Get query spec results

GetAssessmentQuerySpecResult Returns the total count of results for a query specification.

The response will include a number_value representing the total number of results.

post

/api/v1/assessments/query_spec:result

Authorizations

Body

query_typestring · enum · default: SYSTEM_CREATED

Options: SYSTEM_CREATED, SOURCE_TO_DESTINATION, DESTINATION_NODES

source_node_typesobject

destination_node_typesobject

required_intermediate_node_typesobject

avoided_intermediate_node_typesobject

raw_permissionsA collection of raw permission names

effective_permissionsobject

no_relationuse relates_to_exp

snapshot_idstring · uint64

node_relationship_typestring · enum · default: EFFECTIVE_ACCESS

Options: EFFECTIVE_ACCESS, CONFIGURED

relates_to_expA RelatesToExpression E evaluates as "true if source has a path to E; otherwise false". for E = { specs: [A, B, ...], child_expressions: [X, Y, ...], operator, not, }, "source has a path to E" is defined as: - if operator = AND (default): "source has a path to ALL of (A,B, ..., X, Y, ...), i.e. A AND B AND ... AND X AND Y AND ..." - if operator = OR: "source has a path to ANY of (A,B, ..., X, Y, ...), i.e. A OR B OR ... OR X OR Y OR ..." - if not = true, boolean invert the result above

path_summary_node_typesobject

all_entity_conditionobject

path_summary_count_conditionsobject

result_value_typestring · enum · default: UNDEFINED

AssessmentQueryResultValueType determines which of the fields (values or path_values) will be populated in the resulting AssessmentQueryNodesResponse message. UNDEFINED is a valid selection and is intended for backward compatibility. When UNDEFINED is selected, the actual result value type will be determined by the backend (BE).

• UNDEFINED: Valid selection and intended for backward compatibility, result type determined by BE
• SOURCE_NODES_WITH_COUNTS: Returns populated values field containing source nodes and their destination counts
• SOURCE_AND_DESTINATION_NODES: Returns path_values with source and destination nodes, excluding path summary.
• PATHS: Returns path_values along with path summary.

Options: UNDEFINED, SOURCE_NODES_WITH_COUNTS, SOURCE_AND_DESTINATION_NODES, PATHS

page_sizestring · int64

The maximum number of results to be returned. Fewer results may be returned even when more pages exist.

page_tokenstring

The token specifying the specific page of results to retrieve.

customized_variablesobject[]

