1 of 21

Query APIs

Creating new queries, interacting with saved queries, and running query specs

The Query Builder APIs enable programmatic creation, execution, and management of assessment queries, using the Veza the Query Builder. You can use these operations to develop your own tools and integrate Veza search with external services and automation.

Queries created with these endpoints can define risks and have rules and alerts associated with them. Even if you and your team create and manage queries primarily from the user interface, this documentation may still be of interest for learning how queries are constructed and handled within Veza.

You can use these methods to:

List saved queries

For more information about query options, see .

Base URL

These endpoints are available under {{VezaURL}}/api/v1/. You must use the appropriate prefix when calling the API, for example:

Authentication

You can create and manage for your user account from Administration > API Keys. Each API call must include the API key in the request header, passed as a bearer authentication token.

Getting started

The page consolidates some sample requests and responses.

An understanding of Veza's usage of may be helpful. To learn more about the query object and options, see . For more information about how to interpret the query response body, see .

You can start working with pre-built and saved queries using the /assessments/queries endpoint. When you are ready to try running your own queries, see the operations to run test queries without saving them.

Query Builder Terminology

Graph search concepts for working with the query builder

Entity (Node)

An entity, also referred to as a node, represents an authorization, data, or identity object discovered by Veza. It can be a concrete external named entity, such as AwsIamPolicy or OktaUser, or an edge aggregation node created by Veza for visualization and service purposes.

Entities, within the context of the Query Builder API, are the building blocks that represent various authorization, data, and identity objects discovered by Veza. They are used to construct queries, workflows, and Access Graph searches.

Query Builder Results

Examples and descriptions for query builder responses

Depending on the request, query results can be returned as a collection of entities (nodes), a numeric value, or a timestamp.

Requesting a query will return the result value, which can be a total number of results, the node details, or a timestamp. To return a paginated list of node details instead, use .

Sample Response: Get Nodes

Save a query

CreateAssessmentQuery saves a new query with the specified conditions. See Query Parameters for all available constraints and options. To run a query without saving it, see the query spec operations.

If copying JSON query specifications from the Veza UI, change "query_type": "SYSTEM_CREATED" to "query_type": "SOURCE_TO_DESTINATION" before submitting to this API. The API only accepts SOURCE_TO_DESTINATION and DESTINATION_NODES for user-created queries.

Sample Request:

Sample response:

A successful response returns the saved query id, and full query specification in a value object:

Get a saved query

GetAssessmentQuery retrieves a single saved query object based on the query ID.

Sample request:

Delete a query

DeleteAssessmentQuery removes a query by ID.

By default, this operation does not delete assessments that are currently included in a report. Set the force option to true to delete an assessment regardless of its usage in reports.

Sample request:

Sample response:

A successful response will be empty:

Get query result

GetAssessmentQueryResult returns the total number of results for a saved query.

To get node details for the source entity type, use . To get related destination nodes for an individual result, use .

Sample request:

Sample Response:

The response will include a number_value representing the total number of results.

Get query spec nodes

GetAssessmentQuerySpecNodes returns the entity details for nodes in the query without generating a result count. This option uses pagination and can be faster for complex queries where the total number of search results is not needed.

The request must include the full query spec object and the source_node_id of the query result to retrieve destination nodes for. Additionally, providing a snapshot_id will return destination nodes based on a Time Machine snapshot.

When specifying a page_size in the query string, responses will include the next_page_token and indicate has_more if additional results are available. Note that a page can be empty even when more results exist.

Sample request:

The following example searches for AWS IAM users with permissions to modify S3 bucket ACLs:

Sample response:

Here is a more complex example, which identifies Okta Users related to Snowflake Local Roles.

Using conditions, the query will only return users related to the BILLING group AND another group, either the AUDITOR role OR ROLE_A

Request:

Response:

Private APIs

Documentation for Veza's private APIs for advanced access assessments

Overview

This section contains documentation for APIs in the private/ namespace for advanced access assessment capabilities. These APIs currently support advanced role analysis, entitlement comparisons, and access management for Snowflake environments.

Available APIs

API

Description

Common Use Cases

These APIs enable several identity security use cases:

Role Rationalization: Identify and consolidate redundant roles to simplify access management
Least Privilege Implementation: Find roles that provide necessary access with minimal excess permissions
Access Governance: Maintain a minimal set of roles by identifying functionally equivalent roles

Limitations

These features are currently limited to the .
Some APIs may have performance limitations with highly connected identities or complex permission structures.

Get Access Relationship

Identify grantees (such as roles) providing specific access permissions to a given identity for a set of resources.

Early Access: This API is provided in Early Access. Please contact our customer support team for more information and to enable this feature.

Overview

The GetAccessRelationship API takes an identity (user), a list of resources with permissions, and responds with potential grantees (roles) that can grant these access permissions to the user. The response includes detailed information about the additional access these grantees would provide. This API is particularly designed for role recommendations and permissions analysis in Snowflake environments.

Role Maintenance

Modify role permissions and find matching existing roles.

Early Access: This API is provided in Early Access. Please contact our customer support team for more information and to enable this feature.

Overview

The Role Maintenance API allows you to simulate modifications to an existing role's permissions and check if other roles with the resulting permission set already exist. This API is particularly useful for role rationalization and consolidation in Snowflake environments.

Use cases and features

This API enables effective role maintenance and governance with several key capabilities:

Role Rationalization: Find existing roles that match a desired permission set after modifications
Role Consolidation: Identify opportunities to consolidate roles by checking for existing roles with similar permissions
Permission Planning: Plan permission changes and identify existing alternatives before implementation

Limitations

This feature is currently limited to the .

Role Maintenance API

Request Parameters

The API accepts a request object with the following parameters:

Parameter

Type

Required

Description

GranteeModification Structure

Each GranteeModification object contains:

Field

Type

Required

Description

Note: You can specify either or both of these fields:

If only from_resource_permissions is set, those permissions will be removed
If only to_resource_permissions is set, those permissions will be added
If both are set, the permissions will be updated accordingly

This flexibility allows you to model different types of permission changes within a single API call. For example, you can simultaneously remove access to one resource while adding access to another, or modify permission levels on the same resource.

ResourcePermissions Structure

Each ResourcePermissions object contains:

Field

Type

Required

Description

Request and Response Protocol

Proto Message Definitions

The API uses the following protocol buffer message definitions:

Response Structure

The API returns a response object with the following field:

Field

Type

Description

Usage Example

Request

This example simulates removing database and schema permissions from one role while adding database permissions to another:

Response

The response indicates that a role with the resulting permission set exists:

Example: Adding permissions only

This example shows adding permissions to a role:

Request

Response

Example: Removing permissions only

This example shows removing permissions from a role:

Request

Response

Cohort Role Analysis

Analyze roles accessible to Snowflake users within a specified cost center.

Early Access: This API is provided in Early Access. Please contact our customer support team for more information and to enable this feature.

Overview

The Cohort Role Analysis API provides insights into role accessibility for Snowflake users within a specified cost center. It identifies which roles are accessible to users in that cost center and orders them by least privilege, helping to establish common access patterns and standardize role assignments. The response includes:

{
  "value": {
    "id": "text",
    "name": "text",
    "description": "text",
    "result_type": 0,
    "query_type": 1,
    "raw_permissions": {
      "values": [
        "text"
      ],
      "operator": 1
    },
    "effective_permissions": {
      "values": [
        1
      ],
      "operator": 1
    },
    "variables": [
      "text"
    ],
    "source_node_types": {
      "nodes": [
        {
          "node_type": "text",
          "condition_expression": {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          },
          "node_id": "text",
          "count_condition_expression": "[Circular Reference]",
          "direct_relationship_only": true,
          "node_type_grouping_constraint": {
            "node_types": [
              "text"
            ],
            "constraint_type": 1
          },
          "properties_to_get": [
            "text"
          ],
          "tags_to_get": [
            {
              "type": 1,
              "key": "text"
            }
          ],
          "integration_types": [
            "text"
          ]
        }
      ],
      "nodes_operator": 0
    },
    "required_intermediate_node_types": {
      "nodes": [
        {
          "node_type": "text",
          "condition_expression": {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          },
          "node_id": "text",
          "count_condition_expression": "[Circular Reference]",
          "direct_relationship_only": true,
          "node_type_grouping_constraint": {
            "node_types": [
              "text"
            ],
            "constraint_type": 1
          },
          "properties_to_get": [
            "text"
          ],
          "tags_to_get": [
            {
              "type": 1,
              "key": "text"
            }
          ],
          "integration_types": [
            "text"
          ]
        }
      ],
      "nodes_operator": 0
    },
    "avoided_intermediate_node_types": {
      "nodes": [
        {
          "node_type": "text",
          "condition_expression": {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          },
          "node_id": "text",
          "count_condition_expression": "[Circular Reference]",
          "direct_relationship_only": true,
          "node_type_grouping_constraint": {
            "node_types": [
              "text"
            ],
            "constraint_type": 1
          },
          "properties_to_get": [
            "text"
          ],
          "tags_to_get": [
            {
              "type": 1,
              "key": "text"
            }
          ],
          "integration_types": [
            "text"
          ]
        }
      ],
      "nodes_operator": 0
    },
    "destination_node_types": {
      "nodes": [
        {
          "node_type": "text",
          "condition_expression": {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          },
          "node_id": "text",
          "count_condition_expression": "[Circular Reference]",
          "direct_relationship_only": true,
          "node_type_grouping_constraint": {
            "node_types": [
              "text"
            ],
            "constraint_type": 1
          },
          "properties_to_get": [
            "text"
          ],
          "tags_to_get": [
            {
              "type": 1,
              "key": "text"
            }
          ],
          "integration_types": [
            "text"
          ]
        }
      ],
      "nodes_operator": 0
    },
    "access_filter": {
      "engagement_score": {
        "op": 1,
        "value": 1
      },
      "over_provisioned_score": {
        "op": 1,
        "value": 1
      },
      "include_secondary_grantee": true,
      "include_indirect_resource": true,
      "exclude_indirect_grantee": true,
      "anomaly_detection_history_days": "text",
      "last_used": {
        "op": 1,
        "value": "2026-02-05T01:31:06.506Z",
        "target": 1,
        "relative_timevar_value": "text"
      }
    },
    "created_by": "text",
    "visibility": 1,
    "owners": [
      "text"
    ],
    "node_relationship_type": 0,
    "integration_types": [
      "text"
    ],
    "labels": [
      "text"
    ],
    "created_at": "2026-02-05T01:31:06.506Z",
    "updated_at": "2026-02-05T01:31:06.506Z",
    "source_type": "text",
    "destination_types": [
      "text"
    ],
    "relates_to_exp": {
      "specs": [
        {
          "node_types": "[Circular Reference]",
          "required_intermediate_node_types": "[Circular Reference]",
          "avoided_intermediate_node_types": "[Circular Reference]",
          "raw_permissions": {
            "values": [
              "text"
            ],
            "operator": 1
          },
          "effective_permissions": {
            "values": [
              1
            ],
            "operator": 1
          },
          "unsupported_condition_mode": 1,
          "no_relation": true,
          "direction": 1,
          "path_type": 1
        }
      ],
      "child_expressions": [
        {
          "specs": "[Circular Reference]",
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "and_op_type": 1
        }
      ],
      "operator": 1,
      "not": true,
      "and_op_type": 1
    },
    "all_entity_condition": {
      "specs": [
        {
          "fn": 0,
          "property": "email",
          "value": null,
          "not": false,
          "value_property_name": "text",
          "value_property_from_other_node": true,
          "source_property": "text"
        }
      ],
      "tag_specs": [
        {
          "tag": {
            "type": "text",
            "key": "text",
            "value": "text",
            "properties": {
              "ANY_ADDITIONAL_PROPERTY": null
            }
          },
          "exclude": true,
          "fn": 1,
          "source_query_id": "text",
          "source_tag_key": "text"
        }
      ],
      "child_expressions": [
        {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            "[Circular Reference]"
          ],
          "operator": 0,
          "not": true
        }
      ],
      "operator": 0,
      "not": true
    },
    "path_summary_node_types": {
      "nodes": [
        {
          "node_type": "text",
          "condition_expression": {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          },
          "node_id": "text",
          "count_condition_expression": "[Circular Reference]",
          "direct_relationship_only": true,
          "node_type_grouping_constraint": {
            "node_types": [
              "text"
            ],
            "constraint_type": 1
          },
          "properties_to_get": [
            "text"
          ],
          "tags_to_get": [
            {
              "type": 1,
              "key": "text"
            }
          ],
          "integration_types": [
            "text"
          ]
        }
      ],
      "nodes_operator": 0
    },
    "path_summary_count_conditions": {
      "conditions": [
        {
          "fn": 1,
          "value": "text",
          "value_as": 1
        }
      ]
    },
    "risk_level": 0,
    "risk_suppressed_constraints": {
      "nodes": [
        {
          "node_type": "text",
          "condition_expression": {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          },
          "node_id": "text",
          "count_condition_expression": "[Circular Reference]",
          "direct_relationship_only": true,
          "node_type_grouping_constraint": {
            "node_types": [
              "text"
            ],
            "constraint_type": 1
          },
          "properties_to_get": [
            "text"
          ],
          "tags_to_get": [
            {
              "type": 1,
              "key": "text"
            }
          ],
          "integration_types": [
            "text"
          ]
        }
      ]
    },
    "analysis_type": 1,
    "result": 1,
    "result_evaluated_at": "2026-02-05T01:31:06.506Z",
    "result_evaluated": true,
    "risk_explanation": "text",
    "risk_remediation": "text",
    "updated_by": "text",
    "natural_language": "text",
    "result_enrichment": {
      "join_node_specs": [
        {
          "with": "text",
          "node_spec": "[Circular Reference]",
          "as": "text"
        }
      ],
      "outlier_detection": {
        "type": 1,
        "manager_centric_config": {
          "grouping_properties": [
            {
              "property_name": "text",
              "node_type": "text",
              "target": 1,
              "joined_node_alias": "text"
            }
          ],
          "threshold": 1
        }
      },
      "include_associated_risks": true,
      "risks_filter": "text"
    },
    "change_source": 1,
    "uneditable": true,
    "approx_total_source_nodes_count": "text",
    "include_sub_permissions": true,
    "save_mode": 1,
    "vql_query": "text",
    "source_type_integration": "text",
    "shared": true,
    "team_id": "text",
    "include_permissions_summary": true,
    "risk_statistics": {
      "affected_node_count": "text",
      "suppressed_node_count": "text",
      "last_occurred_at": "2026-02-05T01:31:06.506Z",
      "status": 1
    },
    "risk_profiles": [
      0
    ],
    "internal_id": "text",
    "waypoint_nodes": {
      "nodes": [
        {
          "node_type": "text",
          "condition_expression": {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          },
          "node_id": "text",
          "count_condition_expression": "[Circular Reference]",
          "direct_relationship_only": true,
          "node_type_grouping_constraint": {
            "node_types": [
              "text"
            ],
            "constraint_type": 1
          },
          "properties_to_get": [
            "text"
          ],
          "tags_to_get": [
            {
              "type": 1,
              "key": "text"
            }
          ],
          "integration_types": [
            "text"
          ]
        }
      ],
      "nodes_operator": 0
    },
    "optional": true,
    "union_specs": [
      {
        "query_type": 1,
        "source_node_types": {
          "nodes": [
            {
              "node_type": "text",
              "condition_expression": {
                "specs": [
                  {
                    "fn": 0,
                    "property": "email",
                    "value": null,
                    "not": false,
                    "value_property_name": "text",
                    "value_property_from_other_node": true,
                    "source_property": "text"
                  }
                ],
                "tag_specs": [
                  {
                    "tag": {
                      "type": "text",
                      "key": "text",
                      "value": "text",
                      "properties": {
                        "ANY_ADDITIONAL_PROPERTY": null
                      }
                    },
                    "exclude": true,
                    "fn": 1,
                    "source_query_id": "text",
                    "source_tag_key": "text"
                  }
                ],
                "child_expressions": "[Circular Reference]",
                "operator": 0,
                "not": true
              },
              "node_id": "text",
              "count_condition_expression": "[Circular Reference]",
              "direct_relationship_only": true,
              "node_type_grouping_constraint": {
                "node_types": [
                  "text"
                ],
                "constraint_type": 1
              },
              "properties_to_get": [
                "text"
              ],
              "tags_to_get": [
                {
                  "type": 1,
                  "key": "text"
                }
              ],
              "integration_types": [
                "text"
              ]
            }
          ],
          "nodes_operator": 0
        },
        "customized_variables": [
          {
            "key": "text",
            "value": "text"
          }
        ],
        "access_filter": {
          "engagement_score": {
            "op": 1,
            "value": 1
          },
          "over_provisioned_score": {
            "op": 1,
            "value": 1
          },
          "include_secondary_grantee": true,
          "include_indirect_resource": true,
          "exclude_indirect_grantee": true,
          "anomaly_detection_history_days": "text",
          "last_used": {
            "op": 1,
            "value": "2026-02-05T01:31:06.506Z",
            "target": 1,
            "relative_timevar_value": "text"
          }
        },
        "node_relationship_type": 1,
        "relates_to_exp": {
          "specs": "[Circular Reference]",
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "and_op_type": 1
        },
        "path_summary_node_types": {
          "nodes": [
            {
              "node_type": "text",
              "condition_expression": {
                "specs": [
                  {
                    "fn": 0,
                    "property": "email",
                    "value": null,
                    "not": false,
                    "value_property_name": "text",
                    "value_property_from_other_node": true,
                    "source_property": "text"
                  }
                ],
                "tag_specs": [
                  {
                    "tag": {
                      "type": "text",
                      "key": "text",
                      "value": "text",
                      "properties": {
                        "ANY_ADDITIONAL_PROPERTY": null
                      }
                    },
                    "exclude": true,
                    "fn": 1,
                    "source_query_id": "text",
                    "source_tag_key": "text"
                  }
                ],
                "child_expressions": "[Circular Reference]",
                "operator": 0,
                "not": true
              },
              "node_id": "text",
              "count_condition_expression": "[Circular Reference]",
              "direct_relationship_only": true,
              "node_type_grouping_constraint": {
                "node_types": [
                  "text"
                ],
                "constraint_type": 1
              },
              "properties_to_get": [
                "text"
              ],
              "tags_to_get": [
                {
                  "type": 1,
                  "key": "text"
                }
              ],
              "integration_types": [
                "text"
              ]
            }
          ],
          "nodes_operator": 0
        },
        "all_entity_condition": {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            {
              "specs": [
                {
                  "fn": 0,
                  "property": "email",
                  "value": null,
                  "not": false,
                  "value_property_name": "text",
                  "value_property_from_other_node": true,
                  "source_property": "text"
                }
              ],
              "tag_specs": [
                {
                  "tag": {
                    "type": "text",
                    "key": "text",
                    "value": "text",
                    "properties": {
                      "ANY_ADDITIONAL_PROPERTY": null
                    }
                  },
                  "exclude": true,
                  "fn": 1,
                  "source_query_id": "text",
                  "source_tag_key": "text"
                }
              ],
              "child_expressions": [
                "[Circular Reference]"
              ],
              "operator": 0,
              "not": true
            }
          ],
          "operator": 0,
          "not": true
        },
        "path_summary_count_conditions": {
          "conditions": [
            {
              "fn": 1,
              "value": "text",
              "value_as": 1
            }
          ]
        },
        "waypoint_nodes": {
          "nodes": [
            {
              "node_type": "text",
              "condition_expression": {
                "specs": [
                  {
                    "fn": 0,
                    "property": "email",
                    "value": null,
                    "not": false,
                    "value_property_name": "text",
                    "value_property_from_other_node": true,
                    "source_property": "text"
                  }
                ],
                "tag_specs": [
                  {
                    "tag": {
                      "type": "text",
                      "key": "text",
                      "value": "text",
                      "properties": {
                        "ANY_ADDITIONAL_PROPERTY": null
                      }
                    },
                    "exclude": true,
                    "fn": 1,
                    "source_query_id": "text",
                    "source_tag_key": "text"
                  }
                ],
                "child_expressions": "[Circular Reference]",
                "operator": 0,
                "not": true
              },
              "node_id": "text",
              "count_condition_expression": "[Circular Reference]",
              "direct_relationship_only": true,
              "node_type_grouping_constraint": {
                "node_types": [
                  "text"
                ],
                "constraint_type": 1
              },
              "properties_to_get": [
                "text"
              ],
              "tags_to_get": [
                {
                  "type": 1,
                  "key": "text"
                }
              ],
              "integration_types": [
                "text"
              ]
            }
          ],
          "nodes_operator": 0
        },
        "additional_spec_properties": {}
      }
    ]
  }
}

