Region
Organize
Groups, people, teams, roles and access
113 operations
groups
12 operationsRepository group management
- POST/admin/groups/{group_id}/reclaim-nameReclaim an organization's name (platform admin)
- GET/groupsList groups
- POST/groupsCreate a new repository group
- GET/groups/{group_id}Get a group by ID
- PUT/groups/{group_id}Update a group
- DEL/groups/{group_id}Delete a group
- PUT/groups/{group_id}/avatarGet a URL to upload a group's avatar to
- DEL/groups/{group_id}/avatarDelete a group avatar
- GET/groups/{group_id}/egress-usageOutbound-byte usage for a namespace, against its effective daily limit
- GET/groups/{group_id}/limitsGet the full usage-and-limits view for a group's namespace
- GET/groups/{group_id}/usageGet resource usage and plan limits for a group's namespace
- GET/groups/by-path/{full_path}Get a group by its full path
group-members
6 operationsGroup membership management
- GET/groups/{group_id}/membersList group members
- POST/groups/{group_id}/membersAdd a member to a group
- GET/groups/{group_id}/members/{user_id}Get a specific group member
- PUT/groups/{group_id}/members/{user_id}Update a group member's access level
- DEL/groups/{group_id}/members/{user_id}Remove a member from a group
- GET/users/{user_id}/groupsList groups the user is a member of
repo-members
6 operationsRepository membership management
- GET/repositories/{repo_id}/membersList repository members
- POST/repositories/{repo_id}/membersAdd a member to a repository
- GET/repositories/{repo_id}/members/{user_id}Get a specific repository member
- PUT/repositories/{repo_id}/members/{user_id}Update a repository member's access level
- DEL/repositories/{repo_id}/members/{user_id}Remove a member from a repository
- GET/users/{user_id}/repositoriesList repositories the user is a direct member of
teams
13 operationsAn organization's teams: named sets of people given access as one
- GET/groups/{group_id}/teamsAn organization's teams.
- POST/groups/{group_id}/teamsCreate a team in an organization, with its first people.
- GET/teams/{team_id}One team.
- PATCH/teams/{team_id}Rename a team, or change its description.
- DEL/teams/{team_id}Delete a team, revoking every grant it holds.
- GET/teams/{team_id}/accessThe access a team holds, on the groups and repositories you can see.
- PUT/teams/{team_id}/idp-linkMirror a team's roster from a group in the organization's identity provider.
- DEL/teams/{team_id}/idp-linkKeep a team's roster by hand again.
- GET/teams/{team_id}/membersThe people on a team.
- PUT/teams/{team_id}/members/{user_id}Put a person on a team, or change their place on it.
- DEL/teams/{team_id}/members/{user_id}Take a person off a team, or leave one yourself.
- GET/teams/{team_id}/usageWhere a team is named besides its grants.
- GET/user/teamsThe teams you are on, in every organization.
roles
6 operationsAn organization's custom roles: a built-in role with permissions added and removed
- GET/groups/{group_id}/rolesAn organization's custom roles.
- POST/groups/{group_id}/rolesDefine a custom role.
- GET/roles/{role_id}One custom role.
- PATCH/roles/{role_id}Change a custom role — and with it, everyone who holds it.
- DEL/roles/{role_id}Delete a custom role nothing uses.
- GET/roles/{role_id}/usageWhere a custom role is granted, as far as you can see.
access
19 operationsWho can do what on a group or repository, and why
- PATCH/access/grants/{grant_id}Change a grant's role, expiry or reason.
- DEL/access/grants/{grant_id}Revoke a grant, or give up your own.
- DEL/access/limits/{limit_id}Remove a limit.
- GET/access/permissionsEvery permission a role can hold, and the five built-in roles made of them.
- GET/groups/{group_id}/accessWho has access to a group, and why.
- GET/groups/{group_id}/access/explainWhy someone has the access they have on a group.
- POST/groups/{group_id}/access/grantsGive one role to people, service accounts or teams on a group.
- POST/groups/{group_id}/access/grants/revokeRevoke several of an organization's grants at once — all of them, or none.
- PUT/groups/{group_id}/access/inheritanceStop grants made on the groups above from reaching a group, or let them reach it again.
- GET/groups/{group_id}/access/limitsThe limits in force on a group: set there, or on a group above it.
- POST/groups/{group_id}/access/limitsCap someone on a group and everything beneath it, whatever they are granted.
- GET/groups/{group_id}/access/reviewThe organization's access review: every grant with a reason to look at it.
