Overview
- Introduction
- Authentication
- Examples
Endpoints
- Identities
- Token Auth
- Universal Auth
- GCP Auth
- AWS Auth
- Azure Auth
- Kubernetes Auth
- OIDC Auth
- JWT Auth
- Groups
- Organizations
- Projects
- Project Users
- Project Groups
- Project Identities
- Project Roles
- Project Templates
- Environments
- Folders
- Secret Tags
- Secrets
- Dynamic Secrets
- Secret Imports
- Identity Specific Privilege
- Integrations
- Service Tokens
- Audit Logs
Infisical PKI
- Certificate Authorities
- Certificates
- Certificate Templates
- Certificate Collections
- PKI Alerting
Infisical SSH
- Certificates
- Certificate Authorities
- Certificate Templates
Infisical KMS
- Keys
Update
Update a specific privilege of an identity.
An access token in Infisical
The slug of the privilege to update.
The ID of the identity to update.
The slug of the project of the identity in.
The new slug of the privilege to update.
@deprecated - use privilegePermission The permission object for the privilege.
- Read secrets
{ "permissions": [{"action": "read", "subject": "secrets"]}
- Read and Write secrets
{ "permissions": [{"action": "read", "subject": "secrets"], {"action": "write", "subject": "secrets"]}
- Read secrets scoped to an environment and secret path
- { "permissions": [{"action": "read", "subject": "secrets", "conditions": { "environment": "dev", "secretPath": { "$glob": "/" } }}] }
The permission object for the privilege.
Describe what action an entity can take. Possible actions: create, edit, delete, and read
The entity this permission pertains to. Possible options: secrets, environments
When specified, only matching conditions will be allowed to access given resource.
The environment slug this permission should allow.
Whether the privilege is temporary.
Type of temporary access given. Types: relative.
TTL for the temporary time. Eg: 1m, 1h, 1d.
ISO time for which temporary access should begin.
Authorizations
An access token in Infisical
Body
The slug of the privilege to update.
1
The ID of the identity to update.
1
The slug of the project of the identity in.
1
The new slug of the privilege to update.
1 - 60
@deprecated - use privilegePermission The permission object for the privilege.
- Read secrets
{ "permissions": [{"action": "read", "subject": "secrets"]}
- Read and Write secrets
{ "permissions": [{"action": "read", "subject": "secrets"], {"action": "write", "subject": "secrets"]}
- Read secrets scoped to an environment and secret path
- { "permissions": [{"action": "read", "subject": "secrets", "conditions": { "environment": "dev", "secretPath": { "$glob": "/" } }}] }
Describe what action an entity can take. Possible actions: create, edit, delete, and read
read
, create
, edit
, delete
The entity this permission pertains to. Possible options: secrets, environments
role
, member
, groups
, settings
, integrations
, webhooks
, service-tokens
, environments
, tags
, audit-logs
, ip-allowlist
, workspace
, secrets
, secret-folders
, secret-imports
, dynamic-secrets
, secret-rollback
, secret-approval
, secret-rotation
, identity
, certificate-authorities
, certificates
, certificate-templates
, ssh-certificate-authorities
, ssh-certificates
, ssh-certificate-templates
, pki-alerts
, pki-collections
, kms
, cmek
When specified, only matching conditions will be allowed to access given resource.
The environment slug this permission should allow.
The permission object for the privilege.
Describe what action an entity can take. Possible actions: create, edit, delete, and read
read
, create
, edit
, delete
The entity this permission pertains to. Possible options: secrets, environments
secrets
When specified, only matching conditions will be allowed to access given resource.
The environment slug this permission should allow.
Whether the privilege is temporary.
Type of temporary access given. Types: relative.
relative
TTL for the temporary time. Eg: 1m, 1h, 1d.
ISO time for which temporary access should begin.
Response
Was this page helpful?