{
  "values": [
    {
      "id": "text",
      "type": "text",
      "properties": {},
      "destination_node_count": 1,
      "engagement_access_stats": {
        "engagement_score": 1,
        "over_provisioned_score": 1,
        "total_count": "text",
        "accessed_count": "text"
      },
      "access_stats": {
        "last_used": "2026-02-05T01:31:06.506Z",
        "count": 1,
        "concrete_permissions": [
          "text"
        ],
        "canonical_permissions": [
          "text"
        ]
      },
      "risk_level": 1,
      "raw_permissions": [
        "text"
      ],
      "effective_permissions": [
        "text"
      ],
      "unsupported_conditions": {
        "ANY_ADDITIONAL_PROPERTY": {
          "conditions": [
            "text"
          ]
        }
      },
      "destination_node_percentage_of_total": 1,
      "tags": [
        {
          "type": "text",
          "key": "text",
          "value": "text",
          "properties": {
            "ANY_ADDITIONAL_PROPERTY": null
          }
        }
      ],
      "specified_tags": [
        {
          "type": "text",
          "key": "text",
          "value": "text",
          "properties": {
            "ANY_ADDITIONAL_PROPERTY": null
          }
        }
      ],
      "filtered_raw_permissions": [
        "text"
      ],
      "corresponding_effective_permissions": [
        "text"
      ],
      "single_entity_access_stats": {
        "last_used": "2026-02-05T01:31:06.506Z",
        "last_used_with_events_for": [
          {
            "name": "text",
            "last_used": "2026-02-05T01:31:06.506Z"
          }
        ]
      },
      "additional_node_properties": {
        "role_substitution_recommended_role": "text",
        "role_substitution_reason_for_high_priv_role": "text",
        "role_substitution_error": "text",
        "default_cohort_role_users_in_cohort": [
          "text"
        ],
        "default_cohort_role": "text",
        "default_cohort_role_all_common_roles": [
          "text"
        ],
        "default_cohort_role_error": "text",
        "login_anomaly_detection_stats": [
          {
            "time": "2026-02-05T01:31:06.506Z",
            "login_count": "text",
            "median_login_count": 1,
            "outlier_prediction": 1
          }
        ],
        "outlier_prediction": {
          "prediction": 1,
          "score": 1,
          "contributing_features": [
            {
              "name": "text",
              "value": 1,
              "explanation": "text"
            }
          ]
        },
        "associated_risks": [
          {
            "query_id": "text",
            "suppressed": true,
            "risk_level": 1
          }
        ]
      },
      "integration_type": "text",
      "joined_nodes": {
        "ANY_ADDITIONAL_PROPERTY": {
          "id": "text",
          "type": "text",
          "properties": {},
          "destination_node_count": 1,
          "engagement_access_stats": {
            "engagement_score": 1,
            "over_provisioned_score": 1,
            "total_count": "text",
            "accessed_count": "text"
          },
          "access_stats": {
            "last_used": "2026-02-05T01:31:06.506Z",
            "count": 1,
            "concrete_permissions": [
              "text"
            ],
            "canonical_permissions": [
              "text"
            ]
          },
          "risk_level": 1,
          "raw_permissions": [
            "text"
          ],
          "effective_permissions": [
            "text"
          ],
          "unsupported_conditions": {
            "ANY_ADDITIONAL_PROPERTY": {
              "conditions": [
                "text"
              ]
            }
          },
          "destination_node_percentage_of_total": 1,
          "tags": [
            {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            }
          ],
          "specified_tags": [
            {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            }
          ],
          "filtered_raw_permissions": [
            "text"
          ],
          "corresponding_effective_permissions": [
            "text"
          ],
          "single_entity_access_stats": {
            "last_used": "2026-02-05T01:31:06.506Z",
            "last_used_with_events_for": [
              {
                "name": "text",
                "last_used": "2026-02-05T01:31:06.506Z"
              }
            ]
          },
          "additional_node_properties": {
            "role_substitution_recommended_role": "text",
            "role_substitution_reason_for_high_priv_role": "text",
            "role_substitution_error": "text",
            "default_cohort_role_users_in_cohort": [
              "text"
            ],
            "default_cohort_role": "text",
            "default_cohort_role_all_common_roles": [
              "text"
            ],
            "default_cohort_role_error": "text",
            "login_anomaly_detection_stats": [
              {
                "time": "2026-02-05T01:31:06.506Z",
                "login_count": "text",
                "median_login_count": 1,
                "outlier_prediction": 1
              }
            ],
            "outlier_prediction": {
              "prediction": 1,
              "score": 1,
              "contributing_features": [
                {
                  "name": "text",
                  "value": 1,
                  "explanation": "text"
                }
              ]
            },
            "associated_risks": [
              {
                "query_id": "text",
                "suppressed": true,
                "risk_level": 1
              }
            ]
          },
          "integration_type": "text",
          "joined_nodes": {
            "ANY_ADDITIONAL_PROPERTY": "[Circular Reference]"
          },
          "additional_spec_properties": {}
        }
      },
      "additional_spec_properties": {}
    }
  ],
  "path_values": [
    {
      "source": {
        "id": "text",
        "type": "text",
        "properties": {},
        "destination_node_count": 1,
        "engagement_access_stats": {
          "engagement_score": 1,
          "over_provisioned_score": 1,
          "total_count": "text",
          "accessed_count": "text"
        },
        "access_stats": {
          "last_used": "2026-02-05T01:31:06.506Z",
          "count": 1,
          "concrete_permissions": [
            "text"
          ],
          "canonical_permissions": [
            "text"
          ]
        },
        "risk_level": 1,
        "raw_permissions": [
          "text"
        ],
        "effective_permissions": [
          "text"
        ],
        "unsupported_conditions": {
          "ANY_ADDITIONAL_PROPERTY": {
            "conditions": [
              "text"
            ]
          }
        },
        "destination_node_percentage_of_total": 1,
        "tags": [
          {
            "type": "text",
            "key": "text",
            "value": "text",
            "properties": {
              "ANY_ADDITIONAL_PROPERTY": null
            }
          }
        ],
        "specified_tags": [
          {
            "type": "text",
            "key": "text",
            "value": "text",
            "properties": {
              "ANY_ADDITIONAL_PROPERTY": null
            }
          }
        ],
        "filtered_raw_permissions": [
          "text"
        ],
        "corresponding_effective_permissions": [
          "text"
        ],
        "single_entity_access_stats": {
          "last_used": "2026-02-05T01:31:06.506Z",
          "last_used_with_events_for": [
            {
              "name": "text",
              "last_used": "2026-02-05T01:31:06.506Z"
            }
          ]
        },
        "additional_node_properties": {
          "role_substitution_recommended_role": "text",
          "role_substitution_reason_for_high_priv_role": "text",
          "role_substitution_error": "text",
          "default_cohort_role_users_in_cohort": [
            "text"
          ],
          "default_cohort_role": "text",
          "default_cohort_role_all_common_roles": [
            "text"
          ],
          "default_cohort_role_error": "text",
          "login_anomaly_detection_stats": [
            {
              "time": "2026-02-05T01:31:06.506Z",
              "login_count": "text",
              "median_login_count": 1,
              "outlier_prediction": 1
            }
          ],
          "outlier_prediction": {
            "prediction": 1,
            "score": 1,
            "contributing_features": [
              {
                "name": "text",
                "value": 1,
                "explanation": "text"
              }
            ]
          },
          "associated_risks": [
            {
              "query_id": "text",
              "suppressed": true,
              "risk_level": 1
            }
          ]
        },
        "integration_type": "text",
        "joined_nodes": {
          "ANY_ADDITIONAL_PROPERTY": {
            "id": "text",
            "type": "text",
            "properties": {},
            "destination_node_count": 1,
            "engagement_access_stats": {
              "engagement_score": 1,
              "over_provisioned_score": 1,
              "total_count": "text",
              "accessed_count": "text"
            },
            "access_stats": {
              "last_used": "2026-02-05T01:31:06.506Z",
              "count": 1,
              "concrete_permissions": [
                "text"
              ],
              "canonical_permissions": [
                "text"
              ]
            },
            "risk_level": 1,
            "raw_permissions": [
              "text"
            ],
            "effective_permissions": [
              "text"
            ],
            "unsupported_conditions": {
              "ANY_ADDITIONAL_PROPERTY": {
                "conditions": [
                  "text"
                ]
              }
            },
            "destination_node_percentage_of_total": 1,
            "tags": [
              {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              }
            ],
            "specified_tags": [
              {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              }
            ],
            "filtered_raw_permissions": [
              "text"
            ],
            "corresponding_effective_permissions": [
              "text"
            ],
            "single_entity_access_stats": {
              "last_used": "2026-02-05T01:31:06.506Z",
              "last_used_with_events_for": [
                {
                  "name": "text",
                  "last_used": "2026-02-05T01:31:06.506Z"
                }
              ]
            },
            "additional_node_properties": {
              "role_substitution_recommended_role": "text",
              "role_substitution_reason_for_high_priv_role": "text",
              "role_substitution_error": "text",
              "default_cohort_role_users_in_cohort": [
                "text"
              ],
              "default_cohort_role": "text",
              "default_cohort_role_all_common_roles": [
                "text"
              ],
              "default_cohort_role_error": "text",
              "login_anomaly_detection_stats": [
                {
                  "time": "2026-02-05T01:31:06.506Z",
                  "login_count": "text",
                  "median_login_count": 1,
                  "outlier_prediction": 1
                }
              ],
              "outlier_prediction": {
                "prediction": 1,
                "score": 1,
                "contributing_features": [
                  {
                    "name": "text",
                    "value": 1,
                    "explanation": "text"
                  }
                ]
              },
              "associated_risks": [
                {
                  "query_id": "text",
                  "suppressed": true,
                  "risk_level": 1
                }
              ]
            },
            "integration_type": "text",
            "joined_nodes": {
              "ANY_ADDITIONAL_PROPERTY": "[Circular Reference]"
            },
            "additional_spec_properties": {}
          }
        },
        "additional_spec_properties": {}
      },
      "abstract_permissions": [
        "text"
      ],
      "concrete_permissions": [
        "text"
      ],
      "unsupported_conditions": {
        "ANY_ADDITIONAL_PROPERTY": {
          "conditions": [
            "text"
          ]
        }
      },
      "destination": {
        "id": "text",
        "type": "text",
        "properties": {},
        "destination_node_count": 1,
        "engagement_access_stats": {
          "engagement_score": 1,
          "over_provisioned_score": 1,
          "total_count": "text",
          "accessed_count": "text"
        },
        "access_stats": {
          "last_used": "2026-02-05T01:31:06.506Z",
          "count": 1,
          "concrete_permissions": [
            "text"
          ],
          "canonical_permissions": [
            "text"
          ]
        },
        "risk_level": 1,
        "raw_permissions": [
          "text"
        ],
        "effective_permissions": [
          "text"
        ],
        "unsupported_conditions": {
          "ANY_ADDITIONAL_PROPERTY": {
            "conditions": [
              "text"
            ]
          }
        },
        "destination_node_percentage_of_total": 1,
        "tags": [
          {
            "type": "text",
            "key": "text",
            "value": "text",
            "properties": {
              "ANY_ADDITIONAL_PROPERTY": null
            }
          }
        ],
        "specified_tags": [
          {
            "type": "text",
            "key": "text",
            "value": "text",
            "properties": {
              "ANY_ADDITIONAL_PROPERTY": null
            }
          }
        ],
        "filtered_raw_permissions": [
          "text"
        ],
        "corresponding_effective_permissions": [
          "text"
        ],
        "single_entity_access_stats": {
          "last_used": "2026-02-05T01:31:06.506Z",
          "last_used_with_events_for": [
            {
              "name": "text",
              "last_used": "2026-02-05T01:31:06.506Z"
            }
          ]
        },
        "additional_node_properties": {
          "role_substitution_recommended_role": "text",
          "role_substitution_reason_for_high_priv_role": "text",
          "role_substitution_error": "text",
          "default_cohort_role_users_in_cohort": [
            "text"
          ],
          "default_cohort_role": "text",
          "default_cohort_role_all_common_roles": [
            "text"
          ],
          "default_cohort_role_error": "text",
          "login_anomaly_detection_stats": [
            {
              "time": "2026-02-05T01:31:06.506Z",
              "login_count": "text",
              "median_login_count": 1,
              "outlier_prediction": 1
            }
          ],
          "outlier_prediction": {
            "prediction": 1,
            "score": 1,
            "contributing_features": [
              {
                "name": "text",
                "value": 1,
                "explanation": "text"
              }
            ]
          },
          "associated_risks": [
            {
              "query_id": "text",
              "suppressed": true,
              "risk_level": 1
            }
          ]
        },
        "integration_type": "text",
        "joined_nodes": {
          "ANY_ADDITIONAL_PROPERTY": {
            "id": "text",
            "type": "text",
            "properties": {},
            "destination_node_count": 1,
            "engagement_access_stats": {
              "engagement_score": 1,
              "over_provisioned_score": 1,
              "total_count": "text",
              "accessed_count": "text"
            },
            "access_stats": {
              "last_used": "2026-02-05T01:31:06.506Z",
              "count": 1,
              "concrete_permissions": [
                "text"
              ],
              "canonical_permissions": [
                "text"
              ]
            },
            "risk_level": 1,
            "raw_permissions": [
              "text"
            ],
            "effective_permissions": [
              "text"
            ],
            "unsupported_conditions": {
              "ANY_ADDITIONAL_PROPERTY": {
                "conditions": [
                  "text"
                ]
              }
            },
            "destination_node_percentage_of_total": 1,
            "tags": [
              {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              }
            ],
            "specified_tags": [
              {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              }
            ],
            "filtered_raw_permissions": [
              "text"
            ],
            "corresponding_effective_permissions": [
              "text"
            ],
            "single_entity_access_stats": {
              "last_used": "2026-02-05T01:31:06.506Z",
              "last_used_with_events_for": [
                {
                  "name": "text",
                  "last_used": "2026-02-05T01:31:06.506Z"
                }
              ]
            },
            "additional_node_properties": {
              "role_substitution_recommended_role": "text",
              "role_substitution_reason_for_high_priv_role": "text",
              "role_substitution_error": "text",
              "default_cohort_role_users_in_cohort": [
                "text"
              ],
              "default_cohort_role": "text",
              "default_cohort_role_all_common_roles": [
                "text"
              ],
              "default_cohort_role_error": "text",
              "login_anomaly_detection_stats": [
                {
                  "time": "2026-02-05T01:31:06.506Z",
                  "login_count": "text",
                  "median_login_count": 1,
                  "outlier_prediction": 1
                }
              ],
              "outlier_prediction": {
                "prediction": 1,
                "score": 1,
                "contributing_features": [
                  {
                    "name": "text",
                    "value": 1,
                    "explanation": "text"
                  }
                ]
              },
              "associated_risks": [
                {
                  "query_id": "text",
                  "suppressed": true,
                  "risk_level": 1
                }
              ]
            },
            "integration_type": "text",
            "joined_nodes": {
              "ANY_ADDITIONAL_PROPERTY": "[Circular Reference]"
            },
            "additional_spec_properties": {}
          }
        },
        "additional_spec_properties": {}
      },
      "path_summary_nodes": [
        {
          "id": "text",
          "type": "text",
          "properties": {},
          "destination_node_count": 1,
          "engagement_access_stats": {
            "engagement_score": 1,
            "over_provisioned_score": 1,
            "total_count": "text",
            "accessed_count": "text"
          },
          "access_stats": {
            "last_used": "2026-02-05T01:31:06.506Z",
            "count": 1,
            "concrete_permissions": [
              "text"
            ],
            "canonical_permissions": [
              "text"
            ]
          },
          "risk_level": 1,
          "raw_permissions": [
            "text"
          ],
          "effective_permissions": [
            "text"
          ],
          "unsupported_conditions": {
            "ANY_ADDITIONAL_PROPERTY": {
              "conditions": [
                "text"
              ]
            }
          },
          "destination_node_percentage_of_total": 1,
          "tags": [
            {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            }
          ],
          "specified_tags": [
            {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            }
          ],
          "filtered_raw_permissions": [
            "text"
          ],
          "corresponding_effective_permissions": [
            "text"
          ],
          "single_entity_access_stats": {
            "last_used": "2026-02-05T01:31:06.506Z",
            "last_used_with_events_for": [
              {
                "name": "text",
                "last_used": "2026-02-05T01:31:06.506Z"
              }
            ]
          },
          "additional_node_properties": {
            "role_substitution_recommended_role": "text",
            "role_substitution_reason_for_high_priv_role": "text",
            "role_substitution_error": "text",
            "default_cohort_role_users_in_cohort": [
              "text"
            ],
            "default_cohort_role": "text",
            "default_cohort_role_all_common_roles": [
              "text"
            ],
            "default_cohort_role_error": "text",
            "login_anomaly_detection_stats": [
              {
                "time": "2026-02-05T01:31:06.506Z",
                "login_count": "text",
                "median_login_count": 1,
                "outlier_prediction": 1
              }
            ],
            "outlier_prediction": {
              "prediction": 1,
              "score": 1,
              "contributing_features": [
                {
                  "name": "text",
                  "value": 1,
                  "explanation": "text"
                }
              ]
            },
            "associated_risks": [
              {
                "query_id": "text",
                "suppressed": true,
                "risk_level": 1
              }
            ]
          },
          "integration_type": "text",
          "joined_nodes": {
            "ANY_ADDITIONAL_PROPERTY": {
              "id": "text",
              "type": "text",
              "properties": {},
              "destination_node_count": 1,
              "engagement_access_stats": {
                "engagement_score": 1,
                "over_provisioned_score": 1,
                "total_count": "text",
                "accessed_count": "text"
              },
              "access_stats": {
                "last_used": "2026-02-05T01:31:06.506Z",
                "count": 1,
                "concrete_permissions": [
                  "text"
                ],
                "canonical_permissions": [
                  "text"
                ]
              },
              "risk_level": 1,
              "raw_permissions": [
                "text"
              ],
              "effective_permissions": [
                "text"
              ],
              "unsupported_conditions": {
                "ANY_ADDITIONAL_PROPERTY": {
                  "conditions": [
                    "text"
                  ]
                }
              },
              "destination_node_percentage_of_total": 1,
              "tags": [
                {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                }
              ],
              "specified_tags": [
                {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                }
              ],
              "filtered_raw_permissions": [
                "text"
              ],
              "corresponding_effective_permissions": [
                "text"
              ],
              "single_entity_access_stats": {
                "last_used": "2026-02-05T01:31:06.506Z",
                "last_used_with_events_for": [
                  {
                    "name": "text",
                    "last_used": "2026-02-05T01:31:06.506Z"
                  }
                ]
              },
              "additional_node_properties": {
                "role_substitution_recommended_role": "text",
                "role_substitution_reason_for_high_priv_role": "text",
                "role_substitution_error": "text",
                "default_cohort_role_users_in_cohort": [
                  "text"
                ],
                "default_cohort_role": "text",
                "default_cohort_role_all_common_roles": [
                  "text"
                ],
                "default_cohort_role_error": "text",
                "login_anomaly_detection_stats": [
                  {
                    "time": "2026-02-05T01:31:06.506Z",
                    "login_count": "text",
                    "median_login_count": 1,
                    "outlier_prediction": 1
                  }
                ],
                "outlier_prediction": {
                  "prediction": 1,
                  "score": 1,
                  "contributing_features": [
                    {
                      "name": "text",
                      "value": 1,
                      "explanation": "text"
                    }
                  ]
                },
                "associated_risks": [
                  {
                    "query_id": "text",
                    "suppressed": true,
                    "risk_level": 1
                  }
                ]
              },
              "integration_type": "text",
              "joined_nodes": {
                "ANY_ADDITIONAL_PROPERTY": "[Circular Reference]"
              },
              "additional_spec_properties": {}
            }
          },
          "additional_spec_properties": {}
        }
      ],
      "results_truncated": true,
      "filtered_concrete_permissions": [
        "text"
      ],
      "corresponding_abstract_permissions": [
        "text"
      ],
      "filtered_concrete_permission_groups": [
        {
          "permissions": [
            "text"
          ]
        }
      ],
      "joined_nodes": {
        "ANY_ADDITIONAL_PROPERTY": {
          "id": "text",
          "type": "text",
          "properties": {},
          "destination_node_count": 1,
          "engagement_access_stats": {
            "engagement_score": 1,
            "over_provisioned_score": 1,
            "total_count": "text",
            "accessed_count": "text"
          },
          "access_stats": {
            "last_used": "2026-02-05T01:31:06.506Z",
            "count": 1,
            "concrete_permissions": [
              "text"
            ],
            "canonical_permissions": [
              "text"
            ]
          },
          "risk_level": 1,
          "raw_permissions": [
            "text"
          ],
          "effective_permissions": [
            "text"
          ],
          "unsupported_conditions": {
            "ANY_ADDITIONAL_PROPERTY": {
              "conditions": [
                "text"
              ]
            }
          },
          "destination_node_percentage_of_total": 1,
          "tags": [
            {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            }
          ],
          "specified_tags": [
            {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            }
          ],
          "filtered_raw_permissions": [
            "text"
          ],
          "corresponding_effective_permissions": [
            "text"
          ],
          "single_entity_access_stats": {
            "last_used": "2026-02-05T01:31:06.506Z",
            "last_used_with_events_for": [
              {
                "name": "text",
                "last_used": "2026-02-05T01:31:06.506Z"
              }
            ]
          },
          "additional_node_properties": {
            "role_substitution_recommended_role": "text",
            "role_substitution_reason_for_high_priv_role": "text",
            "role_substitution_error": "text",
            "default_cohort_role_users_in_cohort": [
              "text"
            ],
            "default_cohort_role": "text",
            "default_cohort_role_all_common_roles": [
              "text"
            ],
            "default_cohort_role_error": "text",
            "login_anomaly_detection_stats": [
              {
                "time": "2026-02-05T01:31:06.506Z",
                "login_count": "text",
                "median_login_count": 1,
                "outlier_prediction": 1
              }
            ],
            "outlier_prediction": {
              "prediction": 1,
              "score": 1,
              "contributing_features": [
                {
                  "name": "text",
                  "value": 1,
                  "explanation": "text"
                }
              ]
            },
            "associated_risks": [
              {
                "query_id": "text",
                "suppressed": true,
                "risk_level": 1
              }
            ]
          },
          "integration_type": "text",
          "joined_nodes": {
            "ANY_ADDITIONAL_PROPERTY": {
              "id": "text",
              "type": "text",
              "properties": {},
              "destination_node_count": 1,
              "engagement_access_stats": {
                "engagement_score": 1,
                "over_provisioned_score": 1,
                "total_count": "text",
                "accessed_count": "text"
              },
              "access_stats": {
                "last_used": "2026-02-05T01:31:06.506Z",
                "count": 1,
                "concrete_permissions": [
                  "text"
                ],
                "canonical_permissions": [
                  "text"
                ]
              },
              "risk_level": 1,
              "raw_permissions": [
                "text"
              ],
              "effective_permissions": [
                "text"
              ],
              "unsupported_conditions": {
                "ANY_ADDITIONAL_PROPERTY": {
                  "conditions": [
                    "text"
                  ]
                }
              },
              "destination_node_percentage_of_total": 1,
              "tags": [
                {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                }
              ],
              "specified_tags": [
                {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                }
              ],
              "filtered_raw_permissions": [
                "text"
              ],
              "corresponding_effective_permissions": [
                "text"
              ],
              "single_entity_access_stats": {
                "last_used": "2026-02-05T01:31:06.506Z",
                "last_used_with_events_for": [
                  {
                    "name": "text",
                    "last_used": "2026-02-05T01:31:06.506Z"
                  }
                ]
              },
              "additional_node_properties": {
                "role_substitution_recommended_role": "text",
                "role_substitution_reason_for_high_priv_role": "text",
                "role_substitution_error": "text",
                "default_cohort_role_users_in_cohort": [
                  "text"
                ],
                "default_cohort_role": "text",
                "default_cohort_role_all_common_roles": [
                  "text"
                ],
                "default_cohort_role_error": "text",
                "login_anomaly_detection_stats": [
                  {
                    "time": "2026-02-05T01:31:06.506Z",
                    "login_count": "text",
                    "median_login_count": 1,
                    "outlier_prediction": 1
                  }
                ],
                "outlier_prediction": {
                  "prediction": 1,
                  "score": 1,
                  "contributing_features": [
                    {
                      "name": "text",
                      "value": 1,
                      "explanation": "text"
                    }
                  ]
                },
                "associated_risks": [
                  {
                    "query_id": "text",
                    "suppressed": true,
                    "risk_level": 1
                  }
                ]
              },
              "integration_type": "text",
              "joined_nodes": {
                "ANY_ADDITIONAL_PROPERTY": "[Circular Reference]"
              },
              "additional_spec_properties": {}
            }
          },
          "additional_spec_properties": {}
        }
      },
      "additional_path_properties": {
        "outlier_prediction": {
          "prediction": 1,
          "score": 1,
          "contributing_features": [
            {
              "name": "text",
              "value": 1,
              "explanation": "text"
            }
          ]
        },
        "associated_risks": [
          {
            "query_id": "text",
            "suppressed": true,
            "risk_level": 1
          }
        ]
      },
      "waypoint": {
        "id": "text",
        "type": "text",
        "properties": {},
        "destination_node_count": 1,
        "engagement_access_stats": {
          "engagement_score": 1,
          "over_provisioned_score": 1,
          "total_count": "text",
          "accessed_count": "text"
        },
        "access_stats": {
          "last_used": "2026-02-05T01:31:06.506Z",
          "count": 1,
          "concrete_permissions": [
            "text"
          ],
          "canonical_permissions": [
            "text"
          ]
        },
        "risk_level": 1,
        "raw_permissions": [
          "text"
        ],
        "effective_permissions": [
          "text"
        ],
        "unsupported_conditions": {
          "ANY_ADDITIONAL_PROPERTY": {
            "conditions": [
              "text"
            ]
          }
        },
        "destination_node_percentage_of_total": 1,
        "tags": [
          {
            "type": "text",
            "key": "text",
            "value": "text",
            "properties": {
              "ANY_ADDITIONAL_PROPERTY": null
            }
          }
        ],
        "specified_tags": [
          {
            "type": "text",
            "key": "text",
            "value": "text",
            "properties": {
              "ANY_ADDITIONAL_PROPERTY": null
            }
          }
        ],
        "filtered_raw_permissions": [
          "text"
        ],
        "corresponding_effective_permissions": [
          "text"
        ],
        "single_entity_access_stats": {
          "last_used": "2026-02-05T01:31:06.506Z",
          "last_used_with_events_for": [
            {
              "name": "text",
              "last_used": "2026-02-05T01:31:06.506Z"
            }
          ]
        },
        "additional_node_properties": {
          "role_substitution_recommended_role": "text",
          "role_substitution_reason_for_high_priv_role": "text",
          "role_substitution_error": "text",
          "default_cohort_role_users_in_cohort": [
            "text"
          ],
          "default_cohort_role": "text",
          "default_cohort_role_all_common_roles": [
            "text"
          ],
          "default_cohort_role_error": "text",
          "login_anomaly_detection_stats": [
            {
              "time": "2026-02-05T01:31:06.506Z",
              "login_count": "text",
              "median_login_count": 1,
              "outlier_prediction": 1
            }
          ],
          "outlier_prediction": {
            "prediction": 1,
            "score": 1,
            "contributing_features": [
              {
                "name": "text",
                "value": 1,
                "explanation": "text"
              }
            ]
          },
          "associated_risks": [
            {
              "query_id": "text",
              "suppressed": true,
              "risk_level": 1
            }
          ]
        },
        "integration_type": "text",
        "joined_nodes": {
          "ANY_ADDITIONAL_PROPERTY": {
            "id": "text",
            "type": "text",
            "properties": {},
            "destination_node_count": 1,
            "engagement_access_stats": {
              "engagement_score": 1,
              "over_provisioned_score": 1,
              "total_count": "text",
              "accessed_count": "text"
            },
            "access_stats": {
              "last_used": "2026-02-05T01:31:06.506Z",
              "count": 1,
              "concrete_permissions": [
                "text"
              ],
              "canonical_permissions": [
                "text"
              ]
            },
            "risk_level": 1,
            "raw_permissions": [
              "text"
            ],
            "effective_permissions": [
              "text"
            ],
            "unsupported_conditions": {
              "ANY_ADDITIONAL_PROPERTY": {
                "conditions": [
                  "text"
                ]
              }
            },
            "destination_node_percentage_of_total": 1,
            "tags": [
              {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              }
            ],
            "specified_tags": [
              {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              }
            ],
            "filtered_raw_permissions": [
              "text"
            ],
            "corresponding_effective_permissions": [
              "text"
            ],
            "single_entity_access_stats": {
              "last_used": "2026-02-05T01:31:06.506Z",
              "last_used_with_events_for": [
                {
                  "name": "text",
                  "last_used": "2026-02-05T01:31:06.506Z"
                }
              ]
            },
            "additional_node_properties": {
              "role_substitution_recommended_role": "text",
              "role_substitution_reason_for_high_priv_role": "text",
              "role_substitution_error": "text",
              "default_cohort_role_users_in_cohort": [
                "text"
              ],
              "default_cohort_role": "text",
              "default_cohort_role_all_common_roles": [
                "text"
              ],
              "default_cohort_role_error": "text",
              "login_anomaly_detection_stats": [
                {
                  "time": "2026-02-05T01:31:06.506Z",
                  "login_count": "text",
                  "median_login_count": 1,
                  "outlier_prediction": 1
                }
              ],
              "outlier_prediction": {
                "prediction": 1,
                "score": 1,
                "contributing_features": [
                  {
                    "name": "text",
                    "value": 1,
                    "explanation": "text"
                  }
                ]
              },
              "associated_risks": [
                {
                  "query_id": "text",
                  "suppressed": true,
                  "risk_level": 1
                }
              ]
            },
            "integration_type": "text",
            "joined_nodes": {
              "ANY_ADDITIONAL_PROPERTY": "[Circular Reference]"
            },
            "additional_spec_properties": {}
          }
        },
        "additional_spec_properties": {}
      },
      "additional_spec_properties": {}
    }
  ],
  "approx_total_source_nodes_count": "text",
  "next_page_token": "text",
  "has_more": true
}

