docs: Document that grant strings allow multiple ids (#5975)

* docs: Document that grant strings allow multiple ids

* Update website/content/docs/configuration/identity-access-management/permission-grant-formats.mdx

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>

---------

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
This commit is contained in:
Dan HeathandJeff Mitchell authored and GitHub committed 2025-08-12 13:13:40 -04:00
1 parent fdb665c86b
commit 91050dcd46
1 file changed
+9 -2
@@ -18,9 +18,10 @@ A grant string has a form similar to:
There are two types of selectors:
- An `id` field that indicates a specific resource or a wildcard to match all
- An `ids` field that indicates a specific resource or a wildcard to match all.
You can enter multiple comma-separated ID values in a grant string.
- A `type` field that indicates a specific resource type or a wildcard to match
all; this might also be used to grant permissions on collections of resources
all; this might also be used to grant permissions on collections of resources.
Selectors are used to indicate the resources on which the grant should apply,
using specific IDs or wildcard IDs and type selectors.
@@ -44,6 +45,12 @@ to specify `create` or `list` as actions in this format, because this format
explicitly identifies a resource.
The `create` and `list` actions are only supported for collections.
You can enter multiple comma-separated ID values in a grant string:
`ids=hsst_1234567890,hsst_0987654321;actions=read,update`
This example grants the `read` and `update` actions to both resources `hsst_1234567890` and `hsst_0987654321`.
## Type only
You can configure a grant to allow the specified actions for a given type.