cdnca

API reference

/v1/tenant

1 operations

← All groups · First call? Read the tutorial: auth, permissions, requests and responses, common failures

MethodPathSummaryAuth
GET/v1/tenant/membersList the members of the caller's tenant scopeSession

Contract file：api/openapi/v1/control.yaml

Operation details

GET /v1/tenant/members

List the members of the caller's tenant scope

operationId
listTenantMembers
Auth
  • Session: the Bearer session of a signed-in control plane user, used by the customer in their own control plane; a plugin must never ask for it.
Required permissions

The contract has no separate permission annotation; see the description below and the 403 response.

Description (from the contract)

Tenant session with identity.users.manage or identity.roles.manage (the tenant owner). The owner is the scope's earliest member.

Responses

listTenantMembers Responses
StatusDescription
200Members.

Fields：items: array<TenantMember>

401Authentication failed or the session is invalid.
403The authenticated principal is not allowed to perform the action.

What to do on failure

  • 401 Check the credential format and whether it expired or was rotated.
  • 403 Check the key scopes, the owner’s current permissions and the tenant scope; never switch to a more privileged account.

↑ Back to list