POST /api/v1/assessments/query_spec:nodes HTTP/1.1
Host: your-tenant.vezacloud.com
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 15320

{
  "query_type": 1,
  "source_node_types": {
    "nodes": [
      {
        "node_type": "text",
        "condition_expression": {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            "[Circular Reference]"
          ],
          "operator": 0,
          "not": true
        },
        "node_id": "text",
        "count_condition_expression": {
          "specs": [
            {
              "fn": 1,
              "value": "text",
              "value_as": 1
            }
          ],
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "include_zero_count_results": true
        },
        "direct_relationship_only": true,
        "node_type_grouping_constraint": {
          "node_types": [
            "text"
          ],
          "constraint_type": 1
        },
        "properties_to_get": [
          "text"
        ],
        "tags_to_get": [
          {
            "type": 1,
            "key": "text"
          }
        ],
        "integration_types": [
          "text"
        ]
      }
    ],
    "nodes_operator": 0
  },
  "destination_node_types": {
    "nodes": [
      {
        "node_type": "text",
        "condition_expression": {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            "[Circular Reference]"
          ],
          "operator": 0,
          "not": true
        },
        "node_id": "text",
        "count_condition_expression": {
          "specs": [
            {
              "fn": 1,
              "value": "text",
              "value_as": 1
            }
          ],
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "include_zero_count_results": true
        },
        "direct_relationship_only": true,
        "node_type_grouping_constraint": {
          "node_types": [
            "text"
          ],
          "constraint_type": 1
        },
        "properties_to_get": [
          "text"
        ],
        "tags_to_get": [
          {
            "type": 1,
            "key": "text"
          }
        ],
        "integration_types": [
          "text"
        ]
      }
    ],
    "nodes_operator": 0
  },
  "required_intermediate_node_types": {
    "nodes": [
      {
        "node_type": "text",
        "condition_expression": {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            "[Circular Reference]"
          ],
          "operator": 0,
          "not": true
        },
        "node_id": "text",
        "count_condition_expression": {
          "specs": [
            {
              "fn": 1,
              "value": "text",
              "value_as": 1
            }
          ],
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "include_zero_count_results": true
        },
        "direct_relationship_only": true,
        "node_type_grouping_constraint": {
          "node_types": [
            "text"
          ],
          "constraint_type": 1
        },
        "properties_to_get": [
          "text"
        ],
        "tags_to_get": [
          {
            "type": 1,
            "key": "text"
          }
        ],
        "integration_types": [
          "text"
        ]
      }
    ],
    "nodes_operator": 0
  },
  "avoided_intermediate_node_types": {
    "nodes": [
      {
        "node_type": "text",
        "condition_expression": {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            "[Circular Reference]"
          ],
          "operator": 0,
          "not": true
        },
        "node_id": "text",
        "count_condition_expression": {
          "specs": [
            {
              "fn": 1,
              "value": "text",
              "value_as": 1
            }
          ],
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "include_zero_count_results": true
        },
        "direct_relationship_only": true,
        "node_type_grouping_constraint": {
          "node_types": [
            "text"
          ],
          "constraint_type": 1
        },
        "properties_to_get": [
          "text"
        ],
        "tags_to_get": [
          {
            "type": 1,
            "key": "text"
          }
        ],
        "integration_types": [
          "text"
        ]
      }
    ],
    "nodes_operator": 0
  },
  "raw_permissions": {
    "values": [
      "text"
    ],
    "operator": 1
  },
  "effective_permissions": {
    "values": [
      1
    ],
    "operator": 1
  },
  "customized_variables": [
    {
      "key": "text",
      "value": "text"
    }
  ],
  "snapshot_id": "text",
  "access_filter": {
    "engagement_score": {
      "op": 1,
      "value": 1
    },
    "over_provisioned_score": {
      "op": 1,
      "value": 1
    },
    "include_secondary_grantee": true,
    "include_indirect_resource": true,
    "exclude_indirect_grantee": true,
    "anomaly_detection_history_days": "text",
    "last_used": {
      "op": 1,
      "value": "2026-02-05T01:31:06.506Z",
      "target": 1,
      "relative_timevar_value": "text"
    }
  },
  "node_relationship_type": 1,
  "relates_to_exp": {
    "specs": [
      {
        "node_types": {
          "nodes": "[Circular Reference]",
          "nodes_operator": 0
        },
        "required_intermediate_node_types": {
          "nodes": "[Circular Reference]",
          "nodes_operator": 0
        },
        "avoided_intermediate_node_types": {
          "nodes": "[Circular Reference]",
          "nodes_operator": 0
        },
        "raw_permissions": {
          "values": [
            "text"
          ],
          "operator": 1
        },
        "effective_permissions": {
          "values": [
            1
          ],
          "operator": 1
        },
        "unsupported_condition_mode": 1,
        "no_relation": true,
        "direction": 1,
        "path_type": 1
      }
    ],
    "child_expressions": [
      {
        "specs": [
          {
            "node_types": {
              "nodes": "[Circular Reference]",
              "nodes_operator": 0
            },
            "required_intermediate_node_types": {
              "nodes": "[Circular Reference]",
              "nodes_operator": 0
            },
            "avoided_intermediate_node_types": {
              "nodes": "[Circular Reference]",
              "nodes_operator": 0
            },
            "raw_permissions": {
              "values": [
                "text"
              ],
              "operator": 1
            },
            "effective_permissions": {
              "values": [
                1
              ],
              "operator": 1
            },
            "unsupported_condition_mode": 1,
            "no_relation": true,
            "direction": 1,
            "path_type": 1
          }
        ],
        "child_expressions": [
          "[Circular Reference]"
        ],
        "operator": 1,
        "not": true,
        "and_op_type": 1
      }
    ],
    "operator": 1,
    "not": true,
    "and_op_type": 1
  },
  "path_summary_node_types": {
    "nodes": [
      {
        "node_type": "text",
        "condition_expression": {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            "[Circular Reference]"
          ],
          "operator": 0,
          "not": true
        },
        "node_id": "text",
        "count_condition_expression": {
          "specs": [
            {
              "fn": 1,
              "value": "text",
              "value_as": 1
            }
          ],
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "include_zero_count_results": true
        },
        "direct_relationship_only": true,
        "node_type_grouping_constraint": {
          "node_types": [
            "text"
          ],
          "constraint_type": 1
        },
        "properties_to_get": [
          "text"
        ],
        "tags_to_get": [
          {
            "type": 1,
            "key": "text"
          }
        ],
        "integration_types": [
          "text"
        ]
      }
    ],
    "nodes_operator": 0
  },
  "all_entity_condition": {
    "specs": [
      {
        "fn": 0,
        "property": "email",
        "value": null,
        "not": false,
        "value_property_name": "text",
        "value_property_from_other_node": true,
        "source_property": "text"
      }
    ],
    "tag_specs": [
      {
        "tag": {
          "type": "text",
          "key": "text",
          "value": "text",
          "properties": {
            "ANY_ADDITIONAL_PROPERTY": null
          }
        },
        "exclude": true,
        "fn": 1,
        "source_query_id": "text",
        "source_tag_key": "text"
      }
    ],
    "child_expressions": [
      {
        "specs": [
          {
            "fn": 0,
            "property": "email",
            "value": null,
            "not": false,
            "value_property_name": "text",
            "value_property_from_other_node": true,
            "source_property": "text"
          }
        ],
        "tag_specs": [
          {
            "tag": {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            },
            "exclude": true,
            "fn": 1,
            "source_query_id": "text",
            "source_tag_key": "text"
          }
        ],
        "child_expressions": [
          {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          }
        ],
        "operator": 0,
        "not": true
      }
    ],
    "operator": 0,
    "not": true
  },
  "path_summary_count_conditions": {
    "conditions": [
      {
        "fn": 1,
        "value": "text",
        "value_as": 1
      }
    ]
  },
  "result_value_type": 1,
  "include_all_source_tags_in_results": true,
  "include_all_destination_tags_in_results": true,
  "additional_columns_to_get": [
    1
  ],
  "result_enrichment": {
    "join_node_specs": [
      {
        "with": "text",
        "node_spec": {
          "node_type": "text",
          "condition_expression": {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": [
              "[Circular Reference]"
            ],
            "operator": 0,
            "not": true
          },
          "node_id": "text",
          "count_condition_expression": {
            "specs": [
              {
                "fn": 1,
                "value": "text",
                "value_as": 1
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 1,
            "not": true,
            "include_zero_count_results": true
          },
          "direct_relationship_only": true,
          "node_type_grouping_constraint": {
            "node_types": [
              "text"
            ],
            "constraint_type": 1
          },
          "properties_to_get": [
            "text"
          ],
          "tags_to_get": [
            {
              "type": 1,
              "key": "text"
            }
          ],
          "integration_types": [
            "text"
          ]
        },
        "as": "text"
      }
    ],
    "outlier_detection": {
      "type": 1,
      "manager_centric_config": {
        "grouping_properties": [
          {
            "property_name": "text",
            "node_type": "text",
            "target": 1,
            "joined_node_alias": "text"
          }
        ],
        "threshold": 1
      }
    },
    "include_associated_risks": true,
    "risks_filter": "text"
  },
  "include_sub_permissions": true,
  "include_permissions_summary": true,
  "waypoint_nodes": {
    "nodes": [
      {
        "node_type": "text",
        "condition_expression": {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            "[Circular Reference]"
          ],
          "operator": 0,
          "not": true
        },
        "node_id": "text",
        "count_condition_expression": {
          "specs": [
            {
              "fn": 1,
              "value": "text",
              "value_as": 1
            }
          ],
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "include_zero_count_results": true
        },
        "direct_relationship_only": true,
        "node_type_grouping_constraint": {
          "node_types": [
            "text"
          ],
          "constraint_type": 1
        },
        "properties_to_get": [
          "text"
        ],
        "tags_to_get": [
          {
            "type": 1,
            "key": "text"
          }
        ],
        "integration_types": [
          "text"
        ]
      }
    ],
    "nodes_operator": 0
  },
  "unpivot_properties": [
    "text"
  ],
  "union_specs": [
    {
      "query_type": 1,
      "source_node_types": {
        "nodes": [
          {
            "node_type": "text",
            "condition_expression": {
              "specs": [
                {
                  "fn": 0,
                  "property": "email",
                  "value": null,
                  "not": false,
                  "value_property_name": "text",
                  "value_property_from_other_node": true,
                  "source_property": "text"
                }
              ],
              "tag_specs": [
                {
                  "tag": {
                    "type": "text",
                    "key": "text",
                    "value": "text",
                    "properties": {
                      "ANY_ADDITIONAL_PROPERTY": null
                    }
                  },
                  "exclude": true,
                  "fn": 1,
                  "source_query_id": "text",
                  "source_tag_key": "text"
                }
              ],
              "child_expressions": [
                "[Circular Reference]"
              ],
              "operator": 0,
              "not": true
            },
            "node_id": "text",
            "count_condition_expression": {
              "specs": [
                {
                  "fn": 1,
                  "value": "text",
                  "value_as": 1
                }
              ],
              "child_expressions": "[Circular Reference]",
              "operator": 1,
              "not": true,
              "include_zero_count_results": true
            },
            "direct_relationship_only": true,
            "node_type_grouping_constraint": {
              "node_types": [
                "text"
              ],
              "constraint_type": 1
            },
            "properties_to_get": [
              "text"
            ],
            "tags_to_get": [
              {
                "type": 1,
                "key": "text"
              }
            ],
            "integration_types": [
              "text"
            ]
          }
        ],
        "nodes_operator": 0
      },
      "customized_variables": [
        {
          "key": "text",
          "value": "text"
        }
      ],
      "access_filter": {
        "engagement_score": {
          "op": 1,
          "value": 1
        },
        "over_provisioned_score": {
          "op": 1,
          "value": 1
        },
        "include_secondary_grantee": true,
        "include_indirect_resource": true,
        "exclude_indirect_grantee": true,
        "anomaly_detection_history_days": "text",
        "last_used": {
          "op": 1,
          "value": "2026-02-05T01:31:06.506Z",
          "target": 1,
          "relative_timevar_value": "text"
        }
      },
      "node_relationship_type": 1,
      "relates_to_exp": {
        "specs": [
          {
            "node_types": {
              "nodes": "[Circular Reference]",
              "nodes_operator": 0
            },
            "required_intermediate_node_types": {
              "nodes": "[Circular Reference]",
              "nodes_operator": 0
            },
            "avoided_intermediate_node_types": {
              "nodes": "[Circular Reference]",
              "nodes_operator": 0
            },
            "raw_permissions": {
              "values": [
                "text"
              ],
              "operator": 1
            },
            "effective_permissions": {
              "values": [
                1
              ],
              "operator": 1
            },
            "unsupported_condition_mode": 1,
            "no_relation": true,
            "direction": 1,
            "path_type": 1
          }
        ],
        "child_expressions": [
          {
            "specs": [
              {
                "node_types": {
                  "nodes": "[Circular Reference]",
                  "nodes_operator": 0
                },
                "required_intermediate_node_types": {
                  "nodes": "[Circular Reference]",
                  "nodes_operator": 0
                },
                "avoided_intermediate_node_types": {
                  "nodes": "[Circular Reference]",
                  "nodes_operator": 0
                },
                "raw_permissions": {
                  "values": [
                    "text"
                  ],
                  "operator": 1
                },
                "effective_permissions": {
                  "values": [
                    1
                  ],
                  "operator": 1
                },
                "unsupported_condition_mode": 1,
                "no_relation": true,
                "direction": 1,
                "path_type": 1
              }
            ],
            "child_expressions": [
              "[Circular Reference]"
            ],
            "operator": 1,
            "not": true,
            "and_op_type": 1
          }
        ],
        "operator": 1,
        "not": true,
        "and_op_type": 1
      },
      "path_summary_node_types": {
        "nodes": [
          {
            "node_type": "text",
            "condition_expression": {
              "specs": [
                {
                  "fn": 0,
                  "property": "email",
                  "value": null,
                  "not": false,
                  "value_property_name": "text",
                  "value_property_from_other_node": true,
                  "source_property": "text"
                }
              ],
              "tag_specs": [
                {
                  "tag": {
                    "type": "text",
                    "key": "text",
                    "value": "text",
                    "properties": {
                      "ANY_ADDITIONAL_PROPERTY": null
                    }
                  },
                  "exclude": true,
                  "fn": 1,
                  "source_query_id": "text",
                  "source_tag_key": "text"
                }
              ],
              "child_expressions": [
                "[Circular Reference]"
              ],
              "operator": 0,
              "not": true
            },
            "node_id": "text",
            "count_condition_expression": {
              "specs": [
                {
                  "fn": 1,
                  "value": "text",
                  "value_as": 1
                }
              ],
              "child_expressions": "[Circular Reference]",
              "operator": 1,
              "not": true,
              "include_zero_count_results": true
            },
            "direct_relationship_only": true,
            "node_type_grouping_constraint": {
              "node_types": [
                "text"
              ],
              "constraint_type": 1
            },
            "properties_to_get": [
              "text"
            ],
            "tags_to_get": [
              {
                "type": 1,
                "key": "text"
              }
            ],
            "integration_types": [
              "text"
            ]
          }
        ],
        "nodes_operator": 0
      },
      "all_entity_condition": {
        "specs": [
          {
            "fn": 0,
            "property": "email",
            "value": null,
            "not": false,
            "value_property_name": "text",
            "value_property_from_other_node": true,
            "source_property": "text"
          }
        ],
        "tag_specs": [
          {
            "tag": {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            },
            "exclude": true,
            "fn": 1,
            "source_query_id": "text",
            "source_tag_key": "text"
          }
        ],
        "child_expressions": [
          {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": [
              {
                "specs": [
                  {
                    "fn": 0,
                    "property": "email",
                    "value": null,
                    "not": false,
                    "value_property_name": "text",
                    "value_property_from_other_node": true,
                    "source_property": "text"
                  }
                ],
                "tag_specs": [
                  {
                    "tag": {
                      "type": "text",
                      "key": "text",
                      "value": "text",
                      "properties": {
                        "ANY_ADDITIONAL_PROPERTY": null
                      }
                    },
                    "exclude": true,
                    "fn": 1,
                    "source_query_id": "text",
                    "source_tag_key": "text"
                  }
                ],
                "child_expressions": "[Circular Reference]",
                "operator": 0,
                "not": true
              }
            ],
            "operator": 0,
            "not": true
          }
        ],
        "operator": 0,
        "not": true
      },
      "path_summary_count_conditions": {
        "conditions": [
          {
            "fn": 1,
            "value": "text",
            "value_as": 1
          }
        ]
      },
      "waypoint_nodes": {
        "nodes": [
          {
            "node_type": "text",
            "condition_expression": {
              "specs": [
                {
                  "fn": 0,
                  "property": "email",
                  "value": null,
                  "not": false,
                  "value_property_name": "text",
                  "value_property_from_other_node": true,
                  "source_property": "text"
                }
              ],
              "tag_specs": [
                {
                  "tag": {
                    "type": "text",
                    "key": "text",
                    "value": "text",
                    "properties": {
                      "ANY_ADDITIONAL_PROPERTY": null
                    }
                  },
                  "exclude": true,
                  "fn": 1,
                  "source_query_id": "text",
                  "source_tag_key": "text"
                }
              ],
              "child_expressions": [
                "[Circular Reference]"
              ],
              "operator": 0,
              "not": true
            },
            "node_id": "text",
            "count_condition_expression": {
              "specs": [
                {
                  "fn": 1,
                  "value": "text",
                  "value_as": 1
                }
              ],
              "child_expressions": "[Circular Reference]",
              "operator": 1,
              "not": true,
              "include_zero_count_results": true
            },
            "direct_relationship_only": true,
            "node_type_grouping_constraint": {
              "node_types": [
                "text"
              ],
              "constraint_type": 1
            },
            "properties_to_get": [
              "text"
            ],
            "tags_to_get": [
              {
                "type": 1,
                "key": "text"
              }
            ],
            "integration_types": [
              "text"
            ]
          }
        ],
        "nodes_operator": 0
      },
      "additional_spec_properties": {}
    }
  ],
  "page_size": "text",
  "page_token": "text"
}

