          {
            "apiVersion": "example_string",
            "blockOwnerDeletion": true,
            "controller": true,
            "kind": "example_string",
            "name": "John Doe",
            "uid": "example_string"
          }
        ],
        "resourceVersion": "example_string",
        "rules": [
          {
            "apiGroups": [
              "example_string"
            ],
            "nonResourceURLs": [
              "example_string"
            ],
            "resourceNames": [
              "John Doe"
            ],
            "resources": [
              "example_string"
            ],
            "verbs": [
              "example_string"
            ]
          }
        ],
        "selfLink": "example_string",
        "uid": "example_string"
      }
    ],
    "role_bindings": [
      {
        "annotations": {},
        "apiVersion": "example_string",
        "creationTimestamp": "example_string",
        "deletionGracePeriodSeconds": 42,
        "deletionTimestamp": "example_string",
        "finalizers": [
          "example_string"
        ],
        "generateName": "John Doe",
        "generation": 42,
        "kind": "example_string",
        "labels": {},
        "managedFields": [
          {
            "apiVersion": "example_string",
            "fieldsType": "example_string",
            "fieldsV1": {},
            "manager": "example_string",
            "operation": "example_string",
            "subresource": "example_string",
            "time": "example_string"
          }
        ],
        "name": "John Doe",
        "namespace": "John Doe",
        "ownerReferences": [
          {
            "apiVersion": "example_string",
            "blockOwnerDeletion": true,
            "controller": true,
            "kind": "example_string",
            "name": "John Doe",
            "uid": "example_string"
          }
        ],
        "resourceVersion": "example_string",
        "roleRef": {
          "apiGroup": "example_string",
          "kind": "example_string",
          "name": "John Doe"
        },
        "selfLink": "example_string",
        "subjects": [
          {
            "apiGroup": "example_string",
            "kind": "example_string",
            "name": "John Doe",
            "namespace": "John Doe"
          }
        ],
        "uid": "example_string"
      }
    ],
    "roles": [
      {
        "annotations": {},
        "apiVersion": "example_string",
        "creationTimestamp": "example_string",
        "deletionGracePeriodSeconds": 42,
        "deletionTimestamp": "example_string",
        "finalizers": [
          "example_string"
        ],
        "generateName": "John Doe",
        "generation": 42,
        "kind": "example_string",
        "labels": {},
        "managedFields": [
          {
            "apiVersion": "example_string",
            "fieldsType": "example_string",
            "fieldsV1": {},
            "manager": "example_string",
            "operation": "example_string",
            "subresource": "example_string",
            "time": "example_string"
          }
        ],
        "name": "John Doe",
        "namespace": "John Doe",
        "ownerReferences": [
          {
            "apiVersion": "example_string",
            "blockOwnerDeletion": true,
            "controller": true,
            "kind": "example_string",
            "name": "John Doe",
            "uid": "example_string"
          }
        ],
        "resourceVersion": "example_string",
        "rules": [
          {
            "apiGroups": [
              "example_string"
            ],
            "nonResourceURLs": [
              "example_string"
            ],
            "resourceNames": [
              "John Doe"
            ],
            "resources": [
              "example_string"
            ],
            "verbs": [
              "example_string"
            ]
          }
        ],
        "selfLink": "example_string",
        "uid": "example_string"
      }
    ]
  },
  "before": {
    "cluster_role_bindings": [
      {
        "annotations": {},
        "apiVersion": "example_string",
        "creationTimestamp": "example_string",
        "deletionGracePeriodSeconds": 42,
        "deletionTimestamp": "example_string",
        "finalizers": [
          "example_string"
        ],
        "generateName": "John Doe",
        "generation": 42,
        "kind": "example_string",
        "labels": {},
        "managedFields": [
          {
            "apiVersion": "example_string",
            "fieldsType": "example_string",
            "fieldsV1": {},
            "manager": "example_string",
            "operation": "example_string",
            "subresource": "example_string",
            "time": "example_string"
          }
        ],
        "name": "John Doe",
        "namespace": "John Doe",
        "ownerReferences": [
          {
            "apiVersion": "example_string",
            "blockOwnerDeletion": true,
            "controller": true,
            "kind": "example_string",
            "name": "John Doe",
            "uid": "example_string"
          }
        ],
        "resourceVersion": "example_string",
        "roleRef": {
          "apiGroup": "example_string",
          "kind": "example_string",
          "name": "John Doe"
        },
        "selfLink": "example_string",
        "subjects": [
          {
