Check Your Permissions

CHECK YOUR PERMISSIONS

This guide shows you how to check your own permissions on a swamp serve instance without needing admin access.

List everything you can do

swamp access can-i --server wss://swamp.example.com

This returns a summary of all actions you are allowed to perform, based on your identity and the grants that apply to you.

Check a specific permission

swamp access can-i --action run --on 'workflow:@acme/deploy' \
  --server wss://swamp.example.com

This checks whether you can perform the specific action on the specific resource.

Grants that depend on groups

can-i evaluates your own session, including the IdP groups and collectives recorded on your server token, so idp-group: grants and conditions on principal.collectives are reflected without extra flags.

Manage Access Grants — how admins create and manage grants
Access Commands — full CLI reference for swamp access can-i

List everything you can do

Check a specific permission

Grants that depend on groups

Related