GET /v1/admin/site-groups
List all tenant site groups for a platform administrator
说明（契约原文）
Requires a live platform identity and both permissions under shared IAM rules. Tenant credentials are rejected even when they contain similarly named permissions. No scope override is accepted. Count and page come from one database snapshot. Groups are ordered by created_at, id, scope_id ascending. A user is returned only when the scope has exactly one non-deleted system tenant_owner with an active membership. Missing or multiple owners are explicit; the actor or first member is never substituted.
参数
| 名称 | 位置 | 类型 | 必填 | 说明 |
|---|---|---|---|---|
page | query | integer | 否 | — |
limit | query | integer | 否 | — |
响应
| 状态码 | 说明 |
|---|---|
200 | Complete scoped-resource rows and a real global total. 字段： |
400 | Invalid request or precondition. A refused name or remark is validation_error with error.details {field: name|remark, reason}. |
401 | Authentication required. |
403 | Permission denied. |
503 | Site group service unavailable. |
失败时怎么办
400按字段说明修正参数或请求体再发；不要原样重试。401检查凭据格式、是否过期或被轮换。403检查 Key 范围与所有者当前权限、当前租户作用域；不要换更高权限账号绕过。503依赖暂不可用：稍后用原 Idempotency-Key 重试。