{
  "value": {
    "id": "text",
    "name": "text",
    "description": "text",
    "result_type": 0,
    "query_type": 1,
    "raw_permissions": {
      "values": [
        "text"
      ],
      "operator": 1
    },
    "effective_permissions": {
      "values": [
        1
      ],
      "operator": 1
    },
    "variables": [
      "text"
    ],
    "source_node_types": {
      "nodes": [
        {
          "node_type": "text",
          "condition_expression": {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          },
          "node_id": "text",
          "count_condition_expression": "[Circular Reference]",
          "direct_relationship_only": true,
          "node_type_grouping_constraint": {
            "node_types": [
              "text"
            ],
            "constraint_type": 1
          },
          "properties_to_get": [
            "text"
          ],
          "tags_to_get": [
            {
              "type": 1,
              "key": "text"
            }
          ],
          "integration_types": [
            "text"
          ]
        }
      ],
      "nodes_operator": 0
    },
    "required_intermediate_node_types": {
      "nodes": [
        {
          "node_type": "text",
          "condition_expression": {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          },
          "node_id": "text",
          "count_condition_expression": "[Circular Reference]",
          "direct_relationship_only": true,
          "node_type_grouping_constraint": {
            "node_types": [
              "text"
            ],
            "constraint_type": 1
          },
          "properties_to_get": [
            "text"
          ],
          "tags_to_get": [
            {
              "type": 1,
              "key": "text"
            }
          ],
          "integration_types": [
            "text"
          ]
        }
      ],
      "nodes_operator": 0
    },
    "avoided_intermediate_node_types": {
      "nodes": [
        {
          "node_type": "text",
          "condition_expression": {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          },
          "node_id": "text",
          "count_condition_expression": "[Circular Reference]",
          "direct_relationship_only": true,
          "node_type_grouping_constraint": {
            "node_types": [
              "text"
            ],
            "constraint_type": 1
          },
          "properties_to_get": [
            "text"
          ],
          "tags_to_get": [
            {
              "type": 1,
              "key": "text"
            }
          ],
          "integration_types": [
            "text"
          ]
        }
      ],
      "nodes_operator": 0
    },
    "destination_node_types": {
      "nodes": [
        {
          "node_type": "text",
          "condition_expression": {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          },
          "node_id": "text",
          "count_condition_expression": "[Circular Reference]",
          "direct_relationship_only": true,
          "node_type_grouping_constraint": {
            "node_types": [
              "text"
            ],
            "constraint_type": 1
          },
          "properties_to_get": [
            "text"
          ],
          "tags_to_get": [
            {
              "type": 1,
              "key": "text"
            }
          ],
          "integration_types": [
            "text"
          ]
        }
      ],
      "nodes_operator": 0
    },
    "access_filter": {
      "engagement_score": {
        "op": 1,
        "value": 1
      },
      "over_provisioned_score": {
        "op": 1,
        "value": 1
      },
      "include_secondary_grantee": true,
      "include_indirect_resource": true,
      "exclude_indirect_grantee": true,
      "anomaly_detection_history_days": "text",
      "last_used": {
        "op": 1,
        "value": "2026-02-05T01:31:06.506Z",
        "target": 1,
        "relative_timevar_value": "text"
      }
    },
    "created_by": "text",
    "visibility": 1,
    "owners": [
      "text"
    ],
    "node_relationship_type": 0,
    "integration_types": [
      "text"
    ],
    "labels": [
      "text"
    ],
    "created_at": "2026-02-05T01:31:06.506Z",
    "updated_at": "2026-02-05T01:31:06.506Z",
    "source_type": "text",
    "destination_types": [
      "text"
    ],
    "relates_to_exp": {
      "specs": [
        {
          "node_types": "[Circular Reference]",
          "required_intermediate_node_types": "[Circular Reference]",
          "avoided_intermediate_node_types": "[Circular Reference]",
          "raw_permissions": {
            "values": [
              "text"
            ],
            "operator": 1
          },
          "effective_permissions": {
            "values": [
              1
            ],
            "operator": 1
          },
          "unsupported_condition_mode": 1,
          "no_relation": true,
          "direction": 1,
          "path_type": 1
        }
      ],
      "child_expressions": [
        {
          "specs": "[Circular Reference]",
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "and_op_type": 1
        }
      ],
      "operator": 1,
      "not": true,
      "and_op_type": 1
    },
    "all_entity_condition": {
      "specs": [
        {
          "fn": 0,
          "property": "email",
          "value": null,
          "not": false,
          "value_property_name": "text",
          "value_property_from_other_node": true,
          "source_property": "text"
        }
      ],
      "tag_specs": [
        {
          "tag": {
            "type": "text",
            "key": "text",
            "value": "text",
            "properties": {
              "ANY_ADDITIONAL_PROPERTY": null
            }
          },
          "exclude": true,
          "fn": 1,
          "source_query_id": "text",
          "source_tag_key": "text"
        }
      ],
      "child_expressions": [
        {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            "[Circular Reference]"
          ],
          "operator": 0,
          "not": true
        }
      ],
      "operator": 0,
      "not": true
    },
    "path_summary_node_types": {
      "nodes": [
        {
          "node_type": "text",
          "condition_expression": {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          },
          "node_id": "text",
          "count_condition_expression": "[Circular Reference]",
          "direct_relationship_only": true,
          "node_type_grouping_constraint": {
            "node_types": [
              "text"
            ],
            "constraint_type": 1
          },
          "properties_to_get": [
            "text"
          ],
          "tags_to_get": [
            {
              "type": 1,
              "key": "text"
            }
          ],
          "integration_types": [
            "text"
          ]
        }
      ],
      "nodes_operator": 0
    },
    "path_summary_count_conditions": {
      "conditions": [
        {
          "fn": 1,
          "value": "text",
          "value_as": 1
        }
      ]
    },
    "risk_level": 0,
    "risk_suppressed_constraints": {
      "nodes": [
        {
          "node_type": "text",
          "condition_expression": {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          },
          "node_id": "text",
          "count_condition_expression": "[Circular Reference]",
          "direct_relationship_only": true,
          "node_type_grouping_constraint": {
            "node_types": [
              "text"
            ],
            "constraint_type": 1
          },
          "properties_to_get": [
            "text"
          ],
          "tags_to_get": [
            {
              "type": 1,
              "key": "text"
            }
          ],
          "integration_types": [
            "text"
          ]
        }
      ]
    },
    "analysis_type": 1,
    "result": 1,
    "result_evaluated_at": "2026-02-05T01:31:06.506Z",
    "result_evaluated": true,
    "risk_explanation": "text",
    "risk_remediation": "text",
    "updated_by": "text",
    "natural_language": "text",
    "result_enrichment": {
      "join_node_specs": [
        {
          "with": "text",
          "node_spec": "[Circular Reference]",
          "as": "text"
        }
      ],
      "outlier_detection": {
        "type": 1,
        "manager_centric_config": {
          "grouping_properties": [
            {
              "property_name": "text",
              "node_type": "text",
              "target": 1,
              "joined_node_alias": "text"
            }
          ],
          "threshold": 1
        }
      },
      "include_associated_risks": true,
      "risks_filter": "text"
    },
    "change_source": 1,
    "uneditable": true,
    "approx_total_source_nodes_count": "text",
    "include_sub_permissions": true,
    "save_mode": 1,
    "vql_query": "text",
    "source_type_integration": "text",
    "shared": true,
    "team_id": "text",
    "include_permissions_summary": true,
    "risk_statistics": {
      "affected_node_count": "text",
      "suppressed_node_count": "text",
      "last_occurred_at": "2026-02-05T01:31:06.506Z",
      "status": 1
    },
    "risk_profiles": [
      0
    ],
    "internal_id": "text",
    "waypoint_nodes": {
      "nodes": [
        {
          "node_type": "text",
          "condition_expression": {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          },
          "node_id": "text",
          "count_condition_expression": "[Circular Reference]",
          "direct_relationship_only": true,
          "node_type_grouping_constraint": {
            "node_types": [
              "text"
            ],
            "constraint_type": 1
          },
          "properties_to_get": [
            "text"
          ],
          "tags_to_get": [
            {
              "type": 1,
              "key": "text"
            }
          ],
          "integration_types": [
            "text"
          ]
        }
      ],
      "nodes_operator": 0
    },
    "optional": true,
    "union_specs": [
      {
        "query_type": 1,
        "source_node_types": {
          "nodes": [
            {
              "node_type": "text",
              "condition_expression": {
                "specs": [
                  {
                    "fn": 0,
                    "property": "email",
                    "value": null,
                    "not": false,
                    "value_property_name": "text",
                    "value_property_from_other_node": true,
                    "source_property": "text"
                  }
                ],
                "tag_specs": [
                  {
                    "tag": {
                      "type": "text",
                      "key": "text",
                      "value": "text",
                      "properties": {
                        "ANY_ADDITIONAL_PROPERTY": null
                      }
                    },
                    "exclude": true,
                    "fn": 1,
                    "source_query_id": "text",
                    "source_tag_key": "text"
                  }
                ],
                "child_expressions": "[Circular Reference]",
                "operator": 0,
                "not": true
              },
              "node_id": "text",
              "count_condition_expression": "[Circular Reference]",
              "direct_relationship_only": true,
              "node_type_grouping_constraint": {
                "node_types": [
                  "text"
                ],
                "constraint_type": 1
              },
              "properties_to_get": [
                "text"
              ],
              "tags_to_get": [
                {
                  "type": 1,
                  "key": "text"
                }
              ],
              "integration_types": [
                "text"
              ]
            }
          ],
          "nodes_operator": 0
        },
        "customized_variables": [
          {
            "key": "text",
            "value": "text"
          }
        ],
        "access_filter": {
          "engagement_score": {
            "op": 1,
            "value": 1
          },
          "over_provisioned_score": {
            "op": 1,
            "value": 1
          },
          "include_secondary_grantee": true,
          "include_indirect_resource": true,
          "exclude_indirect_grantee": true,
          "anomaly_detection_history_days": "text",
          "last_used": {
            "op": 1,
            "value": "2026-02-05T01:31:06.506Z",
            "target": 1,
            "relative_timevar_value": "text"
          }
        },
        "node_relationship_type": 1,
        "relates_to_exp": {
          "specs": "[Circular Reference]",
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "and_op_type": 1
        },
        "path_summary_node_types": {
          "nodes": [
            {
              "node_type": "text",
              "condition_expression": {
                "specs": [
                  {
                    "fn": 0,
                    "property": "email",
                    "value": null,
                    "not": false,
                    "value_property_name": "text",
                    "value_property_from_other_node": true,
                    "source_property": "text"
                  }
                ],
                "tag_specs": [
                  {
                    "tag": {
                      "type": "text",
                      "key": "text",
                      "value": "text",
                      "properties": {
                        "ANY_ADDITIONAL_PROPERTY": null
                      }
                    },
                    "exclude": true,
                    "fn": 1,
                    "source_query_id": "text",
                    "source_tag_key": "text"
                  }
                ],
                "child_expressions": "[Circular Reference]",
                "operator": 0,
                "not": true
              },
              "node_id": "text",
              "count_condition_expression": "[Circular Reference]",
              "direct_relationship_only": true,
              "node_type_grouping_constraint": {
                "node_types": [
                  "text"
                ],
                "constraint_type": 1
              },
              "properties_to_get": [
                "text"
              ],
              "tags_to_get": [
                {
                  "type": 1,
                  "key": "text"
                }
              ],
              "integration_types": [
                "text"
              ]
            }
          ],
          "nodes_operator": 0
        },
        "all_entity_condition": {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            {
              "specs": [
                {
                  "fn": 0,
                  "property": "email",
                  "value": null,
                  "not": false,
                  "value_property_name": "text",
                  "value_property_from_other_node": true,
                  "source_property": "text"
                }
              ],
              "tag_specs": [
                {
                  "tag": {
                    "type": "text",
                    "key": "text",
                    "value": "text",
                    "properties": {
                      "ANY_ADDITIONAL_PROPERTY": null
                    }
                  },
                  "exclude": true,
                  "fn": 1,
                  "source_query_id": "text",
                  "source_tag_key": "text"
                }
              ],
              "child_expressions": [
                "[Circular Reference]"
              ],
              "operator": 0,
              "not": true
            }
          ],
          "operator": 0,
          "not": true
        },
        "path_summary_count_conditions": {
          "conditions": [
            {
              "fn": 1,
              "value": "text",
              "value_as": 1
            }
          ]
        },
        "waypoint_nodes": {
          "nodes": [
            {
              "node_type": "text",
              "condition_expression": {
                "specs": [
                  {
                    "fn": 0,
                    "property": "email",
                    "value": null,
                    "not": false,
                    "value_property_name": "text",
                    "value_property_from_other_node": true,
                    "source_property": "text"
                  }
                ],
                "tag_specs": [
                  {
                    "tag": {
                      "type": "text",
                      "key": "text",
                      "value": "text",
                      "properties": {
                        "ANY_ADDITIONAL_PROPERTY": null
                      }
                    },
                    "exclude": true,
                    "fn": 1,
                    "source_query_id": "text",
                    "source_tag_key": "text"
                  }
                ],
                "child_expressions": "[Circular Reference]",
                "operator": 0,
                "not": true
              },
              "node_id": "text",
              "count_condition_expression": "[Circular Reference]",
              "direct_relationship_only": true,
              "node_type_grouping_constraint": {
                "node_types": [
                  "text"
                ],
                "constraint_type": 1
              },
              "properties_to_get": [
                "text"
              ],
              "tags_to_get": [
                {
                  "type": 1,
                  "key": "text"
                }
              ],
              "integration_types": [
                "text"
              ]
            }
          ],
          "nodes_operator": 0
        },
        "additional_spec_properties": {}
      }
    ]
  }
}

POST /api/v1/assessments/queries HTTP/1.1
Host: your-tenant.vezacloud.com
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 16116

