access
GET /v1/orgs/{orgId}/delegated-access
Everybody this organisation has shared sites with, one row per person.
Authentication
Send an API key as a bearer token. The key must carry the sites.collaborators.manage permission; a key without it is refused with 403, not 404.
Where your organisation id goes
This endpoint takes your organisation id in the URL itself, as orgId. Substitute it into the path — there is no header or query parameter that will do instead.
Your organisation id is on the API keys screen in your dashboard, beside the key itself. It is the same id in every call you make.
Try it
Replace anything in angle brackets with your own values, and the key placeholder with a key from your dashboard.
curl -X GET https://api.zinndigital.com/v1/orgs/{orgId}/delegated-access \
-H "Authorization: Bearer zdk_live_…"Signed in? The API console in your dashboard fills in your real organisation id and your own key, and runs the request against the live API so you can see the actual response. Open this endpoint in the API console
Details
Delegated access, seen from the person rather than from the site (W43-96, docs/736). One row per person — an address that has been invited and not yet accepted is a person too — with every site they hold, the role on each, and when they were invited, accepted and were last active. Paged over PEOPLE, keyset on the address, so a freelancer holding forty sites is one row and never split across a page boundary. Lapsed grants (past their end date, not revoked) are listed with status: expired; revoked ones are not — they are history, and a site's own collaborator list keeps them. last_active_at is the last request the person made while a grant was live, stamped at most every five minutes; null means they have not used the access since it shipped. Requires sites.collaborators.manage in the organisation. An organisation outside the caller's scope, and one they can see without that key, both answer 404.
Parameters
| Name | Type | Required | What it is |
|---|---|---|---|
orgId (path) | Uuid | Yes | Organization ID (UUIDv7). |
cursor (query) | string | No | Opaque cursor from a previous page's page.next_cursor. |
limit (query) | integer | No | Maximum items to return (page size). |
Response
| Name | Type | Required | What it is |
|---|---|---|---|
data | DelegatedPerson[] | Yes | — |
page | PageMeta | Yes | — |
Errors this endpoint can return
401 · 403 · 404 · 422 · 429