{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/harness/main/json-schema/harness-access-check-request-schema.json",
  "title": "AccessCheckRequest",
  "x-generated": "2026-10-04",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/harness-access-control-list-api-openapi.yml#/components/schemas/AccessCheckRequest",
  "required": [
    "permissions"
  ],
  "type": "object",
  "properties": {
    "permissions": {
      "maxItems": 10000,
      "minItems": 0,
      "type": "array",
      "description": "List of permission checks to perform",
      "items": {
        "$ref": "#/$defs/PermissionCheck"
      }
    },
    "principal": {
      "$ref": "#/$defs/PrincipalMetadata"
    }
  },
  "$defs": {
    "PermissionCheck": {
      "required": [
        "permission",
        "resourceType"
      ],
      "type": "object",
      "properties": {
        "resourceScope": {
          "$ref": "#/$defs/ResourceScope"
        },
        "resourceType": {
          "type": "string"
        },
        "resourceAttributes": {
          "type": "object",
          "additionalProperties": {
            "type": "string"
          }
        },
        "resourceIdentifier": {
          "type": "string"
        },
        "permission": {
          "type": "string"
        }
      }
    },
    "PrincipalMetadata": {
      "required": [
        "principalIdentifier",
        "principalType"
      ],
      "type": "object",
      "properties": {
        "principalIdentifier": {
          "type": "string"
        },
        "principalType": {
          "type": "string",
          "description": "Principal Type in Harness",
          "enum": [
            "USER",
            "USER_GROUP",
            "SERVICE_ACCOUNT"
          ]
        },
        "principalUniqueId": {
          "type": "string"
        }
      },
      "description": "Principal (user/service account) to check the access for"
    },
    "ResourceScope": {
      "type": "object",
      "properties": {
        "accountIdentifier": {
          "type": "string"
        },
        "orgIdentifier": {
          "type": "string"
        },
        "projectIdentifier": {
          "type": "string"
        }
      }
    }
  }
}