{
  "name": "text",
  "description": "text",
  "query_type": 1,
  "raw_permissions": {
    "values": [
      "text"
    ],
    "operator": 1
  },
  "effective_permissions": {
    "values": [
      1
    ],
    "operator": 1
  },
  "source_node_types": {
    "nodes": [
      {
        "node_type": "text",
        "condition_expression": {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            "[Circular Reference]"
          ],
          "operator": 0,
          "not": true
        },
        "node_id": "text",
        "count_condition_expression": {
          "specs": [
            {
              "fn": 1,
              "value": "text",
              "value_as": 1
            }
          ],
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "include_zero_count_results": true
        },
        "direct_relationship_only": true,
        "node_type_grouping_constraint": {
          "node_types": [
            "text"
          ],
          "constraint_type": 1
        },
        "properties_to_get": [
          "text"
        ],
        "tags_to_get": [
          {
            "type": 1,
            "key": "text"
          }
        ],
        "integration_types": [
          "text"
        ]
      }
    ],
    "nodes_operator": 0
  },
  "required_intermediate_node_types": {
    "nodes": [
      {
        "node_type": "text",
        "condition_expression": {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            "[Circular Reference]"
          ],
          "operator": 0,
          "not": true
        },
        "node_id": "text",
        "count_condition_expression": {
          "specs": [
            {
              "fn": 1,
              "value": "text",
              "value_as": 1
            }
          ],
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "include_zero_count_results": true
        },
        "direct_relationship_only": true,
        "node_type_grouping_constraint": {
          "node_types": [
            "text"
          ],
          "constraint_type": 1
        },
        "properties_to_get": [
          "text"
        ],
        "tags_to_get": [
          {
            "type": 1,
            "key": "text"
          }
        ],
        "integration_types": [
          "text"
        ]
      }
    ],
    "nodes_operator": 0
  },
  "avoided_intermediate_node_types": {
    "nodes": [
      {
        "node_type": "text",
        "condition_expression": {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            "[Circular Reference]"
          ],
          "operator": 0,
          "not": true
        },
        "node_id": "text",
        "count_condition_expression": {
          "specs": [
            {
              "fn": 1,
              "value": "text",
              "value_as": 1
            }
          ],
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "include_zero_count_results": true
        },
        "direct_relationship_only": true,
        "node_type_grouping_constraint": {
          "node_types": [
            "text"
          ],
          "constraint_type": 1
        },
        "properties_to_get": [
          "text"
        ],
        "tags_to_get": [
          {
            "type": 1,
            "key": "text"
          }
        ],
        "integration_types": [
          "text"
        ]
      }
    ],
    "nodes_operator": 0
  },
  "destination_node_types": {
    "nodes": [
      {
        "node_type": "text",
        "condition_expression": {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            "[Circular Reference]"
          ],
          "operator": 0,
          "not": true
        },
        "node_id": "text",
        "count_condition_expression": {
          "specs": [
            {
              "fn": 1,
              "value": "text",
              "value_as": 1
            }
          ],
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "include_zero_count_results": true
        },
        "direct_relationship_only": true,
        "node_type_grouping_constraint": {
          "node_types": [
            "text"
          ],
          "constraint_type": 1
        },
        "properties_to_get": [
          "text"
        ],
        "tags_to_get": [
          {
            "type": 1,
            "key": "text"
          }
        ],
        "integration_types": [
          "text"
        ]
      }
    ],
    "nodes_operator": 0
  },
  "access_filter": {
    "engagement_score": {
      "op": 1,
      "value": 1
    },
    "over_provisioned_score": {
      "op": 1,
      "value": 1
    },
    "include_secondary_grantee": true,
    "include_indirect_resource": true,
    "exclude_indirect_grantee": true,
    "anomaly_detection_history_days": "text",
    "last_used": {
      "op": 1,
      "value": "2026-02-05T01:31:06.506Z",
      "target": 1,
      "relative_timevar_value": "text"
    }
  },
  "visibility": 1,
  "node_relationship_type": 1,
  "labels": [
    "text"
  ],
  "relates_to_exp": {
    "specs": [
      {
        "node_types": {
          "nodes": "[Circular Reference]",
          "nodes_operator": 0
        },
        "required_intermediate_node_types": {
          "nodes": "[Circular Reference]",
          "nodes_operator": 0
        },
        "avoided_intermediate_node_types": {
          "nodes": "[Circular Reference]",
          "nodes_operator": 0
        },
        "raw_permissions": {
          "values": [
            "text"
          ],
          "operator": 1
        },
        "effective_permissions": {
          "values": [
            1
          ],
          "operator": 1
        },
        "unsupported_condition_mode": 1,
        "no_relation": true,
        "direction": 1,
        "path_type": 1
      }
    ],
    "child_expressions": [
      {
        "specs": [
          {
            "node_types": {
              "nodes": "[Circular Reference]",
              "nodes_operator": 0
            },
            "required_intermediate_node_types": {
              "nodes": "[Circular Reference]",
              "nodes_operator": 0
            },
            "avoided_intermediate_node_types": {
              "nodes": "[Circular Reference]",
              "nodes_operator": 0
            },
            "raw_permissions": {
              "values": [
                "text"
              ],
              "operator": 1
            },
            "effective_permissions": {
              "values": [
                1
              ],
              "operator": 1
            },
            "unsupported_condition_mode": 1,
            "no_relation": true,
            "direction": 1,
            "path_type": 1
          }
        ],
        "child_expressions": [
          "[Circular Reference]"
        ],
        "operator": 1,
        "not": true,
        "and_op_type": 1
      }
    ],
    "operator": 1,
    "not": true,
    "and_op_type": 1
  },
  "all_entity_condition": {
    "specs": [
      {
        "fn": 0,
        "property": "email",
        "value": null,
        "not": false,
        "value_property_name": "text",
        "value_property_from_other_node": true,
        "source_property": "text"
      }
    ],
    "tag_specs": [
      {
        "tag": {
          "type": "text",
          "key": "text",
          "value": "text",
          "properties": {
            "ANY_ADDITIONAL_PROPERTY": null
          }
        },
        "exclude": true,
        "fn": 1,
        "source_query_id": "text",
        "source_tag_key": "text"
      }
    ],
    "child_expressions": [
      {
        "specs": [
          {
            "fn": 0,
            "property": "email",
            "value": null,
            "not": false,
            "value_property_name": "text",
            "value_property_from_other_node": true,
            "source_property": "text"
          }
        ],
        "tag_specs": [
          {
            "tag": {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            },
            "exclude": true,
            "fn": 1,
            "source_query_id": "text",
            "source_tag_key": "text"
          }
        ],
        "child_expressions": [
          {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          }
        ],
        "operator": 0,
        "not": true
      }
    ],
    "operator": 0,
    "not": true
  },
  "path_summary_node_types": {
    "nodes": [
      {
        "node_type": "text",
        "condition_expression": {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            "[Circular Reference]"
          ],
          "operator": 0,
          "not": true
        },
        "node_id": "text",
        "count_condition_expression": {
          "specs": [
            {
              "fn": 1,
              "value": "text",
              "value_as": 1
            }
          ],
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "include_zero_count_results": true
        },
        "direct_relationship_only": true,
        "node_type_grouping_constraint": {
          "node_types": [
            "text"
          ],
          "constraint_type": 1
        },
        "properties_to_get": [
          "text"
        ],
        "tags_to_get": [
          {
            "type": 1,
            "key": "text"
          }
        ],
        "integration_types": [
          "text"
        ]
      }
    ],
    "nodes_operator": 0
  },
  "path_summary_count_conditions": {
    "conditions": [
      {
        "fn": 1,
        "value": "text",
        "value_as": 1
      }
    ]
  },
  "risk_level": 1,
  "risk_suppressed_constraints": {
    "nodes": [
      {
        "node_type": "text",
        "condition_expression": {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            "[Circular Reference]"
          ],
          "operator": 0,
          "not": true
        },
        "node_id": "text",
        "count_condition_expression": {
          "specs": [
            {
              "fn": 1,
              "value": "text",
              "value_as": 1
            }
          ],
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "include_zero_count_results": true
        },
        "direct_relationship_only": true,
        "node_type_grouping_constraint": {
          "node_types": [
            "text"
          ],
          "constraint_type": 1
        },
        "properties_to_get": [
          "text"
        ],
        "tags_to_get": [
          {
            "type": 1,
            "key": "text"
          }
        ],
        "integration_types": [
          "text"
        ]
      }
    ]
  },
  "analysis_type": 1,
  "risk_explanation": "text",
  "risk_remediation": "text",
  "result_enrichment": {
    "join_node_specs": [
      {
        "with": "text",
        "node_spec": {
          "node_type": "text",
          "condition_expression": {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": [
              "[Circular Reference]"
            ],
            "operator": 0,
            "not": true
          },
          "node_id": "text",
          "count_condition_expression": {
            "specs": [
              {
                "fn": 1,
                "value": "text",
                "value_as": 1
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 1,
            "not": true,
            "include_zero_count_results": true
          },
          "direct_relationship_only": true,
          "node_type_grouping_constraint": {
            "node_types": [
              "text"
            ],
            "constraint_type": 1
          },
          "properties_to_get": [
            "text"
          ],
          "tags_to_get": [
            {
              "type": 1,
              "key": "text"
            }
          ],
          "integration_types": [
            "text"
          ]
        },
        "as": "text"
      }
    ],
    "outlier_detection": {
      "type": 1,
      "manager_centric_config": {
        "grouping_properties": [
          {
            "property_name": "text",
            "node_type": "text",
            "target": 1,
            "joined_node_alias": "text"
          }
        ],
        "threshold": 1
      }
    },
    "include_associated_risks": true,
    "risks_filter": "text"
  },
  "include_sub_permissions": true,
  "save_mode": 1,
  "vql_query": "text",
  "waypoint_nodes": {
    "nodes": [
      {
        "node_type": "text",
        "condition_expression": {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            "[Circular Reference]"
          ],
          "operator": 0,
          "not": true
        },
        "node_id": "text",
        "count_condition_expression": {
          "specs": [
            {
              "fn": 1,
              "value": "text",
              "value_as": 1
            }
          ],
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "include_zero_count_results": true
        },
        "direct_relationship_only": true,
        "node_type_grouping_constraint": {
          "node_types": [
            "text"
          ],
          "constraint_type": 1
        },
        "properties_to_get": [
          "text"
        ],
        "tags_to_get": [
          {
            "type": 1,
            "key": "text"
          }
        ],
        "integration_types": [
          "text"
        ]
      }
    ],
    "nodes_operator": 0
  },
  "risk_profiles": [
    1
  ],
  "optional": true,
  "union_specs": [
    {
      "query_type": 1,
      "source_node_types": {
        "nodes": [
          {
            "node_type": "text",
            "condition_expression": {
              "specs": [
                {
                  "fn": 0,
                  "property": "email",
                  "value": null,
                  "not": false,
                  "value_property_name": "text",
                  "value_property_from_other_node": true,
                  "source_property": "text"
                }
              ],
              "tag_specs": [
                {
                  "tag": {
                    "type": "text",
                    "key": "text",
                    "value": "text",
                    "properties": {
                      "ANY_ADDITIONAL_PROPERTY": null
                    }
                  },
                  "exclude": true,
                  "fn": 1,
                  "source_query_id": "text",
                  "source_tag_key": "text"
                }
              ],
              "child_expressions": [
                "[Circular Reference]"
              ],
              "operator": 0,
              "not": true
            },
            "node_id": "text",
            "count_condition_expression": {
              "specs": [
                {
                  "fn": 1,
                  "value": "text",
                  "value_as": 1
                }
              ],
              "child_expressions": "[Circular Reference]",
              "operator": 1,
              "not": true,
              "include_zero_count_results": true
            },
            "direct_relationship_only": true,
            "node_type_grouping_constraint": {
              "node_types": [
                "text"
              ],
              "constraint_type": 1
            },
            "properties_to_get": [
              "text"
            ],
            "tags_to_get": [
              {
                "type": 1,
                "key": "text"
              }
            ],
            "integration_types": [
              "text"
            ]
          }
        ],
        "nodes_operator": 0
      },
      "customized_variables": [
        {
          "key": "text",
          "value": "text"
        }
      ],
      "access_filter": {
        "engagement_score": {
          "op": 1,
          "value": 1
        },
        "over_provisioned_score": {
          "op": 1,
          "value": 1
        },
        "include_secondary_grantee": true,
        "include_indirect_resource": true,
        "exclude_indirect_grantee": true,
        "anomaly_detection_history_days": "text",
        "last_used": {
          "op": 1,
          "value": "2026-02-05T01:31:06.506Z",
          "target": 1,
          "relative_timevar_value": "text"
        }
      },
      "node_relationship_type": 1,
      "relates_to_exp": {
        "specs": [
          {
            "node_types": {
              "nodes": "[Circular Reference]",
              "nodes_operator": 0
            },
            "required_intermediate_node_types": {
              "nodes": "[Circular Reference]",
              "nodes_operator": 0
            },
            "avoided_intermediate_node_types": {
              "nodes": "[Circular Reference]",
              "nodes_operator": 0
            },
            "raw_permissions": {
              "values": [
                "text"
              ],
              "operator": 1
            },
            "effective_permissions": {
              "values": [
                1
              ],
              "operator": 1
            },
            "unsupported_condition_mode": 1,
            "no_relation": true,
            "direction": 1,
            "path_type": 1
          }
        ],
        "child_expressions": [
          {
            "specs": [
              {
                "node_types": {
                  "nodes": "[Circular Reference]",
                  "nodes_operator": 0
                },
                "required_intermediate_node_types": {
                  "nodes": "[Circular Reference]",
                  "nodes_operator": 0
                },
                "avoided_intermediate_node_types": {
                  "nodes": "[Circular Reference]",
                  "nodes_operator": 0
                },
                "raw_permissions": {
                  "values": [
                    "text"
                  ],
                  "operator": 1
                },
                "effective_permissions": {
                  "values": [
                    1
                  ],
                  "operator": 1
                },
                "unsupported_condition_mode": 1,
                "no_relation": true,
                "direction": 1,
                "path_type": 1
              }
            ],
            "child_expressions": [
              "[Circular Reference]"
            ],
            "operator": 1,
            "not": true,
            "and_op_type": 1
          }
        ],
        "operator": 1,
        "not": true,
        "and_op_type": 1
      },
      "path_summary_node_types": {
        "nodes": [
          {
            "node_type": "text",
            "condition_expression": {
              "specs": [
                {
                  "fn": 0,
                  "property": "email",
                  "value": null,
                  "not": false,
                  "value_property_name": "text",
                  "value_property_from_other_node": true,
                  "source_property": "text"
                }
              ],
              "tag_specs": [
                {
                  "tag": {
                    "type": "text",
                    "key": "text",
                    "value": "text",
                    "properties": {
                      "ANY_ADDITIONAL_PROPERTY": null
                    }
                  },
                  "exclude": true,
                  "fn": 1,
                  "source_query_id": "text",
                  "source_tag_key": "text"
                }
              ],
              "child_expressions": [
                "[Circular Reference]"
              ],
              "operator": 0,
              "not": true
            },
            "node_id": "text",
            "count_condition_expression": {
              "specs": [
                {
                  "fn": 1,
                  "value": "text",
                  "value_as": 1
                }
              ],
              "child_expressions": "[Circular Reference]",
              "operator": 1,
              "not": true,
              "include_zero_count_results": true
            },
            "direct_relationship_only": true,
            "node_type_grouping_constraint": {
              "node_types": [
                "text"
              ],
              "constraint_type": 1
            },
            "properties_to_get": [
              "text"
            ],
            "tags_to_get": [
              {
                "type": 1,
                "key": "text"
              }
            ],
            "integration_types": [
              "text"
            ]
          }
        ],
        "nodes_operator": 0
      },
      "all_entity_condition": {
        "specs": [
          {
            "fn": 0,
            "property": "email",
            "value": null,
            "not": false,
            "value_property_name": "text",
            "value_property_from_other_node": true,
            "source_property": "text"
          }
        ],
        "tag_specs": [
          {
            "tag": {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            },
            "exclude": true,
            "fn": 1,
            "source_query_id": "text",
            "source_tag_key": "text"
          }
        ],
        "child_expressions": [
          {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": [
              {
                "specs": [
                  {
                    "fn": 0,
                    "property": "email",
                    "value": null,
                    "not": false,
                    "value_property_name": "text",
                    "value_property_from_other_node": true,
                    "source_property": "text"
                  }
                ],
                "tag_specs": [
                  {
                    "tag": {
                      "type": "text",
                      "key": "text",
                      "value": "text",
                      "properties": {
                        "ANY_ADDITIONAL_PROPERTY": null
                      }
                    },
                    "exclude": true,
                    "fn": 1,
                    "source_query_id": "text",
                    "source_tag_key": "text"
                  }
                ],
                "child_expressions": "[Circular Reference]",
                "operator": 0,
                "not": true
              }
            ],
            "operator": 0,
            "not": true
          }
        ],
        "operator": 0,
        "not": true
      },
      "path_summary_count_conditions": {
        "conditions": [
          {
            "fn": 1,
            "value": "text",
            "value_as": 1
          }
        ]
      },
      "waypoint_nodes": {
        "nodes": [
          {
            "node_type": "text",
            "condition_expression": {
              "specs": [
                {
                  "fn": 0,
                  "property": "email",
                  "value": null,
                  "not": false,
                  "value_property_name": "text",
                  "value_property_from_other_node": true,
                  "source_property": "text"
                }
              ],
              "tag_specs": [
                {
                  "tag": {
                    "type": "text",
                    "key": "text",
                    "value": "text",
                    "properties": {
                      "ANY_ADDITIONAL_PROPERTY": null
                    }
                  },
                  "exclude": true,
                  "fn": 1,
                  "source_query_id": "text",
                  "source_tag_key": "text"
                }
              ],
              "child_expressions": [
                "[Circular Reference]"
              ],
              "operator": 0,
              "not": true
            },
            "node_id": "text",
            "count_condition_expression": {
              "specs": [
                {
                  "fn": 1,
                  "value": "text",
                  "value_as": 1
                }
              ],
              "child_expressions": "[Circular Reference]",
              "operator": 1,
              "not": true,
              "include_zero_count_results": true
            },
            "direct_relationship_only": true,
            "node_type_grouping_constraint": {
              "node_types": [
                "text"
              ],
              "constraint_type": 1
            },
            "properties_to_get": [
              "text"
            ],
            "tags_to_get": [
              {
                "type": 1,
                "key": "text"
              }
            ],
            "integration_types": [
              "text"
            ]
          }
        ],
        "nodes_operator": 0
      },
      "additional_spec_properties": {}
    }
  ]
}