            "apiGroup": "example_string",
            "kind": "example_string",
            "name": "John Doe",
            "namespace": "John Doe"
          }
        ],
        "uid": "example_string"
      }
    ],
    "cluster_roles": [
      {
        "aggregationRule": {
          "clusterRoleSelectors": [
            {
              "matchExpressions": [
                {
                  "key": "example_string",
                  "operator": "example_string",
                  "values": [
                    "example_string"
                  ]
                }
              ],
              "matchLabels": {}
            }
          ]
        },
        "annotations": {},
        "apiVersion": "example_string",
        "creationTimestamp": "example_string",
        "deletionGracePeriodSeconds": 42,
        "deletionTimestamp": "example_string",
        "finalizers": [
          "example_string"
        ],
        "generateName": "John Doe",
        "generation": 42,
        "kind": "example_string",
        "labels": {},
        "managedFields": [
          {
            "apiVersion": "example_string",
            "fieldsType": "example_string",
            "fieldsV1": {},
            "manager": "example_string",
            "operation": "example_string",
            "subresource": "example_string",
            "time": "example_string"
          }
        ],
        "name": "John Doe",
        "namespace": "John Doe",
        "ownerReferences": [
          {
            "apiVersion": "example_string",
            "blockOwnerDeletion": true,
            "controller": true,
            "kind": "example_string",
            "name": "John Doe",
            "uid": "example_string"
          }
        ],
        "resourceVersion": "example_string",
        "rules": [
          {
            "apiGroups": [
              "example_string"
            ],
            "nonResourceURLs": [
              "example_string"
            ],
            "resourceNames": [
              "John Doe"
            ],
            "resources": [
              "example_string"
            ],
            "verbs": [
              "example_string"
            ]
          }
        ],
        "selfLink": "example_string",
        "uid": "example_string"
      }
    ],
    "role_bindings": [
      {
        "annotations": {},
        "apiVersion": "example_string",
        "creationTimestamp": "example_string",
        "deletionGracePeriodSeconds": 42,
        "deletionTimestamp": "example_string",
        "finalizers": [
          "example_string"
        ],
        "generateName": "John Doe",
        "generation": 42,
        "kind": "example_string",
        "labels": {},
        "managedFields": [
          {
            "apiVersion": "example_string",
            "fieldsType": "example_string",
            "fieldsV1": {},
            "manager": "example_string",
            "operation": "example_string",
            "subresource": "example_string",
            "time": "example_string"
          }
        ],
        "name": "John Doe",
        "namespace": "John Doe",
        "ownerReferences": [
          {
            "apiVersion": "example_string",
            "blockOwnerDeletion": true,
            "controller": true,
            "kind": "example_string",
            "name": "John Doe",
            "uid": "example_string"
          }
        ],
        "resourceVersion": "example_string",
        "roleRef": {
          "apiGroup": "example_string",
          "kind": "example_string",
          "name": "John Doe"
        },
        "selfLink": "example_string",
        "subjects": [
          {
            "apiGroup": "example_string",
            "kind": "example_string",
            "name": "John Doe",
            "namespace": "John Doe"
          }
        ],
        "uid": "example_string"
      }
    ],
    "roles": [
      {
        "annotations": {},
        "apiVersion": "example_string",
        "creationTimestamp": "example_string",
        "deletionGracePeriodSeconds": 42,
        "deletionTimestamp": "example_string",
        "finalizers": [
          "example_string"
        ],
        "generateName": "John Doe",
        "generation": 42,
        "kind": "example_string",
        "labels": {},
        "managedFields": [
          {
            "apiVersion": "example_string",
            "fieldsType": "example_string",
            "fieldsV1": {},
            "manager": "example_string",
            "operation": "example_string",
            "subresource": "example_string",
            "time": "example_string"
          }
        ],
        "name": "John Doe",
        "namespace": "John Doe",
        "ownerReferences": [
          {
            "apiVersion": "example_string",
            "blockOwnerDeletion": true,
            "controller": true,
            "kind": "example_string",
            "name": "John Doe",
            "uid": "example_string"
          }
        ],
        "resourceVersion": "example_string",
        "rules": [
          {
            "apiGroups": [
              "example_string"
            ],
            "nonResourceURLs": [
              "example_string"
            ],
            "resourceNames": [
              "John Doe"
            ],
            "resources": [
              "example_string"
            ],
            "verbs": [
              "example_string"
            ]
          }
        ],
