Versions in this module Expand all Collapse all v0 v0.1.1 Jul 28, 2026 v0.1.0 Jul 27, 2026 Changes in this version + const PermissionsSyncScope + var ErrPortalOpenAPIConfig = errors.New("iam portal open api: config error") + var ErrPortalOpenAPIRequest = errors.New("iam portal open api: request error") + var ErrPortalOpenAPIToken = errors.New("iam portal open api: token error") + func FromContext(ctx context.Context) *authz.User + func MustUser(ctx context.Context) (*authz.User, error) + func PermissionDeclarationRevision(declaration PermissionManifestDeclaration) (string, error) + type APIError struct + Body string + Status int + func (e *APIError) Error() string + func (e *APIError) IsRetryable() bool + type AccountOrganization struct + Current bool + JoinedAt string + Name string + OrganizationID string + Role string + Slug string + type AccountPermissionSummary struct + ApplicationID string + OrganizationID string + Permissions []string + Roles []string + type AccountSecuritySummary struct + ActiveSessionCount int + EmailVerified bool + MFAEnrolled bool + PasswordCredentialPresent bool + TOTPEnrolled bool + WebAuthnEnrolled bool + type AccountUpdateProfileRequest struct + AvatarURL string + DisplayName string + Username string + type AuthOption func(*middleware.AuthConfig) + func WithAuthResponder(r middleware.ErrorResponder) AuthOption + type AuthorizationCreateOptions struct + IdempotencyKey string + type AuthorizationPageMetadata struct + Number int + Size int + TotalElements int64 + TotalPages int + type AuthorizationPageOptions struct + Page *int + Size *int + type Client struct + func NewClient(cfg *SDKConfig) (*Client, error) + func (c *Client) AcceptOrganizationInvitation(ctx context.Context, invitationToken, accessToken string) (*PublicOrganizationInvitationAcceptResponse, error) + func (c *Client) ChangePassword(ctx context.Context, accessToken string, input PasswordChangeRequest) error + func (c *Client) CheckAccountPermission(ctx context.Context, accessToken, permission, organizationID string) (*PermissionCheckResponse, error) + func (c *Client) Config() *SDKConfig + func (c *Client) Endpoint() string + func (c *Client) GetAccountPermissionSummary(ctx context.Context, accessToken, organizationID string) (*AccountPermissionSummary, error) + func (c *Client) GetAccountProfile(ctx context.Context, accessToken string) (*UserProfile, error) + func (c *Client) GetAccountSecuritySummary(ctx context.Context, accessToken string) (*AccountSecuritySummary, error) + func (c *Client) GetCurrentAccountOrganization(ctx context.Context, accessToken string) (*AccountOrganization, error) + func (c *Client) GetMe(ctx context.Context, accessToken string) (*UserProfile, error) + func (c *Client) HTTP() *http.Client + func (c *Client) HasAccountOrganizationMembership(ctx context.Context, accessToken, organizationID string) (bool, error) + func (c *Client) JWKS(ctx context.Context, jwksURL string) ([]byte, error) + func (c *Client) ListAccountOrganizations(ctx context.Context, accessToken string) ([]AccountOrganization, error) + func (c *Client) ListAccountSessions(ctx context.Context, accessToken string) ([]SessionView, error) + func (c *Client) ListPermissions(ctx context.Context, clientID string) (*ListPermissionsResponse, error) + func (c *Client) LogoutAccount(ctx context.Context, accessToken, refreshToken string) error + func (c *Client) PreviewOrganizationInvitation(ctx context.Context, invitationToken string) (*PublicOrganizationInvitationPreview, error) + func (c *Client) RequestPasswordReset(ctx context.Context, email, redirectURI string) error + func (c *Client) ResetPassword(ctx context.Context, token, newPassword string) error + func (c *Client) ResolvePermissions(ctx context.Context, clientID string, roles []string) (*ResolvePermissionsResponse, error) + func (c *Client) RevokeAccountSession(ctx context.Context, accessToken, sessionID string) error + func (c *Client) RevokeOtherAccountSessions(ctx context.Context, accessToken string) error + func (c *Client) SendEmailVerification(ctx context.Context, email string) (*EmailVerificationResponse, error) + func (c *Client) SetHTTPClient(h *http.Client) + func (c *Client) SwitchAccountOrganization(ctx context.Context, accessToken, organizationID