{
  "values": [
    {
      "id": "text",
      "type": "text",
      "properties": {},
      "destination_node_count": 1,
      "engagement_access_stats": {
        "engagement_score": 1,
        "over_provisioned_score": 1,
        "total_count": "text",
        "accessed_count": "text"
      },
      "access_stats": {
        "last_used": "2026-02-05T01:31:06.506Z",
        "count": 1,
        "concrete_permissions": [
          "text"
        ],
        "canonical_permissions": [
          "text"
        ]
      },
      "risk_level": 1,
      "raw_permissions": [
        "text"
      ],
      "effective_permissions": [
        "text"
      ],
      "unsupported_conditions": {
        "ANY_ADDITIONAL_PROPERTY": {
          "conditions": [
            "text"
          ]
        }
      },
      "destination_node_percentage_of_total": 1,
      "tags": [
        {
          "type": "text",
          "key": "text",
          "value": "text",
          "properties": {
            "ANY_ADDITIONAL_PROPERTY": null
          }
        }
      ],
      "specified_tags": [
        {
          "type": "text",
          "key": "text",
          "value": "text",
          "properties": {
            "ANY_ADDITIONAL_PROPERTY": null
          }
        }
      ],
      "filtered_raw_permissions": [
        "text"
      ],
      "corresponding_effective_permissions": [
        "text"
      ],
      "single_entity_access_stats": {
        "last_used": "2026-02-05T01:31:06.506Z",
        "last_used_with_events_for": [
          {
            "name": "text",
            "last_used": "2026-02-05T01:31:06.506Z"
          }
        ]
      },
      "additional_node_properties": {
        "role_substitution_recommended_role": "text",
        "role_substitution_reason_for_high_priv_role": "text",
        "role_substitution_error": "text",
        "default_cohort_role_users_in_cohort": [
          "text"
        ],
        "default_cohort_role": "text",
        "default_cohort_role_all_common_roles": [
          "text"
        ],
        "default_cohort_role_error": "text",
        "login_anomaly_detection_stats": [
          {
            "time": "2026-02-05T01:31:06.506Z",
            "login_count": "text",
            "median_login_count": 1,
            "outlier_prediction": 1
          }
        ],
        "outlier_prediction": {
          "prediction": 1,
          "score": 1,
          "contributing_features": [
            {
              "name": "text",
              "value": 1,
              "explanation": "text"
            }
          ]
        },
        "associated_risks": [
          {
            "query_id": "text",
            "suppressed": true,
            "risk_level": 1
          }
        ]
      },
      "integration_type": "text",
      "joined_nodes": {
        "ANY_ADDITIONAL_PROPERTY": {
          "id": "text",
          "type": "text",
          "properties": {},
          "destination_node_count": 1,
          "engagement_access_stats": {
            "engagement_score": 1,
            "over_provisioned_score": 1,
            "total_count": "text",
            "accessed_count": "text"
          },
          "access_stats": {
            "last_used": "2026-02-05T01:31:06.506Z",
            "count": 1,
            "concrete_permissions": [
              "text"
            ],
            "canonical_permissions": [
              "text"
            ]
          },
          "risk_level": 1,
          "raw_permissions": [
            "text"
          ],
          "effective_permissions": [
            "text"
          ],
          "unsupported_conditions": {
            "ANY_ADDITIONAL_PROPERTY": {
              "conditions": [
                "text"
              ]
            }
          },
          "destination_node_percentage_of_total": 1,
          "tags": [
            {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            }
          ],
          "specified_tags": [
            {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            }
          ],
          "filtered_raw_permissions": [
            "text"
          ],
          "corresponding_effective_permissions": [
            "text"
          ],
          "single_entity_access_stats": {
            "last_used": "2026-02-05T01:31:06.506Z",
            "last_used_with_events_for": [
              {
                "name": "text",
                "last_used": "2026-02-05T01:31:06.506Z"
              }
            ]
          },
          "additional_node_properties": {
            "role_substitution_recommended_role": "text",
            "role_substitution_reason_for_high_priv_role": "text",
            "role_substitution_error": "text",
            "default_cohort_role_users_in_cohort": [
              "text"
            ],
            "default_cohort_role": "text",
            "default_cohort_role_all_common_roles": [
              "text"
            ],
            "default_cohort_role_error": "text",
            "login_anomaly_detection_stats": [
              {
                "time": "2026-02-05T01:31:06.506Z",
                "login_count": "text",
                "median_login_count": 1,
                "outlier_prediction": 1
              }
            ],
            "outlier_prediction": {
              "prediction": 1,
              "score": 1,
              "contributing_features": [
                {
                  "name": "text",
                  "value": 1,
                  "explanation": "text"
                }
              ]
            },
            "associated_risks": [
              {
                "query_id": "text",
                "suppressed": true,
                "risk_level": 1
              }
            ]
          },
          "integration_type": "text",
          "joined_nodes": {
            "ANY_ADDITIONAL_PROPERTY": "[Circular Reference]"
          },
          "additional_spec_properties": {}
        }
      },
      "additional_spec_properties": {}
    }
  ],
  "path_values": [
    {
      "source": {
        "id": "text",
        "type": "text",
        "properties": {},
        "destination_node_count": 1,
        "engagement_access_stats": {
          "engagement_score": 1,
          "over_provisioned_score": 1,
          "total_count": "text",
          "accessed_count": "text"
        },
        "access_stats": {
          "last_used": "2026-02-05T01:31:06.506Z",
          "count": 1,
          "concrete_permissions": [
            "text"
          ],
          "canonical_permissions": [
            "text"
          ]
        },
        "risk_level": 1,
        "raw_permissions": [
          "text"
        ],
        "effective_permissions": [
          "text"
        ],
        "unsupported_conditions": {
          "ANY_ADDITIONAL_PROPERTY": {
            "conditions": [
              "text"
            ]
          }
        },
        "destination_node_percentage_of_total": 1,
        "tags": [
          {
            "type": "text",
            "key": "text",
            "value": "text",
            "properties": {
              "ANY_ADDITIONAL_PROPERTY": null
            }
          }
        ],
        "specified_tags": [
          {
            "type": "text",
            "key": "text",
            "value": "text",
            "properties": {
              "ANY_ADDITIONAL_PROPERTY": null
            }
          }
        ],
        "filtered_raw_permissions": [
          "text"
        ],
        "corresponding_effective_permissions": [
          "text"
        ],
        "single_entity_access_stats": {
          "last_used": "2026-02-05T01:31:06.506Z",
          "last_used_with_events_for": [
            {
              "name": "text",
              "last_used": "2026-02-05T01:31:06.506Z"
            }
          ]
        },
        "additional_node_properties": {
          "role_substitution_recommended_role": "text",
          "role_substitution_reason_for_high_priv_role": "text",
          "role_substitution_error": "text",
          "default_cohort_role_users_in_cohort": [
            "text"
          ],
          "default_cohort_role": "text",
          "default_cohort_role_all_common_roles": [
            "text"
          ],
          "default_cohort_role_error": "text",
          "login_anomaly_detection_stats": [
            {
              "time": "2026-02-05T01:31:06.506Z",
              "login_count": "text",
              "median_login_count": 1,
              "outlier_prediction": 1
            }
          ],
          "outlier_prediction": {
            "prediction": 1,
            "score": 1,
            "contributing_features": [
              {
                "name": "text",
                "value": 1,
                "explanation": "text"
              }
            ]
          },
          "associated_risks": [
            {
              "query_id": "text",
              "suppressed": true,
              "risk_level": 1
            }
          ]
        },
        "integration_type": "text",
        "joined_nodes": {
          "ANY_ADDITIONAL_PROPERTY": {
            "id": "text",
            "type": "text",
            "properties": {},
            "destination_node_count": 1,
            "engagement_access_stats": {
              "engagement_score": 1,
              "over_provisioned_score": 1,
              "total_count": "text",
              "accessed_count": "text"
            },
            "access_stats": {
              "last_used": "2026-02-05T01:31:06.506Z",
              "count": 1,
              "concrete_permissions": [
                "text"
              ],
              "canonical_permissions": [
                "text"
              ]
            },
            "risk_level": 1,
            "raw_permissions": [
              "text"
            ],
            "effective_permissions": [
              "text"
            ],
            "unsupported_conditions": {
              "ANY_ADDITIONAL_PROPERTY": {
                "conditions": [
                  "text"
                ]
              }
            },
            "destination_node_percentage_of_total": 1,
            "tags": [
              {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              }
            ],
            "specified_tags": [
              {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              }
            ],
            "filtered_raw_permissions": [
              "text"
            ],
            "corresponding_effective_permissions": [
              "text"
            ],
            "single_entity_access_stats": {
              "last_used": "2026-02-05T01:31:06.506Z",
              "last_used_with_events_for": [
                {
                  "name": "text",
                  "last_used": "2026-02-05T01:31:06.506Z"
                }
              ]
            },
            "additional_node_properties": {
              "role_substitution_recommended_role": "text",
              "role_substitution_reason_for_high_priv_role": "text",
              "role_substitution_error": "text",
              "default_cohort_role_users_in_cohort": [
                "text"
              ],
              "default_cohort_role": "text",
              "default_cohort_role_all_common_roles": [
                "text"
              ],
              "default_cohort_role_error": "text",
              "login_anomaly_detection_stats": [
                {
                  "time": "2026-02-05T01:31:06.506Z",
                  "login_count": "text",
                  "median_login_count": 1,
                  "outlier_prediction": 1
                }
              ],
              "outlier_prediction": {
                "prediction": 1,
                "score": 1,
                "contributing_features": [
                  {
                    "name": "text",
                    "value": 1,
                    "explanation": "text"
                  }
                ]
              },
              "associated_risks": [
                {
                  "query_id": "text",
                  "suppressed": true,
                  "risk_level": 1
                }
              ]
            },
            "integration_type": "text",
            "joined_nodes": {
              "ANY_ADDITIONAL_PROPERTY": "[Circular Reference]"
            },
            "additional_spec_properties": {}
          }
        },
        "additional_spec_properties": {}
      },
      "abstract_permissions": [
        "text"
      ],
      "concrete_permissions": [
        "text"
      ],
      "unsupported_conditions": {
        "ANY_ADDITIONAL_PROPERTY": {
          "conditions": [
            "text"
          ]
        }
      },
      "destination": {
        "id": "text",
        "type": "text",
        "properties": {},
        "destination_node_count": 1,
        "engagement_access_stats": {
          "engagement_score": 1,
          "over_provisioned_score": 1,
          "total_count": "text",
          "accessed_count": "text"
        },
        "access_stats": {
          "last_used": "2026-02-05T01:31:06.506Z",
          "count": 1,
          "concrete_permissions": [
            "text"
          ],
          "canonical_permissions": [
            "text"
          ]
        },
        "risk_level": 1,
        "raw_permissions": [
          "text"
        ],
        "effective_permissions": [
          "text"
        ],
        "unsupported_conditions": {
          "ANY_ADDITIONAL_PROPERTY": {
            "conditions": [
              "text"
            ]
          }
        },
        "destination_node_percentage_of_total": 1,
        "tags": [
          {
            "type": "text",
            "key": "text",
            "value": "text",
            "properties": {
              "ANY_ADDITIONAL_PROPERTY": null
            }
          }
        ],
        "specified_tags": [
          {
            "type": "text",
            "key": "text",
            "value": "text",
            "properties": {
              "ANY_ADDITIONAL_PROPERTY": null
            }
          }
        ],
        "filtered_raw_permissions": [
          "text"
        ],
        "corresponding_effective_permissions": [
          "text"
        ],
        "single_entity_access_stats": {
          "last_used": "2026-02-05T01:31:06.506Z",
          "last_used_with_events_for": [
            {
              "name": "text",
              "last_used": "2026-02-05T01:31:06.506Z"
            }
          ]
        },
        "additional_node_properties": {
          "role_substitution_recommended_role": "text",
          "role_substitution_reason_for_high_priv_role": "text",
          "role_substitution_error": "text",
          "default_cohort_role_users_in_cohort": [
            "text"
          ],
          "default_cohort_role": "text",
          "default_cohort_role_all_common_roles": [
            "text"
          ],
          "default_cohort_role_error": "text",
          "login_anomaly_detection_stats": [
            {
              "time": "2026-02-05T01:31:06.506Z",
              "login_count": "text",
              "median_login_count": 1,
              "outlier_prediction": 1
            }
          ],
          "outlier_prediction": {
            "prediction": 1,
            "score": 1,
            "contributing_features": [
              {
                "name": "text",
                "value": 1,
                "explanation": "text"
              }
            ]
          },
          "associated_risks": [
            {
              "query_id": "text",
              "suppressed": true,
              "risk_level": 1
            }
          ]
        },
        "integration_type": "text",
        "joined_nodes": {
          "ANY_ADDITIONAL_PROPERTY": {
            "id": "text",
            "type": "text",
            "properties": {},
            "destination_node_count": 1,
            "engagement_access_stats": {
              "engagement_score": 1,
              "over_provisioned_score": 1,
              "total_count": "text",
              "accessed_count": "text"
            },
            "access_stats": {
              "last_used": "2026-02-05T01:31:06.506Z",
              "count": 1,
              "concrete_permissions": [
                "text"
              ],
              "canonical_permissions": [
                "text"
              ]
            },
            "risk_level": 1,
            "raw_permissions": [
              "text"
            ],
            "effective_permissions": [
              "text"
            ],
            "unsupported_conditions": {
              "ANY_ADDITIONAL_PROPERTY": {
                "conditions": [
                  "text"
                ]
              }
            },
            "destination_node_percentage_of_total": 1,
            "tags": [
              {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              }
            ],
            "specified_tags": [
              {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              }
            ],
            "filtered_raw_permissions": [
              "text"
            ],
            "corresponding_effective_permissions": [
              "text"
            ],
            "single_entity_access_stats": {
              "last_used": "2026-02-05T01:31:06.506Z",
              "last_used_with_events_for": [
                {
                  "name": "text",
                  "last_used": "2026-02-05T01:31:06.506Z"
                }
              ]
            },
            "additional_node_properties": {
              "role_substitution_recommended_role": "text",
              "role_substitution_reason_for_high_priv_role": "text",
              "role_substitution_error": "text",
              "default_cohort_role_users_in_cohort": [
                "text"
              ],
              "default_cohort_role": "text",
              "default_cohort_role_all_common_roles": [
                "text"
              ],
              "default_cohort_role_error": "text",
              "login_anomaly_detection_stats": [
                {
                  "time": "2026-02-05T01:31:06.506Z",
                  "login_count": "text",
                  "median_login_count": 1,
                  "outlier_prediction": 1
                }
              ],
              "outlier_prediction": {
                "prediction": 1,
                "score": 1,
                "contributing_features": [
                  {
                    "name": "text",
                    "value": 1,
                    "explanation": "text"
                  }
                ]
              },
              "associated_risks": [
                {
                  "query_id": "text",
                  "suppressed": true,
                  "risk_level": 1
                }
              ]
            },
            "integration_type": "text",
            "joined_nodes": {
              "ANY_ADDITIONAL_PROPERTY": "[Circular Reference]"
            },
            "additional_spec_properties": {}
          }
        },
        "additional_spec_properties": {}
      },
      "path_summary_nodes": [
        {
          "id": "text",
          "type": "text",
          "properties": {},
          "destination_node_count": 1,
          "engagement_access_stats": {
            "engagement_score": 1,
            "over_provisioned_score": 1,
            "total_count": "text",
            "accessed_count": "text"
          },
          "access_stats": {
            "last_used": "2026-02-05T01:31:06.506Z",
            "count": 1,
            "concrete_permissions": [
              "text"
            ],
            "canonical_permissions": [
              "text"
            ]
          },
          "risk_level": 1,
          "raw_permissions": [
            "text"
          ],
          "effective_permissions": [
            "text"
          ],
          "unsupported_conditions": {
            "ANY_ADDITIONAL_PROPERTY": {
              "conditions": [
                "text"
              ]
            }
          },
          "destination_node_percentage_of_total": 1,
          "tags": [
            {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            }
          ],
          "specified_tags": [
            {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            }
          ],
          "filtered_raw_permissions": [
            "text"
          ],
          "corresponding_effective_permissions": [
            "text"
          ],
          "single_entity_access_stats": {
            "last_used": "2026-02-05T01:31:06.506Z",
            "last_used_with_events_for": [
              {
                "name": "text",
                "last_used": "2026-02-05T01:31:06.506Z"
              }
            ]
          },
          "additional_node_properties": {
            "role_substitution_recommended_role": "text",
            "role_substitution_reason_for_high_priv_role": "text",
            "role_substitution_error": "text",
            "default_cohort_role_users_in_cohort": [
              "text"
            ],
            "default_cohort_role": "text",
            "default_cohort_role_all_common_roles": [
              "text"
            ],
            "default_cohort_role_error": "text",
            "login_anomaly_detection_stats": [
              {
                "time": "2026-02-05T01:31:06.506Z",
                "login_count": "text",
                "median_login_count": 1,
                "outlier_prediction": 1
              }
            ],
            "outlier_prediction": {
              "prediction": 1,
              "score": 1,
              "contributing_features": [
                {
                  "name": "text",
                  "value": 1,
                  "explanation": "text"
                }
              ]
            },
            "associated_risks": [
              {
                "query_id": "text",
                "suppressed": true,
                "risk_level": 1
              }
            ]
          },
          "integration_type": "text",
          "joined_nodes": {
            "ANY_ADDITIONAL_PROPERTY": {
              "id": "text",
              "type": "text",
              "properties": {},
              "destination_node_count": 1,
              "engagement_access_stats": {
                "engagement_score": 1,
                "over_provisioned_score": 1,
                "total_count": "text",
                "accessed_count": "text"
              },
              "access_stats": {
                "last_used": "2026-02-05T01:31:06.506Z",
                "count": 1,
                "concrete_permissions": [
                  "text"
                ],
                "canonical_permissions": [
                  "text"
                ]
              },
              "risk_level": 1,
              "raw_permissions": [
                "text"
              ],
              "effective_permissions": [
                "text"
              ],
              "unsupported_conditions": {
                "ANY_ADDITIONAL_PROPERTY": {
                  "conditions": [
                    "text"
                  ]
                }
              },
              "destination_node_percentage_of_total": 1,
              "tags": [
                {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                }
              ],
              "specified_tags": [
                {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                }
              ],
              "filtered_raw_permissions": [
                "text"
              ],
              "corresponding_effective_permissions": [
                "text"
              ],
              "single_entity_access_stats": {
                "last_used": "2026-02-05T01:31:06.506Z",
                "last_used_with_events_for": [
                  {
                    "name": "text",
                    "last_used": "2026-02-05T01:31:06.506Z"
                  }
                ]
              },
              "additional_node_properties": {
                "role_substitution_recommended_role": "text",
                "role_substitution_reason_for_high_priv_role": "text",
                "role_substitution_error": "text",
                "default_cohort_role_users_in_cohort": [
                  "text"
                ],
                "default_cohort_role": "text",
                "default_cohort_role_all_common_roles": [
                  "text"
                ],
                "default_cohort_role_error": "text",
                "login_anomaly_detection_stats": [
                  {
                    "time": "2026-02-05T01:31:06.506Z",
                    "login_count": "text",
                    "median_login_count": 1,
                    "outlier_prediction": 1
                  }
                ],
                "outlier_prediction": {
                  "prediction": 1,
                  "score": 1,
                  "contributing_features": [
                    {
                      "name": "text",
                      "value": 1,
                      "explanation": "text"
                    }
                  ]
                },
                "associated_risks": [
                  {
                    "query_id": "text",
                    "suppressed": true,
                    "risk_level": 1
                  }
                ]
              },
              "integration_type": "text",
              "joined_nodes": {
                "ANY_ADDITIONAL_PROPERTY": "[Circular Reference]"
              },
              "additional_spec_properties": {}
            }
          },
          "additional_spec_properties": {}
        }
      ],
      "results_truncated": true,
      "filtered_concrete_permissions": [
        "text"
      ],
      "corresponding_abstract_permissions": [
        "text"
      ],
      "filtered_concrete_permission_groups": [
        {
          "permissions": [
            "text"
          ]
        }
      ],
      "joined_nodes": {
        "ANY_ADDITIONAL_PROPERTY": {
          "id": "text",
          "type": "text",
          "properties": {},
          "destination_node_count": 1,
          "engagement_access_stats": {
            "engagement_score": 1,
            "over_provisioned_score": 1,
            "total_count": "text",
            "accessed_count": "text"
          },
          "access_stats": {
            "last_used": "2026-02-05T01:31:06.506Z",
            "count": 1,
            "concrete_permissions": [
              "text"
            ],
            "canonical_permissions": [
              "text"
            ]
          },
          "risk_level": 1,
          "raw_permissions": [
            "text"
          ],
          "effective_permissions": [
            "text"
          ],
          "unsupported_conditions": {
            "ANY_ADDITIONAL_PROPERTY": {
              "conditions": [
                "text"
              ]
            }
          },
          "destination_node_percentage_of_total": 1,
          "tags": [
            {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            }
          ],
          "specified_tags": [
            {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            }
          ],
          "filtered_raw_permissions": [
            "text"
          ],
          "corresponding_effective_permissions": [
            "text"
          ],
          "single_entity_access_stats": {
            "last_used": "2026-02-05T01:31:06.506Z",
            "last_used_with_events_for": [
              {
                "name": "text",
                "last_used": "2026-02-05T01:31:06.506Z"
              }
            ]
          },
          "additional_node_properties": {
            "role_substitution_recommended_role": "text",
            "role_substitution_reason_for_high_priv_role": "text",
            "role_substitution_error": "text",
            "default_cohort_role_users_in_cohort": [
              "text"
            ],
            "default_cohort_role": "text",
            "default_cohort_role_all_common_roles": [
              "text"
            ],
            "default_cohort_role_error": "text",
            "login_anomaly_detection_stats": [
              {
                "time": "2026-02-05T01:31:06.506Z",
                "login_count": "text",
                "median_login_count": 1,
                "outlier_prediction": 1
              }
            ],
            "outlier_prediction": {
              "prediction": 1,
              "score": 1,
              "contributing_features": [
                {
                  "name": "text",
                  "value": 1,
                  "explanation": "text"
                }
              ]
            },
            "associated_risks": [
              {
                "query_id": "text",
                "suppressed": true,
                "risk_level": 1
              }
            ]
          },
          "integration_type": "text",
          "joined_nodes": {
            "ANY_ADDITIONAL_PROPERTY": {
              "id": "text",
              "type": "text",
              "properties": {},
              "destination_node_count": 1,
              "engagement_access_stats": {
                "engagement_score": 1,
                "over_provisioned_score": 1,
                "total_count": "text",
                "accessed_count": "text"
              },
              "access_stats": {
                "last_used": "2026-02-05T01:31:06.506Z",
                "count": 1,
                "concrete_permissions": [
                  "text"
                ],
                "canonical_permissions": [
                  "text"
                ]
              },
              "risk_level": 1,
              "raw_permissions": [
                "text"
              ],
              "effective_permissions": [
                "text"
              ],
              "unsupported_conditions": {
                "ANY_ADDITIONAL_PROPERTY": {
                  "conditions": [
                    "text"
                  ]
                }
              },
              "destination_node_percentage_of_total": 1,
              "tags": [
                {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                }
              ],
              "specified_tags": [
                {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                }
              ],
              "filtered_raw_permissions": [
                "text"
              ],
              "corresponding_effective_permissions": [
                "text"
              ],
              "single_entity_access_stats": {
                "last_used": "2026-02-05T01:31:06.506Z",
                "last_used_with_events_for": [
                  {
                    "name": "text",
                    "last_used": "2026-02-05T01:31:06.506Z"
                  }
                ]
              },
              "additional_node_properties": {
                "role_substitution_recommended_role": "text",
                "role_substitution_reason_for_high_priv_role": "text",
                "role_substitution_error": "text",
                "default_cohort_role_users_in_cohort": [
                  "text"
                ],
                "default_cohort_role": "text",
                "default_cohort_role_all_common_roles": [
                  "text"
                ],
                "default_cohort_role_error": "text",
                "login_anomaly_detection_stats": [
                  {
                    "time": "2026-02-05T01:31:06.506Z",
                    "login_count": "text",
                    "median_login_count": 1,
                    "outlier_prediction": 1
                  }
                ],
                "outlier_prediction": {
                  "prediction": 1,
                  "score": 1,
                  "contributing_features": [
                    {
                      "name": "text",
                      "value": 1,
                      "explanation": "text"
                    }
                  ]
                },
                "associated_risks": [
                  {
                    "query_id": "text",
                    "suppressed": true,
                    "risk_level": 1
                  }
                ]
              },
              "integration_type": "text",
              "joined_nodes": {
                "ANY_ADDITIONAL_PROPERTY": "[Circular Reference]"
              },
              "additional_spec_properties": {}
            }
          },
          "additional_spec_properties": {}
        }
      },
      "additional_path_properties": {
        "outlier_prediction": {
          "prediction": 1,
          "score": 1,
          "contributing_features": [
            {
              "name": "text",
              "value": 1,
              "explanation": "text"
            }
          ]
        },
        "associated_risks": [
          {
            "query_id": "text",
            "suppressed": true,
            "risk_level": 1
          }
        ]
      },
      "waypoint": {
        "id": "text",
        "type": "text",
        "properties": {},
        "destination_node_count": 1,
        "engagement_access_stats": {
          "engagement_score": 1,
          "over_provisioned_score": 1,
          "total_count": "text",
          "accessed_count": "text"
        },
        "access_stats": {
          "last_used": "2026-02-05T01:31:06.506Z",
          "count": 1,
          "concrete_permissions": [
            "text"
          ],
          "canonical_permissions": [
            "text"
          ]
        },
        "risk_level": 1,
        "raw_permissions": [
          "text"
        ],
        "effective_permissions": [
          "text"
        ],
        "unsupported_conditions": {
          "ANY_ADDITIONAL_PROPERTY": {
            "conditions": [
              "text"
            ]
          }
        },
        "destination_node_percentage_of_total": 1,
        "tags": [
          {
            "type": "text",
            "key": "text",
            "value": "text",
            "properties": {
              "ANY_ADDITIONAL_PROPERTY": null
            }
          }
        ],
        "specified_tags": [
          {
            "type": "text",
            "key": "text",
            "value": "text",
            "properties": {
              "ANY_ADDITIONAL_PROPERTY": null
            }
          }
        ],
        "filtered_raw_permissions": [
          "text"
        ],
        "corresponding_effective_permissions": [
          "text"
        ],
        "single_entity_access_stats": {
          "last_used": "2026-02-05T01:31:06.506Z",
          "last_used_with_events_for": [
            {
              "name": "text",
              "last_used": "2026-02-05T01:31:06.506Z"
            }
          ]
        },
        "additional_node_properties": {
          "role_substitution_recommended_role": "text",
          "role_substitution_reason_for_high_priv_role": "text",
          "role_substitution_error": "text",
          "default_cohort_role_users_in_cohort": [
            "text"
          ],
          "default_cohort_role": "text",
          "default_cohort_role_all_common_roles": [
            "text"
          ],
          "default_cohort_role_error": "text",
          "login_anomaly_detection_stats": [
            {
              "time": "2026-02-05T01:31:06.506Z",
              "login_count": "text",
              "median_login_count": 1,
              "outlier_prediction": 1
            }
          ],
          "outlier_prediction": {
            "prediction": 1,
            "score": 1,
            "contributing_features": [
              {
                "name": "text",
                "value": 1,
                "explanation": "text"
              }
            ]
          },
          "associated_risks": [
            {
              "query_id": "text",
              "suppressed": true,
              "risk_level": 1
            }
          ]
        },
        "integration_type": "text",
        "joined_nodes": {
          "ANY_ADDITIONAL_PROPERTY": {
            "id": "text",
            "type": "text",
            "properties": {},
            "destination_node_count": 1,
            "engagement_access_stats": {
              "engagement_score": 1,
              "over_provisioned_score": 1,
              "total_count": "text",
              "accessed_count": "text"
            },
            "access_stats": {
              "last_used": "2026-02-05T01:31:06.506Z",
              "count": 1,
              "concrete_permissions": [
                "text"
              ],
              "canonical_permissions": [
                "text"
              ]
            },
            "risk_level": 1,
            "raw_permissions": [
              "text"
            ],
            "effective_permissions": [
              "text"
            ],
            "unsupported_conditions": {
              "ANY_ADDITIONAL_PROPERTY": {
                "conditions": [
                  "text"
                ]
              }
            },
            "destination_node_percentage_of_total": 1,
            "tags": [
              {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              }
            ],
            "specified_tags": [
              {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              }
            ],
            "filtered_raw_permissions": [
              "text"
            ],
            "corresponding_effective_permissions": [
              "text"
            ],
            "single_entity_access_stats": {
              "last_used": "2026-02-05T01:31:06.506Z",
              "last_used_with_events_for": [
                {
                  "name": "text",
                  "last_used": "2026-02-05T01:31:06.506Z"
                }
              ]
            },
            "additional_node_properties": {
              "role_substitution_recommended_role": "text",
              "role_substitution_reason_for_high_priv_role": "text",
              "role_substitution_error": "text",
              "default_cohort_role_users_in_cohort": [
                "text"
              ],
              "default_cohort_role": "text",
              "default_cohort_role_all_common_roles": [
                "text"
              ],
              "default_cohort_role_error": "text",
              "login_anomaly_detection_stats": [
                {
                  "time": "2026-02-05T01:31:06.506Z",
                  "login_count": "text",
                  "median_login_count": 1,
                  "outlier_prediction": 1
                }
              ],
              "outlier_prediction": {
                "prediction": 1,
                "score": 1,
                "contributing_features": [
                  {
                    "name": "text",
                    "value": 1,
                    "explanation": "text"
                  }
                ]
              },
              "associated_risks": [
                {
                  "query_id": "text",
                  "suppressed": true,
                  "risk_level": 1
                }
              ]
            },
            "integration_type": "text",
            "joined_nodes": {
              "ANY_ADDITIONAL_PROPERTY": "[Circular Reference]"
            },
            "additional_spec_properties": {}
          }
        },
        "additional_spec_properties": {}
      },
      "additional_spec_properties": {}
    }
  ],
  "approx_total_source_nodes_count": "text",
  "next_page_token": "text",
  "has_more": true
}

