Vigilfield Docs
API referenceAccess

`GET /access` — who can access a resource (teams + actions), plus whether a resource policy applies. Admin-gated.

GET/access

Query Parameters

resource_type*string

ResourceKind token (tables, databases, …)

resource_id*string

The resource id

owner_team_id?string

The resource's owning team, if any

Response Body

application/json

curl -X GET "https://example.com/access?resource_type=string&resource_id=string"
{  "bind_owner": true,  "has_policy": true,  "teams": [    {      "actions": [        "string"      ],      "team_id": "string"    }  ]}

VFQL ↔ Kusto (KQL) compatibility

Previous Page

`POST /users/{id}/mfa-resets` — admin recovery for a native user who lost their second factor (`rh-kk6vbu`). Authz and target rules are `/users/{id}/password-resets`': admin only, 404 outside the caller's org, 400 for a federated or app target. POST

Turns the user's TOTP off in Cognito and marks the row `mfa_reset_pending`. From that moment a passkey sign-in is refused; the user's next password sign-in deletes their passkeys and security keys (Cognito has no admin API for that) and asks them to set a factor up again.