string) (*OrganizationSwitchResponse, error) + func (c *Client) UpdateAccountProfile(ctx context.Context, accessToken string, input AccountUpdateProfileRequest) (*UserProfile, error) + func (c *Client) VerifyEmail(ctx context.Context, token string) (*EmailVerificationResponse, error) + type CreateOrganizationInvitationRequest struct + Email string + Role *OrganizationMemberRole + SendEmail *bool + type CreateOrganizationRequest struct + Name string + Slug string + type CreatePermissionRequest struct + Action string + Description *string + Name string + Resource string + type CreateRegistrationGrantRequest struct + AllowedDomain *string + AllowedEmail *string + DisplayName *string + ExpiresAt *string + MaxUses *int + Type CreateRegistrationGrantType + type CreateRegistrationGrantType string + const CreateRegistrationGrantAccessCode + const CreateRegistrationGrantEmailLink + type CreateRoleRequest struct + Description *string + Key string + Name string + type CreateUserRoleRequest struct + Condition *UserRoleCondition + RoleID string + type CreatedRegistrationGrant struct + Grant RegistrationGrant + RegistrationAccessCode *string + RegistrationGrantToken *string + type EmailVerificationResponse struct + Message string + RetryAfterSeconds *int + type FailMode int + const FailClose + const FailOpen + type ListPermissionsResponse struct + Permissions []PermissionDefinitionDTO + type Organization struct + CreatedAt string + ETag string + ID string + Name string + Slug string + UpdatedAt string + Version int64 + type OrganizationCreateOptions struct + IdempotencyKey string + type OrganizationIfMatchOptions struct + IfMatch string + type OrganizationInvitation struct + CreatedAt string + DeliveryStatus OrganizationInvitationDeliveryStatus + Email string + ExpiresAt string + ID string + Role OrganizationMemberRole + Status OrganizationInvitationStatus + UpdatedAt string + type OrganizationInvitationDeliveryStatus string + const OrganizationInvitationDeliveryFailed + const OrganizationInvitationDeliveryNotRequested + const OrganizationInvitationDeliverySent + type OrganizationInvitationListOptions struct + Page *int + Size *int + Status *OrganizationInvitationStatus + type OrganizationInvitationPage struct + Content []OrganizationInvitation + Page OrganizationPageMetadata + type OrganizationInvitationStatus string + const OrganizationInvitationAccepted + const OrganizationInvitationCancelled + const OrganizationInvitationExpired + const OrganizationInvitationPending + type OrganizationListOptions struct + Direction []OrganizationSortDirection + Page *int + Search *string + Size *int + Sort []string + type OrganizationMember struct + DisplayName string + Email string + JoinedAt string + MembershipID string + Role OrganizationMemberRole + UpdatedAt string + UserID string + Version int64 + type OrganizationMemberListOptions struct + Page *int + Search *string + Size *int + type OrganizationMemberPage struct + Content []OrganizationMember + Page OrganizationPageMetadata + type OrganizationMemberRole string + const OrganizationMemberRoleAdmin + const OrganizationMemberRoleMember + const OrganizationMemberRoleOwner + type OrganizationPage struct + Content []Organization + Page OrganizationPageMetadata + type OrganizationPageMetadata struct + Number int + Size int + TotalElements int64 + TotalPages int + type OrganizationSortDirection string + const OrganizationSortAscending + const OrganizationSortDescending + type OrganizationSwitchResponse struct + Continuation string + Message string + OrganizationID string + TokenRefreshRequired bool + type PasswordChangeRequest struct + CurrentPassword string + NewPassword string + type Permission struct + Action string + CreatedAt string + Description *string + ETag string + ID string + Key string + Name string + Resource string + Source string + UpdatedAt string + Version int64 + type PermissionCheckResponse struct + Allowed bool + ApplicationID string + OrganizationID string + Permission string + Roles []string + type PermissionDefinitionDTO struct + Action string + Description string + Resource string + type PermissionManifest struct + ManifestID string + Permissions []PermissionManifestDeclaration + Revision string + type PermissionManifestClient struct + func NewPermissionManifestClient(cfg