{
  "values": [
    {
      "id": "arn:aws:s3:::cai-demo-bucket",
      "type": "S3Bucket",
      "properties": {
        "allows_acls": true,
        "aws_account_id": "973979857296",
        "block_public_access_enabled": true,
        "block_public_acls": true,
        "block_public_policy": true,
        "created_at": "2021-02-24T18:09:03Z",
        "datasource_id": "973979857296:s3",
        "default_encryption_enabled": true,
        "default_retention_mode": "DISABLED",
        "hosts_website": false,
        "ignore_public_acls": true,
        "name": "cai-demo-bucket",
        "object_lock_enabled": false,
        "object_ownership_controls": "ObjectWriter",
        "provider_id": "973979857296",
        "region": "us-east-2",
        "replication_rules_count": 0,
        "request_payer": "BucketOwner",
        "restrict_public_buckets": true,
        "server_access_logs_enabled": false
      },
      "destination_node_count": 0,
      "permissions": [
        {
          "id": "arn:aws:iam::973979857296:role/FederatedS3::eperm::973979857296/S3Bucket/9dab031e9731890b97dca09469ceaa68a23437b0",
          "type": "AwsIamEffectivePermission",
          "properties": {
            "aws_account_id": "973979857296",
            "datasource_id": "973979857296::eperm::973979857296:s3",
            "name": "Read,Metadata,NonData",
            "permissions": [
              "s3:GetAccelerateConfiguration",
              "s3:GetAnalyticsConfiguration",
              "s3:GetBucketAcl",
              "s3:GetBucketCORS",
              "s3:GetBucketLocation",
              "s3:GetBucketLogging",
              "s3:GetBucketNotification",
              "s3:GetBucketObjectLockConfiguration",
              "s3:GetBucketPolicy",
              "s3:GetBucketPolicyStatus",
              "s3:GetBucketPublicAccessBlock",
              "s3:GetBucketRequestPayment",
              "s3:GetBucketTagging",
              "s3:GetBucketVersioning",
              "s3:GetBucketWebsite",
              "s3:GetEncryptionConfiguration",
              "s3:GetInventoryConfiguration",
              "s3:GetLifecycleConfiguration",
              "s3:GetMetricsConfiguration",
              "s3:GetObject",
              "s3:GetObjectAcl",
              "s3:GetObjectLegalHold",
              "s3:GetObjectRetention",
              "s3:GetObjectTagging",
              "s3:GetObjectTorrent",
              "s3:GetObjectVersion",
              "s3:GetObjectVersionAcl",
              "s3:GetObjectVersionForReplication",
              "s3:GetObjectVersionTagging",
              "s3:GetObjectVersionTorrent",
              "s3:GetReplicationConfiguration",
              "s3:ListBucket",
              "s3:ListBucketMultipartUploads",
              "s3:ListBucketVersions",
              "s3:ListMultipartUploadParts"
            ],
            "provider_id": "973979857296"
          },
          "destination_node_count": 0,
          "permissions": [],
          "engagement_access_stats": null,
          "access_stats": null,
          "destination_node_ids": [],
          "risk_level": "NONE",
          "raw_permissions": [],
          "effective_permissions": []
        },
        {
          "id": "arn:aws:iam::973979857296:role/FederatedRedshiftAndS3::eperm::973979857296/S3Bucket/9dab031e9731890b97dca09469ceaa68a23437b0",
          "type": "AwsIamEffectivePermission",
          "properties": {
            "aws_account_id": "973979857296",
            "datasource_id": "973979857296::eperm::973979857296:s3",
            "name": "Read,Metadata,NonData",
            "permissions": [
              "s3:GetAccelerateConfiguration",
              "s3:GetAnalyticsConfiguration",
              "s3:GetBucketAcl",
              "s3:GetBucketCORS",
              "s3:GetBucketLocation",
              "s3:GetBucketLogging",
              "s3:GetBucketNotification",
              "s3:GetBucketObjectLockConfiguration",
              "s3:GetBucketPolicy",
              "s3:GetBucketPolicyStatus",
              "s3:GetBucketPublicAccessBlock",
              "s3:GetBucketRequestPayment",
              "s3:GetBucketTagging",
              "s3:GetBucketVersioning",
              "s3:GetBucketWebsite",
              "s3:GetEncryptionConfiguration",
              "s3:GetInventoryConfiguration",
              "s3:GetLifecycleConfiguration",
              "s3:GetMetricsConfiguration",
              "s3:GetObject",
              "s3:GetObjectAcl",
              "s3:GetObjectLegalHold",
              "s3:GetObjectRetention",
              "s3:GetObjectTagging",
              "s3:GetObjectTorrent",
              "s3:GetObjectVersion",
              "s3:GetObjectVersionAcl",
              "s3:GetObjectVersionForReplication",
              "s3:GetObjectVersionTagging",
              "s3:GetObjectVersionTorrent",
              "s3:GetReplicationConfiguration",
              "s3:ListBucket",
              "s3:ListBucketMultipartUploads",
              "s3:ListBucketVersions",
              "s3:ListMultipartUploadParts"
            ],
            "provider_id": "973979857296"
          },
          "destination_node_count": 0,
          "permissions": [],
          "engagement_access_stats": null,
          "access_stats": null,
          "destination_node_ids": [],
          "risk_level": "NONE",
          "raw_permissions": [],
          "effective_permissions": []
        }
      ],
      "engagement_access_stats": null,
      "access_stats": null,
      "destination_node_ids": [],
      "risk_level": "NONE",
      "raw_permissions": [
        "s3:GetAccelerateConfiguration",
        "s3:GetAnalyticsConfiguration",
        "s3:GetBucketAcl",
        "s3:GetBucketCORS",
        "s3:GetBucketLocation",
        "s3:GetBucketLogging",
        "s3:GetBucketNotification",
        "s3:GetBucketObjectLockConfiguration",
        "s3:GetBucketPolicy",
        "s3:GetBucketPolicyStatus",
        "s3:GetBucketPublicAccessBlock",
        "s3:GetBucketRequestPayment",
        "s3:GetBucketTagging",
        "s3:GetBucketVersioning",
        "s3:GetBucketWebsite",
        "s3:GetEncryptionConfiguration",
        "s3:GetInventoryConfiguration",
        "s3:GetLifecycleConfiguration",
        "s3:GetMetricsConfiguration",
        "s3:GetObject",
        "s3:GetObjectAcl",
        "s3:GetObjectLegalHold",
        "s3:GetObjectRetention",
        "s3:GetObjectTagging",
        "s3:GetObjectTorrent",
        "s3:GetObjectVersion",
        "s3:GetObjectVersionAcl",
        "s3:GetObjectVersionForReplication",
        "s3:GetObjectVersionTagging",
        "s3:GetObjectVersionTorrent",
        "s3:GetReplicationConfiguration",
        "s3:ListBucket",
        "s3:ListBucketMultipartUploads",
        "s3:ListBucketVersions",
        "s3:ListMultipartUploadParts"
      ],
      "effective_permissions": [
        "Metadata",
        "NonData",
        "Read"
      ]
    }
  ],
  "path_values": [],
  "next_page_token": "",
  "has_more": false
}

{
  "value": {
    "id": "text",
    "name": "text",
    "description": "text",
    "result_type": 0,
    "query_type": 1,
    "raw_permissions": {
      "values": [
        "text"
      ],
      "operator": 1
    },
    "effective_permissions": {
      "values": [
        1
      ],
      "operator": 1
    },
    "variables": [
      "text"
    ],
    "source_node_types": {
      "nodes": [
        {
          "node_type": "text",
          "condition_expression": {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          },
          "node_id": "text",
          "count_condition_expression": "[Circular Reference]",
          "direct_relationship_only": true,
          "node_type_grouping_constraint": {
            "node_types": [
              "text"
            ],
            "constraint_type": 1
          },
          "properties_to_get": [
            "text"
          ],
          "tags_to_get": [
            {
              "type": 1,
              "key": "text"
            }
          ],
          "integration_types": [
            "text"
          ]
        }
      ],
      "nodes_operator": 0
    },
    "required_intermediate_node_types": {
      "nodes": [
        {
          "node_type": "text",
          "condition_expression": {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          },
          "node_id": "text",
          "count_condition_expression": "[Circular Reference]",
          "direct_relationship_only": true,
          "node_type_grouping_constraint": {
            "node_types": [
              "text"
            ],
            "constraint_type": 1
          },
          "properties_to_get": [
            "text"
          ],
          "tags_to_get": [
            {
              "type": 1,
              "key": "text"
            }
          ],
          "integration_types": [
            "text"
          ]
        }
      ],
      "nodes_operator": 0
    },
    "avoided_intermediate_node_types": {
      "nodes": [
        {
          "node_type": "text",
          "condition_expression": {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          },
          "node_id": "text",
          "count_condition_expression": "[Circular Reference]",
          "direct_relationship_only": true,
          "node_type_grouping_constraint": {
            "node_types": [
              "text"
            ],
            "constraint_type": 1
          },
          "properties_to_get": [
            "text"
          ],
          "tags_to_get": [
            {
              "type": 1,
              "key": "text"
            }
          ],
          "integration_types": [
            "text"
          ]
        }
      ],
      "nodes_operator": 0
    },
    "destination_node_types": {
      "nodes": [
        {
          "node_type": "text",
          "condition_expression": {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          },
          "node_id": "text",
          "count_condition_expression": "[Circular Reference]",
          "direct_relationship_only": true,
          "node_type_grouping_constraint": {
            "node_types": [
              "text"
            ],
            "constraint_type": 1
          },
          "properties_to_get": [
            "text"
          ],
          "tags_to_get": [
            {
              "type": 1,
              "key": "text"
            }
          ],
          "integration_types": [
            "text"
          ]
        }
      ],
      "nodes_operator": 0
    },
    "access_filter": {
      "engagement_score": {
        "op": 1,
        "value": 1
      },
      "over_provisioned_score": {
        "op": 1,
        "value": 1
      },
      "include_secondary_grantee": true,
      "include_indirect_resource": true,
      "exclude_indirect_grantee": true,
      "anomaly_detection_history_days": "text",
      "last_used": {
        "op": 1,
        "value": "2026-02-05T01:31:06.506Z",
        "target": 1,
        "relative_timevar_value": "text"
      }
    },
    "created_by": "text",
    "visibility": 1,
    "owners": [
      "text"
    ],
    "node_relationship_type": 0,
    "integration_types": [
      "text"
    ],
    "labels": [
      "text"
    ],
    "created_at": "2026-02-05T01:31:06.506Z",
    "updated_at": "2026-02-05T01:31:06.506Z",
    "source_type": "text",
    "destination_types": [
      "text"
    ],
    "relates_to_exp": {
      "specs": [
        {
          "node_types": "[Circular Reference]",
          "required_intermediate_node_types": "[Circular Reference]",
          "avoided_intermediate_node_types": "[Circular Reference]",
          "raw_permissions": {
            "values": [
              "text"
            ],
            "operator": 1
          },
          "effective_permissions": {
            "values": [
              1
            ],
            "operator": 1
          },
          "unsupported_condition_mode": 1,
          "no_relation": true,
          "direction": 1,
          "path_type": 1
        }
      ],
      "child_expressions": [
        {
          "specs": "[Circular Reference]",
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "and_op_type": 1
        }
      ],
      "operator": 1,
      "not": true,
      "and_op_type": 1
    },
    "all_entity_condition": {
      "specs": [
        {
          "fn": 0,
          "property": "email",
          "value": null,
          "not": false,
          "value_property_name": "text",
          "value_property_from_other_node": true,
          "source_property": "text"
        }
      ],
      "tag_specs": [
        {
          "tag": {
            "type": "text",
            "key": "text",
            "value": "text",
            "properties": {
              "ANY_ADDITIONAL_PROPERTY": null
            }
          },
          "exclude": true,
          "fn": 1,
          "source_query_id": "text",
          "source_tag_key": "text"
        }
      ],
      "child_expressions": [
        {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            "[Circular Reference]"
          ],
          "operator": 0,
          "not": true
        }
      ],
      "operator": 0,
      "not": true
    },
    "path_summary_node_types": {
      "nodes": [
        {
          "node_type": "text",
          "condition_expression": {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          },
          "node_id": "text",
          "count_condition_expression": "[Circular Reference]",
          "direct_relationship_only": true,
          "node_type_grouping_constraint": {
            "node_types": [
              "text"
            ],
            "constraint_type": 1
          },
          "properties_to_get": [
            "text"
          ],
          "tags_to_get": [
            {
              "type": 1,
              "key": "text"
            }
          ],
          "integration_types": [
            "text"
          ]
        }
      ],
      "nodes_operator": 0
    },
    "path_summary_count_conditions": {
      "conditions": [
        {
          "fn": 1,
          "value": "text",
          "value_as": 1
        }
      ]
    },
    "risk_level": 0,
    "risk_suppressed_constraints": {
      "nodes": [
        {
          "node_type": "text",
          "condition_expression": {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          },
          "node_id": "text",
          "count_condition_expression": "[Circular Reference]",
          "direct_relationship_only": true,
          "node_type_grouping_constraint": {
            "node_types": [
              "text"
            ],
            "constraint_type": 1
          },
          "properties_to_get": [
            "text"
          ],
          "tags_to_get": [
            {
              "type": 1,
              "key": "text"
            }
          ],
          "integration_types": [
            "text"
          ]
        }
      ]
    },
    "analysis_type": 1,
    "result": 1,
    "result_evaluated_at": "2026-02-05T01:31:06.506Z",
    "result_evaluated": true,
    "risk_explanation": "text",
    "risk_remediation": "text",
    "updated_by": "text",
    "natural_language": "text",
    "result_enrichment": {
      "join_node_specs": [
        {
          "with": "text",
          "node_spec": "[Circular Reference]",
          "as": "text"
        }
      ],
      "outlier_detection": {
        "type": 1,
        "manager_centric_config": {
          "grouping_properties": [
            {
              "property_name": "text",
              "node_type": "text",
              "target": 1,
              "joined_node_alias": "text"
            }
          ],
          "threshold": 1
        }
      },
      "include_associated_risks": true,
      "risks_filter": "text"
    },
    "change_source": 1,
    "uneditable": true,
    "approx_total_source_nodes_count": "text",
    "include_sub_permissions": true,
    "save_mode": 1,
    "vql_query": "text",
    "source_type_integration": "text",
    "shared": true,
    "team_id": "text",
    "include_permissions_summary": true,
    "risk_statistics": {
      "affected_node_count": "text",
      "suppressed_node_count": "text",
      "last_occurred_at": "2026-02-05T01:31:06.506Z",
      "status": 1
    },
    "risk_profiles": [
      0
    ],
    "internal_id": "text",
    "waypoint_nodes": {
      "nodes": [
        {
          "node_type": "text",
          "condition_expression": {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          },
          "node_id": "text",
          "count_condition_expression": "[Circular Reference]",
          "direct_relationship_only": true,
          "node_type_grouping_constraint": {
            "node_types": [
              "text"
            ],
            "constraint_type": 1
          },
          "properties_to_get": [
            "text"
          ],
          "tags_to_get": [
            {
              "type": 1,
              "key": "text"
            }
          ],
          "integration_types": [
            "text"
          ]
        }
      ],
      "nodes_operator": 0
    },
    "optional": true,
    "union_specs": [
      {
        "query_type": 1,
        "source_node_types": {
          "nodes": [
            {
              "node_type": "text",
              "condition_expression": {
                "specs": [
                  {
                    "fn": 0,
                    "property": "email",
                    "value": null,
                    "not": false,
                    "value_property_name": "text",
                    "value_property_from_other_node": true,
                    "source_property": "text"
                  }
                ],
                "tag_specs": [
                  {
                    "tag": {
                      "type": "text",
                      "key": "text",
                      "value": "text",
                      "properties": {
                        "ANY_ADDITIONAL_PROPERTY": null
                      }
                    },
                    "exclude": true,
                    "fn": 1,
                    "source_query_id": "text",
                    "source_tag_key": "text"
                  }
                ],
                "child_expressions": "[Circular Reference]",
                "operator": 0,
                "not": true
              },
              "node_id": "text",
              "count_condition_expression": "[Circular Reference]",
              "direct_relationship_only": true,
              "node_type_grouping_constraint": {
                "node_types": [
                  "text"
                ],
                "constraint_type": 1
              },
              "properties_to_get": [
                "text"
              ],
              "tags_to_get": [
                {
                  "type": 1,
                  "key": "text"
                }
              ],
              "integration_types": [
                "text"
              ]
            }
          ],
          "nodes_operator": 0
        },
        "customized_variables": [
          {
            "key": "text",
            "value": "text"
          }
        ],
        "access_filter": {
          "engagement_score": {
            "op": 1,
            "value": 1
          },
          "over_provisioned_score": {
            "op": 1,
            "value": 1
          },
          "include_secondary_grantee": true,
          "include_indirect_resource": true,
          "exclude_indirect_grantee": true,
          "anomaly_detection_history_days": "text",
          "last_used": {
            "op": 1,
            "value": "2026-02-05T01:31:06.506Z",
            "target": 1,
            "relative_timevar_value": "text"
          }
        },
        "node_relationship_type": 1,
        "relates_to_exp": {
          "specs": "[Circular Reference]",
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "and_op_type": 1
        },
        "path_summary_node_types": {
          "nodes": [
            {
              "node_type": "text",
              "condition_expression": {
                "specs": [
                  {
                    "fn": 0,
                    "property": "email",
                    "value": null,
                    "not": false,
                    "value_property_name": "text",
                    "value_property_from_other_node": true,
                    "source_property": "text"
                  }
                ],
                "tag_specs": [
                  {
                    "tag": {
                      "type": "text",
                      "key": "text",
                      "value": "text",
                      "properties": {
                        "ANY_ADDITIONAL_PROPERTY": null
                      }
                    },
                    "exclude": true,
                    "fn": 1,
                    "source_query_id": "text",
                    "source_tag_key": "text"
                  }
                ],
                "child_expressions": "[Circular Reference]",
                "operator": 0,
                "not": true
              },
              "node_id": "text",
              "count_condition_expression": "[Circular Reference]",
              "direct_relationship_only": true,
              "node_type_grouping_constraint": {
                "node_types": [
                  "text"
                ],
                "constraint_type": 1
              },
              "properties_to_get": [
                "text"
              ],
              "tags_to_get": [
                {
                  "type": 1,
                  "key": "text"
                }
              ],
              "integration_types": [
                "text"
              ]
            }
          ],
          "nodes_operator": 0
        },
        "all_entity_condition": {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            {
              "specs": [
                {
                  "fn": 0,
                  "property": "email",
                  "value": null,
                  "not": false,
                  "value_property_name": "text",
                  "value_property_from_other_node": true,
                  "source_property": "text"
                }
              ],
              "tag_specs": [
                {
                  "tag": {
                    "type": "text",
                    "key": "text",
                    "value": "text",
                    "properties": {
                      "ANY_ADDITIONAL_PROPERTY": null
                    }
                  },
                  "exclude": true,
                  "fn": 1,
                  "source_query_id": "text",
                  "source_tag_key": "text"
                }
              ],
              "child_expressions": [
                "[Circular Reference]"
              ],
              "operator": 0,
              "not": true
            }
          ],
          "operator": 0,
          "not": true
        },
        "path_summary_count_conditions": {
          "conditions": [
            {
              "fn": 1,
              "value": "text",
              "value_as": 1
            }
          ]
        },
        "waypoint_nodes": {
          "nodes": [
            {
              "node_type": "text",
              "condition_expression": {
                "specs": [
                  {
                    "fn": 0,
                    "property": "email",
                    "value": null,
                    "not": false,
                    "value_property_name": "text",
                    "value_property_from_other_node": true,
                    "source_property": "text"
                  }
                ],
                "tag_specs": [
                  {
                    "tag": {
                      "type": "text",
                      "key": "text",
                      "value": "text",
                      "properties": {
                        "ANY_ADDITIONAL_PROPERTY": null
                      }
                    },
                    "exclude": true,
                    "fn": 1,
                    "source_query_id": "text",
                    "source_tag_key": "text"
                  }
                ],
                "child_expressions": "[Circular Reference]",
                "operator": 0,
                "not": true
              },
              "node_id": "text",
              "count_condition_expression": "[Circular Reference]",
              "direct_relationship_only": true,
              "node_type_grouping_constraint": {
                "node_types": [
                  "text"
                ],
                "constraint_type": 1
              },
              "properties_to_get": [
                "text"
              ],
              "tags_to_get": [
                {
                  "type": 1,
                  "key": "text"
                }
              ],
              "integration_types": [
                "text"
              ]
            }
          ],
          "nodes_operator": 0
        },
        "additional_spec_properties": {}
      }
    ]
  }
}

