Orgs, accounts and people
Accounts, orgs, portfolios, users, roles, staff grants.
94 capabilities
| Name | What it does | Authority |
|---|---|---|
| anonymize_user | Anonymize a user | act |
| approve_grant | Decide a staff access request | act |
| break_glass_access | Break glass into a customer org | act |
| cancel_org_deletion | Cancel an org's deletion | act |
| check_ip_allowlist | Check my address against an org's IP allowlist | read |
| clone_role_template | Clone a role template | act |
| close_access_review | Close an access review | act |
| convert_sandbox | Convert a sandbox to a customer | act |
| create_access_review | Start an access review | act |
| create_account | Create an account | act |
| create_invite_link | Create an invite link | act |
| create_org | Create an org | act |
| create_portfolio | Create a portfolio | act |
| create_sso_connection | Add a single sign-on connection | act |
| deactivate_user | Deactivate a user | act |
| decide_access_review_item | Decide an access review item | act |
| delete_role_template | Delete a role template | act |
| delete_sso_connection | Delete a single sign-on connection | act |
| export_audit_events | Export an org's audit log | act |
| get_acting_scope | Get where my session acts | read |
| get_data_policy | Get a role template's data policy | read |
| get_identity_sync | Get an org's Clerk sync state | read |
| get_impersonation | Read an impersonation you started | read |
| get_my_settings | Get my settings | read |
| get_notification_policy | Read an org's notification settings | read |
| get_onboarding_status | Get an org's onboarding checklist | read |
| get_purge_readiness | Read whether an org's purge is ready | read |
| get_security_policy | Get an org's security settings | read |
| grant_staff_role | Grant a staff role | act |
| grant_unit_role | Give access on a unit | act |
| impersonate_user | Sign in as a customer's user | act |
| import_users | Import users | act |
| invite_user | Invite a user | act |
| list_access_reviews | List access reviews | read |
| list_account_members | List an account's role holders | read |
| list_accounts | List accounts | read |
| list_agent_reads | List agent reads | read |
| list_audit_events | List an org's audit events | read |
| list_audit_exports | List an org's audit log exports | read |
| list_data_fields | List the data field classes | read |
| list_domains | List an org's email domains | read |
| list_identity_findings | List an org's Clerk drift findings | read |
| list_my_notifications | List my notifications | read |
| list_org_grants | List the staff access grants to an org | read |
| list_orgs | List orgs | read |
| list_permissions | List permissions | read |
| list_portfolios | List portfolios | read |
| list_role_templates | List role templates | read |
| list_sessions | List an org's active sessions | read |
| list_sso_connections | List an org's single sign-on connections | read |
| list_staff | List Trade HQ staff | read |
| list_staff_grants | List staff access grants | read |
| list_switchable_orgs | List the orgs I can switch to | read |
| list_unit_access | List access by unit | read |
| list_user_factors | List the second factors of an org's members | read |
| list_users | List users | read |
| provision_account | Provision an account | act |
| purge_org | Approve an org's purge | act |
| reinstate_user | Reinstate a user | act |
| remove_account_member | Remove a person from an account | act |
| remove_domain | Remove an email domain | act |
| request_staff_grant | Ask a customer org for staff access | act |
| reset_user_mfa | Reset a user's multi-factor authentication | act |
| resolve_identity_finding | Resolve a Clerk drift finding | act |
| restore_security_policy | Restore a section of an org's security settings | act |
| resume_org | Resume a suspended org | act |
| revoke_grant | Revoke a staff access grant | act |
| revoke_sessions | Sign sessions out | act |
| revoke_staff_role | Revoke a staff role | act |
| revoke_unit_role | Remove access on a unit | act |
| run_identity_reconcile | Reconcile an org's Clerk memberships now | act |
| run_purge_dry_run | Run a purge dry run | act |
| schedule_org_deletion | Schedule an org's deletion | act |
| set_account_role | Set an account role | act |
| set_acting_scope | Set where my session acts | act |
| set_customer_stage | Set an org's customer stage | act |
| set_data_policy | Set a role template's data policy | act |
| set_domain_join_policy | Set a domain's join_policy | act |
| set_ip_allowlist | Set an org's IP allowlist | act |
| set_member_role | Set a member's role | act |
| set_mfa_policy | Set an org's multi-factor authentication requirement | act |
| set_my_notification | Set one of my notifications | act |
| set_my_settings | Set my settings | act |
| set_notification_policy | Set who must receive a notice | act |
| set_portfolio_members | Set a portfolio's orgs | act |
| set_session_policy | Set an org's session settings | act |
| set_sso_policy | Set an org's single sign-on settings | act |
| subscribe_audit | Subscribe to an org's audit log | act |
| suspend_org | Suspend an org | act |
| switch_org | Switch organization | act |
| update_org_settings | Update an org's settings | act |
| update_role_template | Edit a role template | act |
| update_sso_connection | Update a single sign-on connection | act |
| verify_domain | Verify an email domain | act |