Definition Type
Definitions describe and constrain the inputs to Authzee using JSON Schema (Draft 2020-12).
Each list is an array of definitions for the selected type. Types must be unique and every
schema's root type must be object.
Docs
Query Backend
The query backend runs each grant's query. Only JMESPath is available for now.
Grant Breakdown
By Action
Grants are authorization rules. By default nothing is allowed in Authzee unless granted. Deny grants take precedence. Each has an effect (allow/deny), the
actions it applies to (empty matches all), a query evaluated against
{request, grant}, the expected equality result, and
applicable_on_failure.
Docs
Operation
An operation runs the shared request against the current defs and grants.
authorize returns a single decision; audit lists every grant's evaluation.
The same request is used for both.
Docs
Operation
A batch request shares one root request across many batch items for the same action.
Each item may override root fields (except action); unset fields fall back to the root.
batchAuthorize returns a decision per item; batchAudit lists grant evaluations per item.
Docs