identity.composition.audience-query

Read which access groups may invoke an exposed composition

Read who can currently call an exposed composition.

Inputs: actor, organization_uuid, identity_app_uuid, composition_uuid (all required). Outputs:

• composition_uuid, capability
• exposed: whether the composition is in the app's exposure list
• managed: whether any group explicitly grants a covering invoke capability
• audience: "all" (unmanaged) | "groups" | "none"
• groups: the access-group slugs granted the exact invoke capability (the reserved "nobody" group is excluded from this list)

Overview

Property	Value
Workflow type	Atomic
Library	App-identity
Version	1.0

Input Schema

Field	Type	Required	Default	Description
actor	string	Yes	—	—
organization_uuid	uuid	Yes	—	—
identity_app_uuid	uuid	Yes	—	—
composition_uuid	string	Yes	—	—

Output Schema

Field	Type	Required	Default	Description
composition_uuid	string	No	—	—
capability	string	No	—	—
exposed	boolean	No	—	—
managed	boolean	No	—	—
audience	string	No	—	—
groups	list	No	—	—
identity_app_uuid	uuid	No	—	—
failure_reason	string	No	—	—
failure_type	string	No	—	—
failed_action	string	No	—	—
failed_at_state	string	No	—	—
reason	string	No	—	—

States

State	Initial	Terminal	Success	Auto-advance	Description
pending	Yes	No	—	execute	—
completed	No	Yes	Yes	—	—
failed	No	Yes	No	—	—

State Diagram

Transitions

From	Action	To	Description
pending	execute	completed	—
* (any state)	fail	failed	—

API Usage

POST /api/workflows/start
Content-Type: application/json

{
  "workflow_type": "identity.composition.audience-query",
  "initial_data": {
    "actor": "value",
    "organization_uuid": "value",
    "identity_app_uuid": "value",
    "composition_uuid": "value"
  }
}