- GET/groups/{group_id}/peopleEveryone with access in an organization, and how each belongs to it.
- GET/repositories/{repo_id}/accessWho has access to a repository, and why.
- GET/repositories/{repo_id}/access/explainWhy someone has the access they have on a repository.
- POST/repositories/{repo_id}/access/grantsGive one role to people, service accounts or teams on a repository.
- PUT/repositories/{repo_id}/access/inheritanceStop grants made on the groups above from reaching a repository, or let them reach it again.
- GET/repositories/{repo_id}/access/limitsThe limits in force on a repository: set there, or on a group above it.
- POST/repositories/{repo_id}/access/limitsCap someone on a repository, whatever they are granted.
users
11 operationsUser management
- GET/userGet the signed-in user's own account
- GET/user/egress-usageThe caller's own outbound-byte usage for the current hour and day
- GET/usersList the members of a group, with their profiles
- POST/usersCreate the signed-in person's user profile
- GET/users/{user_id}Get a user by ID
- PUT/users/{user_id}Update your own user profile
- DEL/users/{user_id}Delete your own user account
- PUT/users/{user_id}/avatarGet a URL to upload your own avatar to
- DEL/users/{user_id}/avatarDelete your own avatar
- GET/users/by-email/{email}Look up a user by email address
- GET/users/by-username/{username}Look up a user by username
service-accounts
9 operationsService account management
- GET/groups/{group_id}/service-accountsList service accounts in a group
- POST/groups/{group_id}/service-accountsCreate a service account scoped to a group
- GET/repositories/{repo_id}/service-accountsList service accounts in a repository
- POST/repositories/{repo_id}/service-accountsCreate a service account scoped to a repository
- GET/service-accounts/{sa_id}Get a service account by ID
- PATCH/service-accounts/{sa_id}Update a service account
- DEL/service-accounts/{sa_id}Delete a service account
- PUT/service-accounts/{sa_id}/avatarGet a URL to upload a service account's avatar to
- DEL/service-accounts/{sa_id}/avatarDelete a service account avatar
access-tokens
6 operationsPersonal and service-account access tokens
- GET/service-accounts/{sa_id}/tokensList a service account's access tokens
- POST/service-accounts/{sa_id}/tokensCreate an access token for a service account
- DEL/service-accounts/{sa_id}/tokens/{token_id}Revoke a service account's access token
- GET/user/tokensList the authenticated user's personal access tokens
- POST/user/tokensCreate a personal access token for the authenticated user
- DEL/user/tokens/{token_id}Revoke one of the authenticated user's personal access tokens
audit
5 operationsAppend-only, tamper-evident audit log (org-owner / platform-admin read + verify)
- GET/admin/audit-logPlatform-wide audit log
- GET/admin/audit-log/verifyVerify any audit trail's chain integrity
- GET/groups/{group_id}/audit-logList an organization's audit log
- GET/groups/{group_id}/audit-log/verifyVerify an organization's audit-chain integrity
- GET/repositories/{repo_id}/audit-logList the audit records targeting a repository
insights
4 operationsCycle time and activity for repositories and groups
- GET/groups/{group_id}/insightsGet a namespace's flow metrics across its whole subtree
- GET/repositories/{repo_id}/insightsGet one repository's flow metrics over a window
- GET/repositories/{repo_id}/insights/cycle-timeGet exact p50 and p95 for a repository's four cycle-time durations
- GET/user/top-repositoriesList where the caller has been most active
activity
4 operationsActivity feeds — what happened, for a person, a repository or a group
- GET/groups/{group_id}/activityList a group subtree's activity timeline
- GET/repositories/{repo_id}/activityList a repository's activity timeline
- GET/user/activityList the caller's own activity across every namespace they reach
- GET/users/{user_id}/activityList another person's activity, filtered to what the caller can see
contributions
3 operationsA person's or service account's contributions over time
contributors
2 operationsWho contributed to a repository, and who took part in a merge request
attention
6 operationsThe attention inbox — what is waiting on you
- GET/user/attentionList the caller's attention inbox
- POST/user/attentionBookmark a merge request, work item, pipeline run or repository into your own inbox
- DEL/user/attention/{attention_id}Remove an attention item
- POST/user/attention/{attention_id}/doneMark an attention item done
- POST/user/attention/{attention_id}/snoozeSnooze an attention item until a chosen time
- GET/user/attention/countCount the caller's pending attention items, broken down by reason
dashboard
1 operationThe signed-in home: a summary of your work