GET /v1/admin/site-groups
List all tenant site groups for a platform administrator
Description (from the contract)
Requires a live platform identity and both permissions under shared IAM rules. Tenant credentials are rejected even when they contain similarly named permissions. No scope override is accepted. Count and page come from one database snapshot. Groups are ordered by created_at, id, scope_id ascending. A user is returned only when the scope has exactly one non-deleted system tenant_owner with an active membership. Missing or multiple owners are explicit; the actor or first member is never substituted.
Parameters
| Name | In | Type | Required | Description |
|---|---|---|---|---|
page | query | integer | No | — |
limit | query | integer | No | — |
Responses
| Status | Description |
|---|---|
200 | Complete scoped-resource rows and a real global total. Fields： |
400 | Invalid request or precondition. A refused name or remark is validation_error with error.details {field: name|remark, reason}. |
401 | Authentication required. |
403 | Permission denied. |
503 | Site group service unavailable. |
What to do on failure
400Fix the parameters or body per the field list; do not retry unchanged.401Check the credential format and whether it expired or was rotated.403Check the key scopes, the owner’s current permissions and the tenant scope; never switch to a more privileged account.503A dependency is unavailable: retry later with the original Idempotency-Key.