Access Control API

The Access Control API provides endpoints to manage and query access control information for Organizations, Projects, Users, and Roles in Globant Enterprise AI, supporting integration with external systems to handle user memberships, role assignments, and access permissions across Organizations and Projects.

For generic variables needed to use the API, see the API Reference.

Endpoints

Authentication

All endpoints require authentication using one of the following:

• Authorization: Bearer $GEAI_APITOKEN
• Authorization: Bearer $OAuth_accesstoken

For $OAuth_accesstoken, you must also include the header: ProjectId: $GEAI_PROJECT_ID

GET/accessControl/memberships

Given an email, lists all Organizations and Projects the User belongs to, including their Roles in each.

This endpoint requires a Globant Enterprise AI API token related to Organization scope.

Parameters

Request

• Method: GET
• Path: $BASE_URL/v2/accessControl/memberships
• Body: Empty

Response

{
  "count": integer, // Total number of Organizations found
  "pages": integer, // Total number of pages
  "organizations": 
    {
      "isStationAvailable": true, // Indicates if the Organization has station available
      "organizationId": "string", // Unique identifier for the Organization
      "organizationName": "string", // Organization name
      "projects": [
        {
          "projectDescription": "string", // Description of the Project
          "projectId": "string", // Unique identifier for the Project
          "projectName": "string", // Project name
          "roles": [
            {
              "id": "string", // Unique identifier for the Role
              "name": "string", // Role name
              "externalId": "string", // External system identifier for the Role
              "type": "string", // Role type: Backend, Frontend, Platform
              "origin": "string", // Role origin: System or User defined
            }
          
        }
      ]
    }
  ]
}

cURL Sample

curl -X GET "$BASE_URL/v2/accessControl/memberships?email=string&startPage=1&pageSize=3&orderKey=organizationName" \
  -H "Authorization: Bearer $GEAI_APITOKEN"

GET/accessControl/projects/memberships

Given an email and an Organization, lists all Projects the User is involved in and their Roles in each Project.

This endpoint requires a Globant Enterprise AI API token related to Organization scope.

Parameters

Request

• Method: GET
• Path: $BASE_URL/v2/accessControl/projects/memberships
• Body: Empty

Response

{
  "count": integer, // Total number of Projects found
  "pages": integer, // Total number of pages
  "projects": 
    {
      "organizationId": "string", // Organization unique identifier
      "organizationName": "string", // Organization name
      "projectDescription": "string", // Project description
      "projectId": "string", // Project unique identifier
      "projectName": "string", // Project name
      "roles": [
        {
          "id": "string", // Role unique identifier
          "name": "string", // Role name
          "externalId": "string", // External system identifier for the Role
          "type": "string", // Role type: Backend, Frontend, Platform
          "origin": "string", // Role origin: System or User defined
    }
  
}

cURL Sample

curl -X GET "$BASE_URL/v2/accessControl/projects/memberships?email=string&startPage=1&pageSize=3&orderKey=projectName" \
  -H "Authorization: Bearer $GEAI_APITOKEN" \
  -H "organization-id: $GEAI_ORDANIZATIONID"

GET/accessControl/projects/roles

Given a Project, retrieves all Roles supported by that Project.

This endpoint requires a Globant Enterprise AI API token related to Organization scope.

Parameters

Request

• Method: GET
• Path: $BASE_URL/v2/accessControl/projects/roles
• Body: Empty

Response

{
  "count": integer, // Total number of Roles found
  "pages": integer, // Total number of pages
  "project": {
    "organizationId": "string", // Organization unique identifier
    "organizationName": "string", // Organization name
    "projectDescription": "string", // Project description
    "projectId": "string", // Project unique identifier
    "projectName": "string", // Project name
    "roles": 
      {
        "id": "string", // Role unique identifier
        "name": "string", // Role name
        "externalId": "string", // External system identifier for the Role
        "type": "string", // Role type: Backend, Frontend, Platform
        "origin": "string", // Role origin: System or User defined
   }
  
 }
}

cURL Sample

curl -X GET "$BASE_URL/accessControl/projects/roles?startPage=1&pageSize=3&orderKey=name" \
  -H "Authorization: Bearer $GEAI_APITOKEN" \
  -H "project-id: $GEAI_PROJECTID"

GET/accessControl/projects/members

Given a Project, lists all members and their Roles.

