OrganizationPrincipalPolicyRequest
The organization's next signed principal policy state, including its signed directory of group heads.
Shape
object
6 fields
- at most 0 items
Container mutations committed atomically with the state.
encryptedPayloadobjectrequired3 fields
cipherSuitestringrequired- always
aes-256-gcm
- always
ciphertextstringrequiredciphertextHashstringrequired
Other fields are allowed.
memberEnvelopeslist of objectrequiredThe new key epoch's key, encapsulated to each member.
4 fields
kemCipherTextstringrequiredmemberKeyFingerprintstringrequireduserIdstringrequired- lowercase UUID v4
wrappedKeystringrequired
Other fields are allowed.
projectionlist of objectrequiredThe complete membership with roles after this state.
2 fields
rolestringrequired- one of
member,admin
- one of
userIdstringrequired- lowercase UUID v4
Other fields are allowed.
stateobjectrequired20 fields
encapsulationPublicKeystringrequiredexternalAuthorityobjectrequirednullable6 fields
keyEpochintegerrequired- at least 1
keyFingerprintstringrequiredprincipalIdstringrequired- lowercase UUID v4
principalTypestringrequired- always
group
- always
stateHashstringrequiredversionintegerrequired- at least 1
Other fields are allowed.
grantCountintegerrequired- at least 0
grantRootstringrequiredkeyEpochintegerrequired- at least 1
keyFingerprintstringrequiredmemberCountintegerrequired- at least 0
memberEnvelopesRootstringrequiredmembershipModestringrequired- always
projection
- always
membershipRootstringrequiredpayloadCiphertextHashstringrequiredprevStateHashstringrequirednullableprincipalIdstringrequired- lowercase UUID v4
principalTypestringrequired- one of
group,organization
- one of
projectionRootstringrequiredsignaturestringrequiredsignedAtstringrequired- pattern
^(?:19[7-9]\d|[2-9]\d{3})-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$
- pattern
signerUserIdstringrequired- lowercase UUID v4
signerUserKeyFingerprintstringrequiredversionintegerrequired- at least 1
Other fields are allowed.
Other fields are allowed.