Responses

application/json

application/json

cURL

JavaScript

Python

HTTP

cURL

curl -L \
  --request POST \
  --url '/api/v1/assessments/query_spec:result' \
  --header 'Bearer: YOUR_API_KEY' \
  --header 'Content-Type: application/json' \
  --data '{"query_type":"SYSTEM_CREATED","source_node_types":{"nodes_operator":"AND","nodes":[{"condition_expression":{"operator":"AND","specs":[{"fn":"EQ"}],"child_expressions":["[Circular Reference]"]},"node_type_grouping_constraint":{"constraint_type":"EXCLUDE","node_types":[null]},"tags":[{}],"conditions":[{"fn":"EQ"}],"excluded_tags":[{}],"count_conditions":[{"fn":"EQ","value_as":"COUNT"}],"properties_to_get":[null]}]},"destination_node_types":{"nodes_operator":"AND","nodes":[{"condition_expression":{"operator":"AND","specs":[{"fn":"EQ"}],"child_expressions":["[Circular Reference]"]},"node_type_grouping_constraint":{"constraint_type":"EXCLUDE","node_types":[null]},"tags":[{}],"conditions":[{"fn":"EQ"}],"excluded_tags":[{}],"count_conditions":[{"fn":"EQ","value_as":"COUNT"}],"properties_to_get":[null]}]},"required_intermediate_node_types":{"nodes_operator":"AND","nodes":[{"condition_expression":{"operator":"AND","specs":[{"fn":"EQ"}],"child_expressions":["[Circular Reference]"]},"node_type_grouping_constraint":{"constraint_type":"EXCLUDE","node_types":[null]},"tags":[{}],"conditions":[{"fn":"EQ"}],"excluded_tags":[{}],"count_conditions":[{"fn":"EQ","value_as":"COUNT"}],"properties_to_get":[null]}]},"avoided_intermediate_node_types":{"nodes_operator":"AND","nodes":[{"condition_expression":{"operator":"AND","specs":[{"fn":"EQ"}],"child_expressions":["[Circular Reference]"]},"node_type_grouping_constraint":{"constraint_type":"EXCLUDE","node_types":[null]},"tags":[{}],"conditions":[{"fn":"EQ"}],"excluded_tags":[{}],"count_conditions":[{"fn":"EQ","value_as":"COUNT"}],"properties_to_get":[null]}]},"raw_permissions":{"operator":"AND","values":[null]},"effective_permissions":{"operator":"AND","values":["METADATA_WRITE"]},"node_relationship_type":"EFFECTIVE_ACCESS","relates_to_exp":{"operator":"AND","and_op_type":"INFERRED","specs":[{"node_types":{"nodes_operator":"AND","nodes":[{"condition_expression":{"operator":"AND","specs":[{"fn":"EQ"}],"child_expressions":["[Circular Reference]"]},"node_type_grouping_constraint":{"constraint_type":"EXCLUDE","node_types":[null]},"tags":[{}],"conditions":[{"fn":"EQ"}],"excluded_tags":[{}],"count_conditions":[{"fn":"EQ","value_as":"COUNT"}],"properties_to_get":[null]}]},"required_intermediate_node_types":{"nodes_operator":"AND","nodes":[{"condition_expression":{"operator":"AND","specs":[{"fn":"EQ"}],"child_expressions":["[Circular Reference]"]},"node_type_grouping_constraint":{"constraint_type":"EXCLUDE","node_types":[null]},"tags":[{}],"conditions":[{"fn":"EQ"}],"excluded_tags":[{}],"count_conditions":[{"fn":"EQ","value_as":"COUNT"}],"properties_to_get":[null]}]},"avoided_intermediate_node_types":{"nodes_operator":"AND","nodes":[{"condition_expression":{"operator":"AND","specs":[{"fn":"EQ"}],"child_expressions":["[Circular Reference]"]},"node_type_grouping_constraint":{"constraint_type":"EXCLUDE","node_types":[null]},"tags":[{}],"conditions":[{"fn":"EQ"}],"excluded_tags":[{}],"count_conditions":[{"fn":"EQ","value_as":"COUNT"}],"properties_to_get":[null]}]},"raw_permissions":{"operator":"AND","values":[null]},"effective_permissions":{"operator":"AND","values":["METADATA_WRITE"]},"direction":"ANY_DIRECTION"}],"child_expressions":[{"operator":"AND","and_op_type":"INFERRED","specs":[{"node_types":{"nodes_operator":"AND","nodes":[{"condition_expression":{"operator":"AND","specs":[{"fn":"EQ"}],"child_expressions":["[Circular Reference]"]},"node_type_grouping_constraint":{"constraint_type":"EXCLUDE","node_types":[null]},"tags":[{}],"conditions":[{"fn":"EQ"}],"excluded_tags":[{}],"count_conditions":[{"fn":"EQ","value_as":"COUNT"}],"properties_to_get":[null]}]},"required_intermediate_node_types":{"nodes_operator":"AND","nodes":[{"condition_expression":{"operator":"AND","specs":[{"fn":"EQ"}],"child_expressions":["[Circular Reference]"]},"node_type_grouping_constraint":{"constraint_type":"EXCLUDE","node_types":[null]},"tags":[{}],"conditions":[{"fn":"EQ"}],"excluded_tags":[{}],"count_conditions":[{"fn":"EQ","value_as":"COUNT"}],"properties_to_get":[null]}]},"avoided_intermediate_node_types":{"nodes_operator":"AND","nodes":[{"condition_expression":{"operator":"AND","specs":[{"fn":"EQ"}],"child_expressions":["[Circular Reference]"]},"node_type_grouping_constraint":{"constraint_type":"EXCLUDE","node_types":[null]},"tags":[{}],"conditions":[{"fn":"EQ"}],"excluded_tags":[{}],"count_conditions":[{"fn":"EQ","value_as":"COUNT"}],"properties_to_get":[null]}]},"raw_permissions":{"operator":"AND","values":[null]},"effective_permissions":{"operator":"AND","values":["METADATA_WRITE"]},"direction":"ANY_DIRECTION"}],"child_expressions":[{"operator":"AND","and_op_type":"INFERRED","specs":"[Circular Reference]","child_expressions":"[Circular Reference]"}]}]},"path_summary_node_types":{"nodes_operator":"AND","nodes":[{"condition_expression":{"operator":"AND","specs":[{"fn":"EQ"}],"child_expressions":["[Circular Reference]"]},"node_type_grouping_constraint":{"constraint_type":"EXCLUDE","node_types":[null]},"tags":[{}],"conditions":[{"fn":"EQ"}],"excluded_tags":[{}],"count_conditions":[{"fn":"EQ","value_as":"COUNT"}],"properties_to_get":[null]}]},"all_entity_condition":{"operator":"AND","specs":[{"fn":"EQ"}],"child_expressions":[{"operator":"AND","specs":[{"fn":"EQ"}],"child_expressions":[{"operator":"AND","specs":[{"fn":"EQ"}],"child_expressions":"[Circular Reference]"}]}]},"path_summary_count_conditions":{"conditions":[{"fn":"EQ","value_as":"COUNT"}]},"result_value_type":"UNDEFINED","customized_variables":[{}]}'