This endpoint requires a Globant Enterprise AI API token related to Organization scope.

Parameters

Request

• Method: GET
• Path: $BASE_URL/v2/accessControl/projects/members
• Body: Empty

Response

{
  "count": integer, // Total number of members found
  "pages": integer, // Total number of pages
  "project": {
    "organizationId": "string", // Organization unique identifier
    "organizationName": "string", // Organization name
    "projectDescription": "string", // Project description
    "projectId": "string", // Project unique identifier
    "projectName": "string", // Project name
    "members": 
      {
        "id": "string", // User unique identifier
        "name": "string", // User name
        "email": "string", // User email
        "accessType": [
          "string" // Access type: backend, frontend
        ,
        "roles": 
          {
            "id": "string", // Role unique identifier
            "name": "string", // Role name
            "externalId": "string", // External system identifier for the Role
            "type": "string", // Role type: Backend, Frontend, Platform
            "origin": "string", // Role origin: System or User defined
      }
    
  }
}

cURL Sample

curl -X GET "$BASE_URL/v2/accessControl/projects/members?startPage=1&pageSize=3&orderKey=name" \
  -H "Authorization: Bearer $GEAI_APITOKEN" \
  -H "project-id: $GEAI_PROJECTID"

GET/accessControl/organizations/members

Given an Organization, lists all members and their Roles.

This endpoint requires a Globant Enterprise AI API token related to Organization scope.

Parameters

Request

• Method: GET
• Path: $BASE_URL/v2/accessControl/organizations/members
• Body: Empty

Response

{
  "count": integer, // Total number of members found
  "pages": integer, // Total number of pages
  "organization": {
    "organizationId": "string", // Organization unique identifier
    "organizationName": "string", // Organization name
    "members": 
      {
        "id": "string", // User unique identifier
        "name": "string", // User name
        "email": "string", // User email
        "accessType": [
          "string" // Access type: backend, frontend
        ,
        "roles": 
          {
            "id": "string", // Role unique identifier
            "name": "string", // Role name
            "externalId": "string", // External system identifier for the Role
            "type": "string", // Role type: Backend
            "origin": "string" // Role origin: System
          }
        
      }
    ]
  }
}

cURL Sample

curl -X GET "$BASE_URL/v2/accessControl/organizations/members?startPage=1&pageSize=3&orderKey=name" \
  -H "Authorization: Bearer $GEAI_APITOKEN" \
  -H "organization-id: $GEAI_PROJECTID"

GET /accessControl/organization/plugin-runtime-policies

Retrieves the plugin runtime policies defined for a given organization. If no policies are defined, a message will indicate that individual policies apply.

Request

• Method: GET
• Path: $BASE_URL/v2/accessControl/organization/plugin-runtime-policies
• Body: Empty

Response

1. Organizations without policies

• Status: 200 OK
• Response Body:

{
    "messages": 
        {
            "description": "string” // Message submitted: “Organization plugin runtime policies not defined. Individual policy will apply."
        }
    
}

2. Organizations with policies

• Status: 200 OK
• Body:

{
    "policies": {
        "chatSharingPermissions": "string", //  Gets the maximum execution permissions for organization Agents at The Station. Values can be”none” (only available to import), “project” (all users in the project can execute it) or “organization” all users in the organization can execute it.
        "externalExecutionPermissions": "string" // Allows sharing conversation by anonymous users to Workspace. Values can be: "none", "project", "organization"
    }
}

cURL Sample

curl -X GET "$BASE_URL/v2/accessControl/organization/plugin-runtime-policies" \
- H 'authorization: Bearer $GEAI_ORGANIZATION_APITOKEN' \
  -H 'content-type: application/json' \
  -H 'organization-id: $GEAI_ORGANIZATION_ID'