        "selfLink": "example_string",
        "uid": "example_string"
      }
    ]
  },
  "generated_at": "example_string",
  "identity": {
    "account_id": "example_string",
    "actions": [
      "example_string"
    ],
    "created_at": "example_string",
    "deleted_at": "example_string",
    "id": "example_string",
    "last_used_at": "example_string",
    "linked_resources": 42,
    "name": "John Doe",
    "namespace": "John Doe",
    "original_id": "example_string",
    "raw_rbac_objects": {
      "cluster_role_bindings": [
        {
          "annotations": {},
          "apiVersion": "example_string",
          "creationTimestamp": "example_string",
          "deletionGracePeriodSeconds": 42,
          "deletionTimestamp": "example_string",
          "finalizers": [
            "example_string"
          ],
          "generateName": "John Doe",
          "generation": 42,
          "kind": "example_string",
          "labels": {},
          "managedFields": [
            {
              "apiVersion": "example_string",
              "fieldsType": "example_string",
              "fieldsV1": {},
              "manager": "example_string",
              "operation": "example_string",
              "subresource": "example_string",
              "time": "example_string"
            }
          ],
          "name": "John Doe",
          "namespace": "John Doe",
          "ownerReferences": [
            {
              "apiVersion": "example_string",
              "blockOwnerDeletion": true,
              "controller": true,
              "kind": "example_string",
              "name": "John Doe",
              "uid": "example_string"
            }
          ],
          "resourceVersion": "example_string",
          "roleRef": {
            "apiGroup": "example_string",
            "kind": "example_string",
            "name": "John Doe"
          },
          "selfLink": "example_string",
          "subjects": [
            {
              "apiGroup": "example_string",
              "kind": "example_string",
              "name": "John Doe",
              "namespace": "John Doe"
            }
          ],
          "uid": "example_string"
        }
      ],
      "cluster_roles": [
        {
          "aggregationRule": {
            "clusterRoleSelectors": [
              {
                "matchExpressions": [
                  {
                    "key": "example_string",
                    "operator": "example_string",
                    "values": [
                      "example_string"
                    ]
                  }
                ],
                "matchLabels": {}
              }
            ]
          },
          "annotations": {},
          "apiVersion": "example_string",
          "creationTimestamp": "example_string",
          "deletionGracePeriodSeconds": 42,
          "deletionTimestamp": "example_string",
          "finalizers": [
            "example_string"
          ],
          "generateName": "John Doe",
          "generation": 42,
          "kind": "example_string",
          "labels": {},
          "managedFields": [
            {
              "apiVersion": "example_string",
              "fieldsType": "example_string",
              "fieldsV1": {},
              "manager": "example_string",
              "operation": "example_string",
              "subresource": "example_string",
              "time": "example_string"
            }
          ],
          "name": "John Doe",
          "namespace": "John Doe",
          "ownerReferences": [
            {
              "apiVersion": "example_string",
              "blockOwnerDeletion": true,
              "controller": true,
              "kind": "example_string",
              "name": "John Doe",
              "uid": "example_string"
            }
          ],
          "resourceVersion": "example_string",
          "rules": [
            {
              "apiGroups": [
                "example_string"
              ],
              "nonResourceURLs": [
                "example_string"
              ],
              "resourceNames": [
                "John Doe"
              ],
              "resources": [
                "example_string"
              ],
              "verbs": [
                "example_string"
              ]
            }
          ],
          "selfLink": "example_string",
          "uid": "example_string"
        }
      ],
      "role_bindings": [
        {
          "annotations": {},
          "apiVersion": "example_string",
          "creationTimestamp": "example_string",
          "deletionGracePeriodSeconds": 42,
          "deletionTimestamp": "example_string",
          "finalizers": [
            "example_string"
          ],
          "generateName": "John Doe",
          "generation": 42,
          "kind": "example_string",
          "labels": {},
          "managedFields": [
            {
              "apiVersion": "example_string",
              "fieldsType": "example_string",
              "fieldsV1": {},
              "manager": "example_string",
              "operation": "example_string",
              "subresource": "example_string",
              "time": "example_string"
            }
          ],
          "name": "John Doe",
          "namespace": "John Doe",
          "ownerReferences": [
            {
              "apiVersion": "example_string",
              "blockOwnerDeletion": true,