PermissionManifestClientConfig) (*PermissionManifestClient, error) + func (c *PermissionManifestClient) ClearPermissionManifestTokenCache() + func (c *PermissionManifestClient) UpsertPermissionManifest(ctx context.Context, manifest PermissionManifest, idempotencyKey string) (*PermissionManifestResult, error) + func (c *PermissionManifestClient) ValidatePermissionManifest(ctx context.Context, manifest PermissionManifest) (*PermissionManifestResult, error) + type PermissionManifestClientConfig struct + ClientID string + ClientSecret string + HTTPClient *http.Client + IssuerEndpoint string + MaxRetries int + MaxRetryDelay time.Duration + Observer func(PermissionManifestObservation) + PortalAPIEndpoint string + Timeout time.Duration + TokenSkew time.Duration + type PermissionManifestContinueEvent struct + Code string + Mode string + Outcome string + Status int + type PermissionManifestCounts struct + Conflict int + Created int + Drift int + Resurrected int + Unchanged int + Updated int + type PermissionManifestDeclaration struct + Action string + Description *string + Name string + Resource string + func (d PermissionManifestDeclaration) Key() string + type PermissionManifestDrift struct + Key string + Kind string + Source string + type PermissionManifestError struct + Body string + Code string + CorrelationID string + Message string + RetryAfterSeconds int + Status int + func (e *PermissionManifestError) Error() string + type PermissionManifestFailurePolicy int + const PermissionManifestContinue + const PermissionManifestFailFast + const PermissionManifestFailurePolicyUnset + type PermissionManifestItem struct + Key string + Operation string + Reason string + type PermissionManifestMode string + const PermissionManifestUpsert + const PermissionManifestValidate + type PermissionManifestObservation struct + Duration time.Duration + Mode PermissionManifestMode + Outcome string + Status int + type PermissionManifestResult struct + Applied bool + Counts PermissionManifestCounts + Drift []PermissionManifestDrift + Fingerprint string + ManifestID string + Mode PermissionManifestMode + Results []PermissionManifestItem + Revision string + type PermissionManifestStartupMode int + const PermissionManifestCIValidate + const PermissionManifestDeploymentUpsert + const PermissionManifestDevelopmentStartup + const PermissionManifestDisabled + type PermissionManifestStartupOptions struct + FailurePolicy PermissionManifestFailurePolicy + IdempotencyKey string + Mode PermissionManifestStartupMode + OnContinueError func(PermissionManifestContinueEvent) + type PermissionManifestStartupResult struct + Continued bool + NetworkAttempted bool + Result *PermissionManifestResult + func RunPermissionManifestStartup(ctx context.Context, client *PermissionManifestClient, ...) (PermissionManifestStartupResult, error) + type PermissionPage struct + Content []Permission + Page AuthorizationPageMetadata + type PortalOpenAPIClient struct + func NewPortalOpenAPIClient(cfg PortalOpenAPIClientConfig) (*PortalOpenAPIClient, error) + func (c *PortalOpenAPIClient) CancelOrganizationInvitation(ctx context.Context, organizationID, invitationID string) error + func (c *PortalOpenAPIClient) ClearTokenCache(scopes ...PortalOpenAPIScope) + func (c *PortalOpenAPIClient) CreateOrganization(ctx context.Context, request CreateOrganizationRequest, ...) (*Organization, error) + func (c *PortalOpenAPIClient) CreateOrganizationInvitation(ctx context.Context, organizationID string, ...) (*OrganizationInvitation, error) + func (c *PortalOpenAPIClient) CreatePermission(ctx context.Context, req CreatePermissionRequest, ...) (*Permission, error) + func (c *PortalOpenAPIClient) CreateRegistrationGrant(ctx context.Context, request CreateRegistrationGrantRequest) (*CreatedRegistrationGrant, error) + func (c *PortalOpenAPIClient) CreateRole(ctx context.Context, req CreateRoleRequest, ...) (*Role, error) + func (c *PortalOpenAPIClient) CreateUserRole(ctx context.Context, userID string, req CreateUserRoleRequest, ...) (*UserRoleAssignment, error) + func (c *PortalOpenAPIClient) DeleteOrganization(ctx context.Context, organizationID string, ...) error + func (c *PortalOpenAPIClient) DeletePermission(ctx context.Context, id, ifMatch string) error + func (c *PortalOpenAPIClient) DeleteRole(ctx context.Context, id, ifMatch