# Access

| Method | Path | What it does | Permission | Sudo | Approval |
|---|---|---|---|---|---|
| GET | `/api/access/bindings` | List Bindings | `accounts.read` |  |  |
| POST | `/api/access/bindings` | Bind | `accounts.manage` | yes | yes |
| DELETE | `/api/access/bindings/{binding_id}` | Unbind | `accounts.manage` | yes |  |
| GET | `/api/access/roles` | List Roles | `teams.read` |  |  |
| POST | `/api/access/roles` | Create Role | `accounts.manage` | yes |  |
| GET | `/api/access/roles/{role}` | Get Role | `teams.read` |  |  |
| PATCH | `/api/access/roles/{role}` | Update Role | `accounts.manage` | yes |  |
| DELETE | `/api/access/roles/{role}` | Delete Role | `accounts.manage` | yes |  |
| GET | `/api/roles` | List Roles | `accounts.read` |  |  |
| POST | `/api/roles` | Create Role | `accounts.manage` | yes |  |
| GET | `/api/roles/review` | Review | `accounts.read` |  |  |
| GET | `/api/roles/{name}` | Get Role | `accounts.read` |  |  |
| PATCH | `/api/roles/{name}` | Update Role | `accounts.manage` | yes |  |
| DELETE | `/api/roles/{name}` | Delete Role | `accounts.manage` | yes |  |
| POST | `/api/roles/{name}/duplicate` | Duplicate Role | `accounts.manage` | yes |  |
| POST | `/api/roles/{name}/offers` | Settle Offers | `accounts.manage` | yes |  |
| POST | `/api/roles/{name}/reset` | Reset Role | `accounts.manage` | yes |  |
| GET | `/api/teams/{team}/access` | List Team Access | `teams.read` |  |  |
| POST | `/api/teams/{team}/access` | Bind In Team | `teams.manage` | yes |  |
| DELETE | `/api/teams/{team}/access/{binding_id}` | Unbind In Team | `teams.manage` | yes |  |