              "controller": true,
              "kind": "example_string",
              "name": "John Doe",
              "uid": "example_string"
            }
          ],
          "resourceVersion": "example_string",
          "roleRef": {
            "apiGroup": "example_string",
            "kind": "example_string",
            "name": "John Doe"
          },
          "selfLink": "example_string",
          "subjects": [
            {
              "apiGroup": "example_string",
              "kind": "example_string",
              "name": "John Doe",
              "namespace": "John Doe"
            }
          ],
          "uid": "example_string"
        }
      ],
      "roles": [
        {
          "annotations": {},
          "apiVersion": "example_string",
          "creationTimestamp": "example_string",
          "deletionGracePeriodSeconds": 42,
          "deletionTimestamp": "example_string",
          "finalizers": [
            "example_string"
          ],
          "generateName": "John Doe",
          "generation": 42,
          "kind": "example_string",
          "labels": {},
          "managedFields": [
            {
              "apiVersion": "example_string",
              "fieldsType": "example_string",
              "fieldsV1": {},
              "manager": "example_string",
              "operation": "example_string",
              "subresource": "example_string",
              "time": "example_string"
            }
          ],
          "name": "John Doe",
          "namespace": "John Doe",
          "ownerReferences": [
            {
              "apiVersion": "example_string",
              "blockOwnerDeletion": true,
              "controller": true,
              "kind": "example_string",
              "name": "John Doe",
              "uid": "example_string"
            }
          ],
          "resourceVersion": "example_string",
          "rules": [
            {
              "apiGroups": [
                "example_string"
              ],
              "nonResourceURLs": [
                "example_string"
              ],
              "resourceNames": [
                "John Doe"
              ],
              "resources": [
                "example_string"
              ],
              "verbs": [
                "example_string"
              ]
            }
          ],
          "selfLink": "example_string",
          "uid": "example_string"
        }
      ]
    },
    "rbac_objects": {
      "assigned_roles": [
        {
          "kind": "example_string",
          "name": "John Doe",
          "namespace": "John Doe",
          "uid": "example_string",
          "account_id": "example_string",
          "cluster_id": "example_string",
          "created_at": "example_string",
          "id": "example_string",
          "updated_at": "example_string"
        }
      ],
      "created_at": "example_string",
      "graph": {
        "edges": [
          {
            "from_id": "example_string",
            "id": "example_string",
            "to_id": "example_string",
            "type": "example_string"
          }
        ],
        "nodes": [
          {
            "id": "example_string",
            "properties": {},
            "type": "example_string"
          }
        ]
      },
      "permissions": [
        {
          "api_groups": [
            "example_string"
          ],
          "namespace": "John Doe",
          "resource_names": [
            "John Doe"
          ],
          "resources": [
            "example_string"
          ],
          "verbs": [
            "example_string"
          ]
        }
      ]
    },
    "resolved_at": "example_string",
    "resolved_reason": "example_string",
    "rightsizeable": true,
    "risk_detectors": {},
    "risk_level": "Unspecified",
    "risk_score": 3.14,
    "risk_types": [
      "example_string"
    ],
    "risks": [
      {
        "associated_resources": [
          {
            "id": "example_string",
            "name": "John Doe",
            "severity": "example_string"
          }
        ],
        "deleted_at": "example_string",
        "description": "example_string",
        "fingerprint": "example_string",
        "first_detected_at": "example_string",
        "id": "example_string",
        "identity_id": "example_string",
        "last_detected_at": "example_string",
        "name": "John Doe",
        "risk_counter": 10,
        "score": 3.14,
        "type": "example_string",
        "weight": 1.5
      }
    ],
    "risks_summary": {
      "risks": [
        {
          "count": 10,
          "normalized_weight": 1.5,
          "score": 3.14,
          "type": "example_string",
          "weight": 1.5
        }
      ],
      "total_risk_score": 3.14,
      "total_weight": 1.5
    },
    "source_id": "example_string",
    "source_name": "John Doe",
    "source_type": "example_string",
    "status": "open",
    "tenant_id": "example_string",
    "type": "example_string",
    "updated_at": "example_string"
  },
  "recommendation": "example_string"
}
GET
/accounts/{account_id}/identities/{identity_id}/rightsize
GET
Base URLstring

Target server for requests. Edit to use your own host.

Request Preview
Response

Response will appear here after sending the request

Path Parameters

Responses

afterobject
beforeobject
generated_atstring
identityobject
recommendationstring