> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cloud.cdata.com/llms.txt
> Use this file to discover all available pages before exploring further.

# サービスアカウントの権限一覧の取得

> List all direct resource permissions assigned to a service account.




## OpenAPI

````yaml ja/API/Management-API.yaml GET /service-accounts/{id}/permissions
openapi: 3.1.0
info:
  title: CData Connect AI Management API
  version: v1
  description: >
    The Connect AI Management API provides programmatic control over enterprise
    platform administration. Base path: /api/v1/admin. Use it to manage users,
    service accounts, roles, and resource permissions without manual UI
    operations. The API follows OAS 3.0 standards with OAuth 2.0 scoped
    authentication.

    On versioning: the version prefix is incremented when breaking changes
    require it. A new /api/v2/admin path will be introduced with a 6-month
    deprecation notice before any v1 endpoint is retired.

    On human users vs. service accounts: human users are provisioned and
    lifecycle-managed by SCIM; the Management API handles direct overrides and
    atomic deprovisioning. Service accounts (CI/CD pipelines, IaC tooling,
    Terraform) are fully managed via the Management API and are not SCIM-owned.
servers:
  - url: https://cloud.cdata.com/api/v1/admin
    description: Production base URL
security:
  - oauth2: []
tags:
  - name: Users
    description: >
      Lifecycle management for human users: create, update, deprovision, and
      manage direct role assignments, workspace-scoped roles, and direct
      resource permissions. SCIM handles group-based provisioning and user
      creation at scale; this API handles direct overrides and atomic
      deprovisioning.
  - name: Service Accounts
    description: >
      Full lifecycle management for machine identities (CI/CD pipelines, IaC
      tooling, Terraform automation). Service accounts are not SCIM-owned and
      authenticate via OAuth 2.0 client credentials using the `client_id`
      returned on creation.
paths:
  /service-accounts/{id}/permissions:
    get:
      tags:
        - Service Accounts
      summary: List Service Account Permissions
      description: |
        List all direct resource permissions assigned to a service account.
      operationId: listServiceAccountPermissions
      parameters:
        - name: id
          in: path
          required: true
          description: Service account identifier (UUID).
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceAccountPermissionCollection'
              example:
                items:
                  - id: p2b3c4d5-e6f7-8901-abcd-ef1234567890
                    service_account_id: c3d4e5f6-a7b8-9012-cdef-123456789012
                    resource: snowflake-prod
                    operations:
                      - read
                      - execute
                    type: connection
                    assigned_at: '2026-06-15T11:00:00Z'
                    assigned_by: 00000000-0000-0000-0000-000000000001
                limit: 20
                next_cursor: null
        '404':
          $ref: '#/components/responses/ServiceAccountNotFound'
      security:
        - oauth2:
            - management:service-accounts:read
components:
  schemas:
    ServiceAccountPermissionCollection:
      allOf:
        - $ref: '#/components/schemas/CollectionEnvelope'
        - type: object
          properties:
            items:
              type: array
              items:
                $ref: '#/components/schemas/ServiceAccountPermissionAssignment'
    CollectionEnvelope:
      type: object
      properties:
        limit:
          type: integer
          description: Maximum number of items per page as requested.
        next_cursor:
          type: string
          nullable: true
          description: >-
            Pagination cursor for the next page. null when no further pages
            exist. Total count is not returned.
    ServiceAccountPermissionAssignment:
      type: object
      properties:
        id:
          type: string
          format: uuid
          description: Permission identifier.
        service_account_id:
          type: string
          format: uuid
          description: The service account this permission is assigned to.
        resource:
          type: string
          description: The connection name this permission applies to.
        operations:
          type: array
          items:
            type: string
            enum:
              - create
              - read
              - update
              - delete
              - execute
          description: Allowed operations on the resource.
        type:
          type: string
          enum:
            - connection
          description: >-
            Always `connection`. Classifies what category of resource the
            permission governs.
        assigned_at:
          type: string
          format: date-time
          description: ISO 8601 UTC.
        assigned_by:
          type: string
          format: uuid
          description: The user who assigned this permission.
    ErrorResponse:
      type: object
      properties:
        error:
          type: object
          description: Error details.
          properties:
            code:
              type: string
              description: SCREAMING_SNAKE_CASE error code.
            message:
              type: string
              description: Human-readable error description.
  responses:
    ServiceAccountNotFound:
      description: Not Found
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
          example:
            error:
              code: SERVICE_ACCOUNT_NOT_FOUND
              message: The specified service account does not exist.
  securitySchemes:
    oauth2:
      type: oauth2
      flows:
        clientCredentials:
          tokenUrl: https://cloud-login.cdata.com/oauth/token
          scopes:
            management:users:read: Read access to user resources.
            management:users:write: Write access to user resources.
            management:service-accounts:read: Read access to service account resources.
            management:service-accounts:write: Write access to service account resources.

````