Access Control

List User & Invite account accesses

get

Get list of account accesses for which specifier_type is User or Invite. You have to have account admin/owner permissions for this endpoint to work.

If you specify project_ids, inbox_ids or domain_ids, the endpoint will return account accesses for these resources.

Authorizations

HeaderAuthBearerAuth

Api-TokenstringRequired

Pass the API token in the Api-Token

Path parameters

account_idinteger · int64 · min: 1Required

Unique account ID

Example: 3229

Query parameters

project_idsstring[]Optional

The identifiers of the projects for which to include the results

Example: ["3938"]

inbox_idsstring[]Optional

The identifiers of the inboxes for which to include the results

Example: ["3757"]

domain_idsstring[]Optional

The identifiers of the domains for which to include the results

Example: ["3883"]

Responses

200

OK

application/json

Assigns resource-specific permissions to a specifier.

idintegerOptional

The unique identifier of the account access

Example: 42

specifier_typestring · enumOptional

The type of the specifier that has permissions to the resources

Example: UserPossible values:

specifierany ofOptional

Entity that has permissions to the resources

or

or

401

Returns unauthorized error message. Check your credentials.

application/json

403

Returns forbidden error message. Check your permissions.

application/json

get

/api/accounts/{account_id}/account_accesses

cURLNode.jsPHPPythonRubyC#Java

curl -X GET https://mailtrap.io/api/accounts/{account_id}/account_accesses \
  -H 'Authorization: Bearer YOUR_API_TOKEN'

[
  {
    "id": 42,
    "specifier_type": "User",
    "specifier": {
      "id": 1,
      "email": "[email protected]",
      "name": "text",
      "two_factor_authentication_enabled": true
    },
    "resources": [
      {
        "resource_id": 1,
        "resource_type": "account",
        "access_level": 1000
      }
    ],
    "permissions": {
      "can_read": true,
      "can_update": true,
      "can_destroy": true,
      "can_leave": true
    }
  }
]

Remove account access

delete

If specifier type is User, it removes user permissions.

If specifier type is Invite or ApiToken, it removes specifier along with permissions.

You have to be an account admin/owner for this endpoint to work.

Authorizations

HeaderAuthBearerAuth

Api-TokenstringRequired

Pass the API token in the Api-Token

Path parameters

account_idinteger · int64 · min: 1Required

Unique account ID

Example: 3229

account_access_idinteger · int64 · min: 1Required

Unique account access ID

Example: 4788

Responses

200

Returns confirmation of successful deletion and id of the deleted access.

application/json

idintegerOptional

401

Returns unauthorized error message. Check your credentials.

application/json

403

Returns forbidden error message. Check your permissions.

application/json

404

Returns not found error message

application/json

delete

/api/accounts/{account_id}/account_accesses/{account_access_id}

cURLNode.jsPHPPythonRubyC#Java

curl -X DELETE https://mailtrap.io/api/accounts/{account_id}/account_accesses/{account_access_id} \
  -H 'Authorization: Bearer YOUR_API_TOKEN'

{
  "id": 2981
}