cmind/tenants/v1/group_service.proto
Package: cmind.tenants.v1
Messages
Group
Group is a custom, named collection of users within a tenant — distinct from the tenant access ladder (TenantRole). Groups are usable as subjects when granting permissions on deployments (group#member in the FGA model). Every RPC carries tenant_id and gates on tenant:{tenant_id} can_admin: managing groups is a tenant-admin operation, so there's no separate group-level admin relation in the FGA model.
| Field | Type | Number | Description |
|---|---|---|---|
id | string | 1 | |
tenantId | string | 2 | |
name | string | 3 | |
memberCount | uint32 | 4 | member_count is populated by List responses only. |
CreateGroupRequest
| Field | Type | Number | Description |
|---|---|---|---|
tenantId | string | 1 | |
name | string | 2 |
CreateGroupResponse
| Field | Type | Number | Description |
|---|---|---|---|
group | Group | 1 |
DeleteGroupRequest
| Field | Type | Number | Description |
|---|---|---|---|
tenantId | string | 1 | |
groupId | string | 2 |
DeleteGroupResponse
ListGroupsRequest
| Field | Type | Number | Description |
|---|---|---|---|
tenantId | string | 1 |
ListGroupsResponse
| Field | Type | Number | Description |
|---|---|---|---|
groups | repeated Group | 1 |
GroupMember
| Field | Type | Number | Description |
|---|---|---|---|
userId | string | 1 | |
metadata | cmind.permissions.v1.UserMetadata | 2 | metadata is populated by List responses only. Absent when the user can no longer be resolved (deleted from the identity provider). |
ListGroupMembersRequest
| Field | Type | Number | Description |
|---|---|---|---|
tenantId | string | 1 | |
groupId | string | 2 |
ListGroupMembersResponse
| Field | Type | Number | Description |
|---|---|---|---|
members | repeated GroupMember | 1 |
AddGroupMemberRequest
| Field | Type | Number | Description |
|---|---|---|---|
tenantId | string | 1 | |
groupId | string | 2 | |
userId | string | 3 |
AddGroupMemberResponse
RemoveGroupMemberRequest
| Field | Type | Number | Description |
|---|---|---|---|
tenantId | string | 1 | |
groupId | string | 2 | |
userId | string | 3 |
RemoveGroupMemberResponse
Services
GroupService
CreateGroup
Creates a custom group in the tenant.
Request: CreateGroupRequest
Response: CreateGroupResponse
ListGroups
Lists the tenant's custom groups.
Request: ListGroupsRequest
Response: ListGroupsResponse
DeleteGroup
Deletes a group.
Request: DeleteGroupRequest
Response: DeleteGroupResponse
ListGroupMembers
Lists a group's members.
Request: ListGroupMembersRequest
Response: ListGroupMembersResponse
AddGroupMember
Adds a user to a group.
Request: AddGroupMemberRequest
Response: AddGroupMemberResponse
RemoveGroupMember
Removes a user from a group.
Request: RemoveGroupMemberRequest
Response: RemoveGroupMemberResponse