string) error + func (c *PortalOpenAPIClient) DeleteUserRole(ctx context.Context, userID, assignmentID, ifMatch string) error + func (c *PortalOpenAPIClient) GetMachineToken(ctx context.Context, scope PortalOpenAPIScope) (*PortalOpenAPIMachineToken, error) + func (c *PortalOpenAPIClient) GetOrganization(ctx context.Context, organizationID string) (*Organization, error) + func (c *PortalOpenAPIClient) GetOrganizationInvitation(ctx context.Context, organizationID, invitationID string) (*OrganizationInvitation, error) + func (c *PortalOpenAPIClient) GetOrganizationMember(ctx context.Context, organizationID, membershipID string) (*OrganizationMember, error) + func (c *PortalOpenAPIClient) GetPermission(ctx context.Context, id string) (*Permission, error) + func (c *PortalOpenAPIClient) GetRegistrationGrant(ctx context.Context, grantID string) (*RegistrationGrant, error) + func (c *PortalOpenAPIClient) GetRole(ctx context.Context, id string) (*Role, error) + func (c *PortalOpenAPIClient) ListOrganizationInvitations(ctx context.Context, organizationID string, ...) (*OrganizationInvitationPage, error) + func (c *PortalOpenAPIClient) ListOrganizationMembers(ctx context.Context, organizationID string, ...) (*OrganizationMemberPage, error) + func (c *PortalOpenAPIClient) ListOrganizations(ctx context.Context, options OrganizationListOptions) (*OrganizationPage, error) + func (c *PortalOpenAPIClient) ListPermissions(ctx context.Context, options AuthorizationPageOptions) (*PermissionPage, error) + func (c *PortalOpenAPIClient) ListRegistrationGrantRedemptions(ctx context.Context, grantID string, page, size *int) (*RegistrationGrantRedemptionPage, error) + func (c *PortalOpenAPIClient) ListRegistrationGrants(ctx context.Context, options RegistrationGrantListOptions) (*RegistrationGrantPage, error) + func (c *PortalOpenAPIClient) ListRolePermissions(ctx context.Context, roleID string, options AuthorizationPageOptions) (*RolePermissionBindingPage, error) + func (c *PortalOpenAPIClient) ListRoles(ctx context.Context, options AuthorizationPageOptions) (*RolePage, error) + func (c *PortalOpenAPIClient) ListUserRoles(ctx context.Context, userID string, options AuthorizationPageOptions) (*UserRoleAssignmentPage, error) + func (c *PortalOpenAPIClient) PauseRegistrationGrant(ctx context.Context, grantID string) (*RegistrationGrant, error) + func (c *PortalOpenAPIClient) RemoveOrganizationMember(ctx context.Context, organizationID, membershipID string) error + func (c *PortalOpenAPIClient) ReplaceRolePermissions(ctx context.Context, roleID string, permissionIDs []string, ifMatch string) (*RolePermissionSet, error) + func (c *PortalOpenAPIClient) RequestJSON(ctx context.Context, method, path string, body any, out any) error + func (c *PortalOpenAPIClient) ResendOrganizationInvitation(ctx context.Context, organizationID, invitationID string) (*OrganizationInvitation, error) + func (c *PortalOpenAPIClient) ResumeRegistrationGrant(ctx context.Context, grantID string) (*RegistrationGrant, error) + func (c *PortalOpenAPIClient) RevokeRegistrationGrant(ctx context.Context, grantID string, reason *string) (*RegistrationGrant, error) + func (c *PortalOpenAPIClient) UpdateOrganization(ctx context.Context, organizationID string, request UpdateOrganizationRequest, ...) (*Organization, error) + func (c *PortalOpenAPIClient) UpdateOrganizationMemberRole(ctx context.Context, organizationID, membershipID string, ...) (*OrganizationMember, error) + func (c *PortalOpenAPIClient) UpdatePermission(ctx context.Context, id string, req UpdatePermissionRequest, ifMatch string) (*Permission, error) + func (c *PortalOpenAPIClient) UpdateRole(ctx context.Context, id string, req UpdateRoleRequest, ifMatch string) (*Role, error) + func (c *PortalOpenAPIClient) UpdateUserRole(ctx context.Context, userID, assignmentID string, req UpdateUserRoleRequest, ...) (*UserRoleAssignment, error) + type PortalOpenAPIClientConfig struct + ClientID string + ClientSecret string + HTTPClient *http.Client + Issuer string + PortalEndpoint string + Timeout time.Duration + TokenSkew time.Duration + type PortalOpenAPIError struct + Body string + Code string + RetryAfter string + Status int + func (e *PortalOpenAPIError) Error() string + func (e *PortalOpenAPIError) Unwrap() error + type PortalOpenAPIMachineToken struct + AccessToken string + ExpiresAt time.Time + Scope PortalOpenAPIScope + type PortalOpenAPIScope string + const OrganizationInvitationsReadScope + const OrganizationInvitationsWriteScope + const OrganizationMembersReadScope + const OrganizationMembersWriteScope + const OrganizationsReadScope + const OrganizationsWriteScope + const PermissionsReadScope + const PermissionsWriteScope + const PortalOpenAPIReadScope + const PortalOpenAPIWriteScope + const RegistrationGrantsReadScope + const RegistrationGrantsRedemptionsReadScope + const RegistrationGrantsWriteScope + const RolePermissionsReadScope + const RolePermissionsWriteScope + const RolesReadScope + const RolesWriteScope + const UserRolesReadScope + const UserRolesWriteScope + type PortalOpenAPITokenError struct + Body string + Code string + Status int + func (e *PortalOpenAPITokenError) Error() string + func (e *PortalOpenAPITokenError) Unwrap() error + type PreparedPermissionManifest struct + Fingerprint string + ManifestID string + Mode PermissionManifestMode + Permissions []PermissionManifestDeclaration + Revision string + func PreparePermissionManifest(manifest PermissionManifest, mode PermissionManifestMode) (PreparedPermissionManifest, error) + type PublicOrganizationInvitationAcceptResponse struct + AcceptedAt string + ApplicationID string + Continuation string + OrganizationID string + OrganizationName string + Role string + Status string + type PublicOrganizationInvitationPreview struct + ApplicationID string + ApplicationName string + ExpiresAt string + InviteeEmail string + OrganizationID string + OrganizationName string + Role string + Status string + type RegistrationGrant struct + AllowedDomain *string + AllowedEmail *string + CreatedAt string + DisplayName *string + ExpiresAt *string + ID string + MaxUses *int + RevokeReason *string + RevokedAt *string + SourceType string + Status RegistrationGrantStatus + Type RegistrationGrantType + UpdatedAt string + UsedCount int + type RegistrationGrantListOptions struct + Page *int + Search *string + Size *int + Status *RegistrationGrantStatus + Type *RegistrationGrantType + type RegistrationGrantPage struct + Content []RegistrationGrant + Page RegistrationGrantPageMetadata + type RegistrationGrantPageMetadata struct + Number int + Size int + TotalElements int64 + TotalPages int + type RegistrationGrantRedemption struct + AuthMethod *string + ClientID *string + Email *string + FailureReason *string + ID string + IDPID *string + RedeemedAt string + Result string + type RegistrationGrantRedemptionPage struct + Content []RegistrationGrantRedemption + Page RegistrationGrantPageMetadata + type RegistrationGrantStatus string + const RegistrationGrantActive + const RegistrationGrantExpired + const RegistrationGrantPaused + const RegistrationGrantRedeemed + const RegistrationGrantRevoked + type RegistrationGrantType string + const RegistrationGrantAccessCode + const RegistrationGrantEmailLink + const RegistrationGrantOrgInvitation + type ResolveMode int + const ResolveFullSync + const ResolveOnDemand + type ResolvePermissionsRequest struct + ClientID string + Roles []string + type ResolvePermissionsResponse struct + Permissions []string + type Role struct + CreatedAt string + Description *string + ETag string + ID string + Key string + Name string + System bool + UpdatedAt string + Version int64 + type RolePage struct + Content []Role + Page AuthorizationPageMetadata + type RolePermissionBinding struct + CreatedAt string + PermissionID string + RoleID string + type RolePermissionBindingPage struct + Content []RolePermissionBinding + ETag string + Page AuthorizationPageMetadata + type RolePermissionSet struct + ETag string + PermissionIDs []string + RoleID string + Version int64 + type SDK struct + func New(cfg *SDKConfig) (*SDK, error) + func (s *SDK) AcceptOrganizationInvitation(ctx context.Context, invitationToken, accessToken string) (*PublicOrganizationInvitationAcceptResponse, error) + func (s *SDK) Authenticate(opts ...AuthOption) func(http.Handler) http.Handler + func (s *SDK) ChangePassword(ctx context.Context, accessToken string, input PasswordChangeRequest) error + func (s *SDK) CheckAccountPermission(ctx context.Context, accessToken, permission, organizationID