200

401

403

404

500

502

503

200

{
  "result_type": "text",
  "number_value": "text",
  "timestamp_value": "text",
  "nodes_value": {
    "next_page_token": "text",
    "has_more": true,
    "values": [
      {
        "id": "text",
        "type": "text",
        "properties": {},
        "destination_node_count": 1,
        "engagement_access_stats": {
          "engagement_score": 1,
          "over_provisioned_score": 1,
          "total_count": "text",
          "accessed_count": "text"
        },
        "access_stats": {
          "last_used": "2025-02-20T19:03:13.048Z",
          "count": 1,
          "concrete_permissions": [
            "text"
          ],
          "canonical_permissions": [
            "text"
          ]
        },
        "risk_level": "NONE",
        "destination_node_percentage_of_total": 1,
        "permissions": [
          {
            "id": "text",
            "type": "text",
            "properties": {},
            "destination_node_count": 1,
            "engagement_access_stats": {
              "engagement_score": 1,
              "over_provisioned_score": 1,
              "total_count": "text",
              "accessed_count": "text"
            },
            "access_stats": {
              "last_used": "2025-02-20T19:03:13.048Z",
              "count": 1,
              "concrete_permissions": [
                "text"
              ],
              "canonical_permissions": [
                "text"
              ]
            },
            "risk_level": "NONE",
            "destination_node_percentage_of_total": 1,
            "permissions": "[Circular Reference]",
            "destination_node_ids": [
              "text"
            ],
            "raw_permissions": [
              "text"
            ],
            "effective_permissions": [
              "text"
            ]
          }
        ],
        "destination_node_ids": [
          "text"
        ],
        "raw_permissions": [
          "text"
        ],
        "effective_permissions": [
          "text"
        ]
      }
    ]
  }
}

A successful response.

Sample request:

curl -X 'POST' \
"$BASE_URL/api/v1/assessments/query_spec:result" \
-H "authorization: Bearer $VEZA_TOKEN" \
--data-raw '{
  "query_type": "SOURCE_TO_DESTINATION",
  "source_node_types": {
    "nodes": [
      {
        "node_type": "OktaUser",
        "tags": [],
        "conditions": [],
        "condition_expression": null,
        "node_id": "",
        "excluded_tags": [],
        "count_conditions": [],
        "direct_relationship_only": false,
        "node_type_grouping_constraint": null
      }
    ],
    "nodes_operator": "AND"
  },
  "destination_node_types": null,
  "required_intermediate_node_types": null,
  "avoided_intermediate_node_types": null,
  "raw_permissions": null,
  "effective_permissions": null,
  "customized_variables": [],
  "no_relation": false,
  "snapshot_id": "0",
  "access_filter": null,
  "node_relationship_type": "EFFECTIVE_ACCESS",
  "relates_to_exp": {
    "specs": [
      {
        "node_types": {
          "nodes": [
            {
              "node_type": "SnowflakeRole",
              "tags": [],
              "conditions": [],
              "condition_expression": {
                "specs": [
                  {
                    "fn": "EQ",
                    "property": "id",
                    "value": "dn44266.us-east-2.aws.snowflakecomputing.com/role/BILLING",
                    "not": false,
                    "value_property_name": "",
                    "value_property_from_other_node": false
                  }
                ],
                "child_expressions": [],
                "operator": "AND",
                "not": false
              },
              "node_id": "",
              "excluded_tags": [],
              "count_conditions": [],
              "direct_relationship_only": false,
              "node_type_grouping_constraint": null
            }
          ],
          "nodes_operator": "AND"
        },
        "required_intermediate_node_types": null,
        "avoided_intermediate_node_types": null,
        "raw_permissions": null,
        "effective_permissions": {
          "values": [],
          "operator": "OR"
        },
        "no_relation": false,
        "direction": "ANY_DIRECTION"
      }
    ],
    "child_expressions": [
      {
        "specs": [
          {
            "node_types": {
              "nodes": [
                {
                  "node_type": "SnowflakeRole",
                  "tags": [],
                  "conditions": [],
                  "condition_expression": {
                    "specs": [
                      {
                        "fn": "EQ",
                        "property": "id",
                        "value": "dn44266.us-east-2.aws.snowflakecomputing.com/role/AUDITOR",
                        "not": false,
                        "value_property_name": "",
                        "value_property_from_other_node": false
                      }
                    ],
                    "child_expressions": [],
                    "operator": "AND",
                    "not": false
                  },
                  "node_id": "",
                  "excluded_tags": [],
                  "count_conditions": [],
                  "direct_relationship_only": false,
                  "node_type_grouping_constraint": null
                }
              ],
              "nodes_operator": "AND"
            },
            "required_intermediate_node_types": null,
            "avoided_intermediate_node_types": null,
            "raw_permissions": null,
            "effective_permissions": {
              "values": [],
              "operator": "OR"
            },
            "no_relation": false,
            "direction": "ANY_DIRECTION"
          },
          {
            "node_types": {
              "nodes": [
                {
                  "node_type": "SnowflakeRole",
                  "tags": [],
                  "conditions": [],
                  "condition_expression": {
                    "specs": [
                      {
                        "fn": "EQ",
                        "property": "id",
                        "value": "dn44266.us-east-2.aws.snowflakecomputing.com/role/ROLE_A",
                        "not": false,
                        "value_property_name": "",
                        "value_property_from_other_node": false
                      }
                    ],
                    "child_expressions": [],
                    "operator": "AND",
                    "not": false
                  },
                  "node_id": "",
                  "excluded_tags": [],
                  "count_conditions": [],
                  "direct_relationship_only": false,
                  "node_type_grouping_constraint": null
                }
              ],
              "nodes_operator": "AND"
            },
            "required_intermediate_node_types": null,
            "avoided_intermediate_node_types": null,
            "raw_permissions": null,
            "effective_permissions": {
              "values": [],
              "operator": "OR"
            },
            "no_relation": false,
            "direction": "ANY_DIRECTION"
          }
        ],
        "child_expressions": [],
        "operator": "OR",
        "not": false,
        "and_op_type": "INFERRED"
      }
    ],
    "operator": "AND",
    "not": false,
    "and_op_type": "SOURCE_INTERSECT"
  },
  "path_summary_node_types": null,
  "all_entity_condition": null,
  "page_size": "0",
  "page_token": ""
}'

Sample response:

The response will contain a number_value of total results:

{
  "number_value": 97
}