Skip to main content
The resource_restrictions client methods are currently in BETA. The API may change without notice. A one-time warning is emitted on first use.
Restricting a resource prevents roles bound at higher hierarchy levels (space, org, account) from granting access to it. Only space admins or users with the PROJECT_RESTRICT permission can perform these actions. Currently only PROJECT resources are supported.

List Resource Restrictions

List the resource restrictions the caller is permitted to manage. Results are paginated. Because entries are authorization-filtered after a page is read, a page may contain fewer items than limit (or be empty) while pagination.has_more is still True — keep paging until has_more is False.
For details on pagination, field introspection, and data conversion (to dict/JSON/DataFrame), see Response Objects.

Restrict a Resource

Marks a resource as restricted and returns a ResourceRestriction. This operation is idempotent — restricting an already-restricted resource returns the existing restriction without error.

Unrestrict a Resource

Removes the restriction from a resource so that roles bound at other levels of the hierarchy (space, org, account) can once again grant access. Returns None.