string) (*PermissionCheckResponse, error) + func (s *SDK) Client() *Client + func (s *SDK) GetAccountPermissionSummary(ctx context.Context, accessToken, organizationID string) (*AccountPermissionSummary, error) + func (s *SDK) GetAccountSecuritySummary(ctx context.Context, accessToken string) (*AccountSecuritySummary, error) + func (s *SDK) GetCurrentAccountOrganization(ctx context.Context, accessToken string) (*AccountOrganization, error) + func (s *SDK) GetMe(ctx context.Context, accessToken string, opts ...UserProfileOption) (*UserProfile, error) + func (s *SDK) HasAccountOrganizationMembership(ctx context.Context, accessToken, organizationID string) (bool, error) + func (s *SDK) ListAccountOrganizations(ctx context.Context, accessToken string) ([]AccountOrganization, error) + func (s *SDK) ListAccountSessions(ctx context.Context, accessToken string) ([]SessionView, error) + func (s *SDK) LogoutAccount(ctx context.Context, accessToken, refreshToken string) error + func (s *SDK) PreviewOrganizationInvitation(ctx context.Context, invitationToken string) (*PublicOrganizationInvitationPreview, error) + func (s *SDK) RequestPasswordReset(ctx context.Context, email, redirectURI string) error + func (s *SDK) RequireAllPerms(perms []authz.PermissionKey, opts ...middleware.Option) func(http.Handler) http.Handler + func (s *SDK) RequireAnyPerm(perms []authz.PermissionKey, opts ...middleware.Option) func(http.Handler) http.Handler + func (s *SDK) RequireNoImpersonation(opts ...middleware.Option) func(http.Handler) http.Handler + func (s *SDK) RequirePerm(perm authz.PermissionKey, opts ...middleware.Option) func(http.Handler) http.Handler + func (s *SDK) RequireStepUp(acr string, opts ...middleware.Option) func(http.Handler) http.Handler + func (s *SDK) ResetPassword(ctx context.Context, token, newPassword string) error + func (s *SDK) Resolver() authz.Resolver + func (s *SDK) RevokeAccountSession(ctx context.Context, accessToken, sessionID string) error + func (s *SDK) RevokeOtherAccountSessions(ctx context.Context, accessToken string) error + func (s *SDK) SendEmailVerification(ctx context.Context, email string) (*EmailVerificationResponse, error) + func (s *SDK) SwitchAccountOrganization(ctx context.Context, accessToken, organizationID string) (*OrganizationSwitchResponse, error) + func (s *SDK) UpdateAccountProfile(ctx context.Context, accessToken string, input AccountUpdateProfileRequest) (*UserProfile, error) + func (s *SDK) Verifier() *iamjwt.Verifier + func (s *SDK) VerifyEmail(ctx context.Context, token string) (*EmailVerificationResponse, error) + type SDKConfig struct + Audience string + ClientID string + ClientSecret string + DisableUserProfileCache bool + Endpoint string + FailMode FailMode + HTTPTimeout time.Duration + Issuer string + JWKSRefresh time.Duration + MaxRetries int + PermissionCacheMax int64 + PermissionCacheTTL time.Duration + ResolveMode ResolveMode + UserProfileCacheMax int64 + UserProfileCacheTTL time.Duration + func (c *SDKConfig) Validate() error + type SessionView struct + CreatedAt string + Current bool + DeviceID string + IPAddress string + LastSeenAt string + SessionID string + UserAgent string + type UpdateOrganizationRequest struct + Name *string + Slug *string + type UpdatePermissionRequest struct + Description *string + Name *string + type UpdateRoleRequest struct + Description *string + Key *string + Name *string + type UpdateUserRoleRequest struct + Condition *UserRoleCondition + type UserProfile struct + ApplicationID string + AvatarURL string + CreatedAt string + CurrentOrganization *AccountOrganization + DisplayName string + Email string + EmailVerified bool + GlobalIdentityID string + ID string + Metadata map[string]any + Roles []string + Status string + UpdatedAt string + UserID string + Username string + type UserProfileOption func(*userProfileOptions) + func BypassProfileCache() UserProfileOption + type UserRoleAssignment struct + ConditionDescription *string + ConditionExpression *string + CreatedAt string + ETag string + ID string + OrganizationID *string + RoleID string + UpdatedAt string + UserID string + Version int64 + type UserRoleAssignmentPage struct + Content []UserRoleAssignment + Page AuthorizationPageMetadata + type UserRoleCondition struct + Description *string + Expression *string