AccessEntry
One grant that reaches the group or repository the access page is about.
Shape
- created_atstring · date-time
- grant_idGrantId (string · uuid)
roleRoleView
- The RoleView schema
- namestringThe role's display name: a built-in name such as
Developer, or the custom role's name. - rankAccessLevelguestreporterdevelopermaintainerownerThe built-in rank the role counts as wherever a rank is compared, such as a protected branch's minimum.
- builtinAccessLevelguestreporterdevelopermaintainerowneror nulloptionalSet when the role is built in.
- customRoleId (string · uuid) or nulloptionalSet when the role is one the organization defined.
sourceAccessSource
- The AccessSource schema
atAccessScope
- The AccessScope schema
- full_pathstring
- idstring
- typeScopeTypegrouprepository
- kindAccessSourceKinddirectinheritedWhere an entry on the access page comes from.
- subjectGrantSubject
- expires_atstring · date-time or nulloptional
granted_byActorSummary or nulloptional
- The ActorSummary schema
- emailstring
- idstring
- usernamestring
- avatar_urlstring or nulloptional
- last_exercised_atstring · date-time or nulloptionalWhen the grant last let somebody do something, to the day. Absent until it has.
limited_toarray of AccessLimitoptionalThe limits that take away part of what this grant gives here: set on this group or repository or one above it, naming the grant's holder, a team the person is on, or everyone — or every service account, for one. An organization owner is never limited, so their entries carry none.
- The AccessLimit schema
atAccessScopeWhere the limit is set. It caps its subject there and everywhere beneath, including beneath a group or repository that does not inherit access.
- The AccessScope schema
- full_pathstring
- idstring
- typeScopeTypegrouprepository
- created_atstring · date-time
- limit_idLimitId (string · uuid)
- subjectLimitSubjectEntry
ceilingRoleView or nulloptionalThe most the subject may hold. Absent when the limit allows nothing at all.
- The RoleView schema
- namestringThe role's display name: a built-in name such as
Developer, or the custom role's name. - rankAccessLevelguestreporterdevelopermaintainerownerThe built-in rank the role counts as wherever a rank is compared, such as a protected branch's minimum.
- builtinAccessLevelguestreporterdevelopermaintainerowneror nulloptionalSet when the role is built in.
- customRoleId (string · uuid) or nulloptionalSet when the role is one the organization defined.
created_byActorSummary or nulloptional
- The ActorSummary schema
- emailstring
- idstring
- usernamestring
- avatar_urlstring or nulloptional
- reasonstring or nulloptional
- reasonstring or nulloptional
Example
Synthesized example{
"created_at": "2026-10-10T13:38:29Z",
"grant_id": "b80c881e-ddb8-4707-882f-f708c712073b",
"role": {
"name": "payments-api",
"rank": "guest",
"builtin": "guest",
"custom": "05f5f026-4fe6-49eb-aba8-e6b9f84bc92c"
},
"source": {
"at": {
"full_path": "acme/payments-api",
"id": "id-7cbe",
"type": "group"
},
"kind": "direct"
},
"subject": {
"principal": {
"id": "ae5e65fb-313f-46a9-8c49-acc3d9f3aab9",
"kind": "user",
"username": "lin",
"avatar_url": "https://gitmoap.example/acme/4356018e"
}
},
"expires_at": "2026-10-14T23:15:45Z",
"granted_by": {
"email": "mara@acme.example",
"id": "id-e1a1",
"username": "tomas",
"avatar_url": "https://gitmoap.example/acme/d4532253"
},
"last_exercised_at": "2026-10-08T15:54:56Z",
"limited_to": [
{
"at": {
"full_path": "acme/payments-api",
"id": "id-43ed",
"type": "group"
},
"created_at": "2026-10-12T09:34:05Z",
"limit_id": "a4fc5ce8-bec6-4412-9063-712151bb2e09",
"subject": {
"principal": {
"id": "26280720-aeee-40f2-98c8-23203f6d5f5a",
"kind": "user",
"username": "mara"
}
}
},
{
"at": {
"full_path": "acme/payments-api",
"id": "id-e444",
"type": "group"
},
"created_at": "2026-10-15T05:48:04Z",
"limit_id": "3b6bf032-e463-4eff-a326-5698793506a3",
"subject": {
"principal": {
"id": "48100a20-48cb-4689-93f7-b774e24ad9b4",
"kind": "user",
"username": "mara"
}
}
}
],
"reason": "reason-1ff6"
}
Graph
Used inside
Used by
Sent by 0 operations
No operation takes it as a request body.