PUT /api/v1/assessments/queries/{id} HTTP/1.1
Host: your-tenant.vezacloud.com
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 15201

{
  "id": "text",
  "name": "text",
  "description": "text",
  "raw_permissions": {
    "values": [
      "text"
    ],
    "operator": 1
  },
  "effective_permissions": {
    "values": [
      1
    ],
    "operator": 1
  },
  "source_node_types": {
    "nodes": [
      {
        "node_type": "text",
        "condition_expression": {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            "[Circular Reference]"
          ],
          "operator": 0,
          "not": true
        },
        "node_id": "text",
        "count_condition_expression": {
          "specs": [
            {
              "fn": 1,
              "value": "text",
              "value_as": 1
            }
          ],
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "include_zero_count_results": true
        },
        "direct_relationship_only": true,
        "node_type_grouping_constraint": {
          "node_types": [
            "text"
          ],
          "constraint_type": 1
        },
        "properties_to_get": [
          "text"
        ],
        "tags_to_get": [
          {
            "type": 1,
            "key": "text"
          }
        ],
        "integration_types": [
          "text"
        ]
      }
    ],
    "nodes_operator": 0
  },
  "required_intermediate_node_types": {
    "nodes": [
      {
        "node_type": "text",
        "condition_expression": {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            "[Circular Reference]"
          ],
          "operator": 0,
          "not": true
        },
        "node_id": "text",
        "count_condition_expression": {
          "specs": [
            {
              "fn": 1,
              "value": "text",
              "value_as": 1
            }
          ],
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "include_zero_count_results": true
        },
        "direct_relationship_only": true,
        "node_type_grouping_constraint": {
          "node_types": [
            "text"
          ],
          "constraint_type": 1
        },
        "properties_to_get": [
          "text"
        ],
        "tags_to_get": [
          {
            "type": 1,
            "key": "text"
          }
        ],
        "integration_types": [
          "text"
        ]
      }
    ],
    "nodes_operator": 0
  },
  "avoided_intermediate_node_types": {
    "nodes": [
      {
        "node_type": "text",
        "condition_expression": {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            "[Circular Reference]"
          ],
          "operator": 0,
          "not": true
        },
        "node_id": "text",
        "count_condition_expression": {
          "specs": [
            {
              "fn": 1,
              "value": "text",
              "value_as": 1
            }
          ],
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "include_zero_count_results": true
        },
        "direct_relationship_only": true,
        "node_type_grouping_constraint": {
          "node_types": [
            "text"
          ],
          "constraint_type": 1
        },
        "properties_to_get": [
          "text"
        ],
        "tags_to_get": [
          {
            "type": 1,
            "key": "text"
          }
        ],
        "integration_types": [
          "text"
        ]
      }
    ],
    "nodes_operator": 0
  },
  "destination_node_types": {
    "nodes": [
      {
        "node_type": "text",
        "condition_expression": {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            "[Circular Reference]"
          ],
          "operator": 0,
          "not": true
        },
        "node_id": "text",
        "count_condition_expression": {
          "specs": [
            {
              "fn": 1,
              "value": "text",
              "value_as": 1
            }
          ],
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "include_zero_count_results": true
        },
        "direct_relationship_only": true,
        "node_type_grouping_constraint": {
          "node_types": [
            "text"
          ],
          "constraint_type": 1
        },
        "properties_to_get": [
          "text"
        ],
        "tags_to_get": [
          {
            "type": 1,
            "key": "text"
          }
        ],
        "integration_types": [
          "text"
        ]
      }
    ],
    "nodes_operator": 0
  },
  "access_filter": {
    "engagement_score": {
      "op": 1,
      "value": 1
    },
    "over_provisioned_score": {
      "op": 1,
      "value": 1
    },
    "include_secondary_grantee": true,
    "include_indirect_resource": true,
    "exclude_indirect_grantee": true,
    "anomaly_detection_history_days": "text",
    "last_used": {
      "op": 1,
      "value": "2026-02-05T01:31:06.506Z",
      "target": 1,
      "relative_timevar_value": "text"
    }
  },
  "visibility": 1,
  "node_relationship_type": 1,
  "labels": [
    "text"
  ],
  "relates_to_exp": {
    "specs": [
      {
        "node_types": {
          "nodes": "[Circular Reference]",
          "nodes_operator": 0
        },
        "required_intermediate_node_types": {
          "nodes": "[Circular Reference]",
          "nodes_operator": 0
        },
        "avoided_intermediate_node_types": {
          "nodes": "[Circular Reference]",
          "nodes_operator": 0
        },
        "raw_permissions": {
          "values": [
            "text"
          ],
          "operator": 1
        },
        "effective_permissions": {
          "values": [
            1
          ],
          "operator": 1
        },
        "unsupported_condition_mode": 1,
        "no_relation": true,
        "direction": 1,
        "path_type": 1
      }
    ],
    "child_expressions": [
      {
        "specs": [
          {
            "node_types": {
              "nodes": "[Circular Reference]",
              "nodes_operator": 0
            },
            "required_intermediate_node_types": {
              "nodes": "[Circular Reference]",
              "nodes_operator": 0
            },
            "avoided_intermediate_node_types": {
              "nodes": "[Circular Reference]",
              "nodes_operator": 0
            },
            "raw_permissions": {
              "values": [
                "text"
              ],
              "operator": 1
            },
            "effective_permissions": {
              "values": [
                1
              ],
              "operator": 1
            },
            "unsupported_condition_mode": 1,
            "no_relation": true,
            "direction": 1,
            "path_type": 1
          }
        ],
        "child_expressions": [
          "[Circular Reference]"
        ],
        "operator": 1,
        "not": true,
        "and_op_type": 1
      }
    ],
    "operator": 1,
    "not": true,
    "and_op_type": 1
  },
  "all_entity_condition": {
    "specs": [
      {
        "fn": 0,
        "property": "email",
        "value": null,
        "not": false,
        "value_property_name": "text",
        "value_property_from_other_node": true,
        "source_property": "text"
      }
    ],
    "tag_specs": [
      {
        "tag": {
          "type": "text",
          "key": "text",
          "value": "text",
          "properties": {
            "ANY_ADDITIONAL_PROPERTY": null
          }
        },
        "exclude": true,
        "fn": 1,
        "source_query_id": "text",
        "source_tag_key": "text"
      }
    ],
    "child_expressions": [
      {
        "specs": [
          {
            "fn": 0,
            "property": "email",
            "value": null,
            "not": false,
            "value_property_name": "text",
            "value_property_from_other_node": true,
            "source_property": "text"
          }
        ],
        "tag_specs": [
          {
            "tag": {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            },
            "exclude": true,
            "fn": 1,
            "source_query_id": "text",
            "source_tag_key": "text"
          }
        ],
        "child_expressions": [
          {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          }
        ],
        "operator": 0,
        "not": true
      }
    ],
    "operator": 0,
    "not": true
  },
  "path_summary_node_types": {
    "nodes": [
      {
        "node_type": "text",
        "condition_expression": {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            "[Circular Reference]"
          ],
          "operator": 0,
          "not": true
        },
        "node_id": "text",
        "count_condition_expression": {
          "specs": [
            {
              "fn": 1,
              "value": "text",
              "value_as": 1
            }
          ],
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "include_zero_count_results": true
        },
        "direct_relationship_only": true,
        "node_type_grouping_constraint": {
          "node_types": [
            "text"
          ],
          "constraint_type": 1
        },
        "properties_to_get": [
          "text"
        ],
        "tags_to_get": [
          {
            "type": 1,
            "key": "text"
          }
        ],
        "integration_types": [
          "text"
        ]
      }
    ],
    "nodes_operator": 0
  },
  "path_summary_count_conditions": {
    "conditions": [
      {
        "fn": 1,
        "value": "text",
        "value_as": 1
      }
    ]
  },
  "analysis_type": 1,
  "risk_explanation": "text",
  "risk_remediation": "text",
  "result_enrichment": {
    "join_node_specs": [
      {
        "with": "text",
        "node_spec": {
          "node_type": "text",
          "condition_expression": {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": [
              "[Circular Reference]"
            ],
            "operator": 0,
            "not": true
          },
          "node_id": "text",
          "count_condition_expression": {
            "specs": [
              {
                "fn": 1,
                "value": "text",
                "value_as": 1
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 1,
            "not": true,
            "include_zero_count_results": true
          },
          "direct_relationship_only": true,
          "node_type_grouping_constraint": {
            "node_types": [
              "text"
            ],
            "constraint_type": 1
          },
          "properties_to_get": [
            "text"
          ],
          "tags_to_get": [
            {
              "type": 1,
              "key": "text"
            }
          ],
          "integration_types": [
            "text"
          ]
        },
        "as": "text"
      }
    ],
    "outlier_detection": {
      "type": 1,
      "manager_centric_config": {
        "grouping_properties": [
          {
            "property_name": "text",
            "node_type": "text",
            "target": 1,
            "joined_node_alias": "text"
          }
        ],
        "threshold": 1
      }
    },
    "include_associated_risks": true,
    "risks_filter": "text"
  },
  "include_sub_permissions": true,
  "save_mode": 1,
  "vql_query": "text",
  "waypoint_nodes": {
    "nodes": [
      {
        "node_type": "text",
        "condition_expression": {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            "[Circular Reference]"
          ],
          "operator": 0,
          "not": true
        },
        "node_id": "text",
        "count_condition_expression": {
          "specs": [
            {
              "fn": 1,
              "value": "text",
              "value_as": 1
            }
          ],
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "include_zero_count_results": true
        },
        "direct_relationship_only": true,
        "node_type_grouping_constraint": {
          "node_types": [
            "text"
          ],
          "constraint_type": 1
        },
        "properties_to_get": [
          "text"
        ],
        "tags_to_get": [
          {
            "type": 1,
            "key": "text"
          }
        ],
        "integration_types": [
          "text"
        ]
      }
    ],
    "nodes_operator": 0
  },
  "risk_profiles": [
    1
  ],
  "optional": true,
  "union_specs": [
    {
      "query_type": 1,
      "source_node_types": {
        "nodes": [
          {
            "node_type": "text",
            "condition_expression": {
              "specs": [
                {
                  "fn": 0,
                  "property": "email",
                  "value": null,
                  "not": false,
                  "value_property_name": "text",
                  "value_property_from_other_node": true,
                  "source_property": "text"
                }
              ],
              "tag_specs": [
                {
                  "tag": {
                    "type": "text",
                    "key": "text",
                    "value": "text",
                    "properties": {
                      "ANY_ADDITIONAL_PROPERTY": null
                    }
                  },
                  "exclude": true,
                  "fn": 1,
                  "source_query_id": "text",
                  "source_tag_key": "text"
                }
              ],
              "child_expressions": [
                "[Circular Reference]"
              ],
              "operator": 0,
              "not": true
            },
            "node_id": "text",
            "count_condition_expression": {
              "specs": [
                {
                  "fn": 1,
                  "value": "text",
                  "value_as": 1
                }
              ],
              "child_expressions": "[Circular Reference]",
              "operator": 1,
              "not": true,
              "include_zero_count_results": true
            },
            "direct_relationship_only": true,
            "node_type_grouping_constraint": {
              "node_types": [
                "text"
              ],
              "constraint_type": 1
            },
            "properties_to_get": [
              "text"
            ],
            "tags_to_get": [
              {
                "type": 1,
                "key": "text"
              }
            ],
            "integration_types": [
              "text"
            ]
          }
        ],
        "nodes_operator": 0
      },
      "customized_variables": [
        {
          "key": "text",
          "value": "text"
        }
      ],
      "access_filter": {
        "engagement_score": {
          "op": 1,
          "value": 1
        },
        "over_provisioned_score": {
          "op": 1,
          "value": 1
        },
        "include_secondary_grantee": true,
        "include_indirect_resource": true,
        "exclude_indirect_grantee": true,
        "anomaly_detection_history_days": "text",
        "last_used": {
          "op": 1,
          "value": "2026-02-05T01:31:06.506Z",
          "target": 1,
          "relative_timevar_value": "text"
        }
      },
      "node_relationship_type": 1,
      "relates_to_exp": {
        "specs": [
          {
            "node_types": {
              "nodes": "[Circular Reference]",
              "nodes_operator": 0
            },
            "required_intermediate_node_types": {
              "nodes": "[Circular Reference]",
              "nodes_operator": 0
            },
            "avoided_intermediate_node_types": {
              "nodes": "[Circular Reference]",
              "nodes_operator": 0
            },
            "raw_permissions": {
              "values": [
                "text"
              ],
              "operator": 1
            },
            "effective_permissions": {
              "values": [
                1
              ],
              "operator": 1
            },
            "unsupported_condition_mode": 1,
            "no_relation": true,
            "direction": 1,
            "path_type": 1
          }
        ],
        "child_expressions": [
          {
            "specs": [
              {
                "node_types": {
                  "nodes": "[Circular Reference]",
                  "nodes_operator": 0
                },
                "required_intermediate_node_types": {
                  "nodes": "[Circular Reference]",
                  "nodes_operator": 0
                },
                "avoided_intermediate_node_types": {
                  "nodes": "[Circular Reference]",
                  "nodes_operator": 0
                },
                "raw_permissions": {
                  "values": [
                    "text"
                  ],
                  "operator": 1
                },
                "effective_permissions": {
                  "values": [
                    1
                  ],
                  "operator": 1
                },
                "unsupported_condition_mode": 1,
                "no_relation": true,
                "direction": 1,
                "path_type": 1
              }
            ],
            "child_expressions": [
              "[Circular Reference]"
            ],
            "operator": 1,
            "not": true,
            "and_op_type": 1
          }
        ],
        "operator": 1,
        "not": true,
        "and_op_type": 1
      },
      "path_summary_node_types": {
        "nodes": [
          {
            "node_type": "text",
            "condition_expression": {
              "specs": [
                {
                  "fn": 0,
                  "property": "email",
                  "value": null,
                  "not": false,
                  "value_property_name": "text",
                  "value_property_from_other_node": true,
                  "source_property": "text"
                }
              ],
              "tag_specs": [
                {
                  "tag": {
                    "type": "text",
                    "key": "text",
                    "value": "text",
                    "properties": {
                      "ANY_ADDITIONAL_PROPERTY": null
                    }
                  },
                  "exclude": true,
                  "fn": 1,
                  "source_query_id": "text",
                  "source_tag_key": "text"
                }
              ],
              "child_expressions": [
                "[Circular Reference]"
              ],
              "operator": 0,
              "not": true
            },
            "node_id": "text",
            "count_condition_expression": {
              "specs": [
                {
                  "fn": 1,
                  "value": "text",
                  "value_as": 1
                }
              ],
              "child_expressions": "[Circular Reference]",
              "operator": 1,
              "not": true,
              "include_zero_count_results": true
            },
            "direct_relationship_only": true,
            "node_type_grouping_constraint": {
              "node_types": [
                "text"
              ],
              "constraint_type": 1
            },
            "properties_to_get": [
              "text"
            ],
            "tags_to_get": [
              {
                "type": 1,
                "key": "text"
              }
            ],
            "integration_types": [
              "text"
            ]
          }
        ],
        "nodes_operator": 0
      },
      "all_entity_condition": {
        "specs": [
          {
            "fn": 0,
            "property": "email",
            "value": null,
            "not": false,
            "value_property_name": "text",
            "value_property_from_other_node": true,
            "source_property": "text"
          }
        ],
        "tag_specs": [
          {
            "tag": {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            },
            "exclude": true,
            "fn": 1,
            "source_query_id": "text",
            "source_tag_key": "text"
          }
        ],
        "child_expressions": [
          {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": [
              {
                "specs": [
                  {
                    "fn": 0,
                    "property": "email",
                    "value": null,
                    "not": false,
                    "value_property_name": "text",
                    "value_property_from_other_node": true,
                    "source_property": "text"
                  }
                ],
                "tag_specs": [
                  {
                    "tag": {
                      "type": "text",
                      "key": "text",
                      "value": "text",
                      "properties": {
                        "ANY_ADDITIONAL_PROPERTY": null
                      }
                    },
                    "exclude": true,
                    "fn": 1,
                    "source_query_id": "text",
                    "source_tag_key": "text"
                  }
                ],
                "child_expressions": "[Circular Reference]",
                "operator": 0,
                "not": true
              }
            ],
            "operator": 0,
            "not": true
          }
        ],
        "operator": 0,
        "not": true
      },
      "path_summary_count_conditions": {
        "conditions": [
          {
            "fn": 1,
            "value": "text",
            "value_as": 1
          }
        ]
      },
      "waypoint_nodes": {
        "nodes": [
          {
            "node_type": "text",
            "condition_expression": {
              "specs": [
                {
                  "fn": 0,
                  "property": "email",
                  "value": null,
                  "not": false,
                  "value_property_name": "text",
                  "value_property_from_other_node": true,
                  "source_property": "text"
                }
              ],
              "tag_specs": [
                {
                  "tag": {
                    "type": "text",
                    "key": "text",
                    "value": "text",
                    "properties": {
                      "ANY_ADDITIONAL_PROPERTY": null
                    }
                  },
                  "exclude": true,
                  "fn": 1,
                  "source_query_id": "text",
                  "source_tag_key": "text"
                }
              ],
              "child_expressions": [
                "[Circular Reference]"
              ],
              "operator": 0,
              "not": true
            },
            "node_id": "text",
            "count_condition_expression": {
              "specs": [
                {
                  "fn": 1,
                  "value": "text",
                  "value_as": 1
                }
              ],
              "child_expressions": "[Circular Reference]",
              "operator": 1,
              "not": true,
              "include_zero_count_results": true
            },
            "direct_relationship_only": true,
            "node_type_grouping_constraint": {
              "node_types": [
                "text"
              ],
              "constraint_type": 1
            },
            "properties_to_get": [
              "text"
            ],
            "tags_to_get": [
              {
                "type": 1,
                "key": "text"
              }
            ],
            "integration_types": [
              "text"
            ]
          }
        ],
        "nodes_operator": 0
      },
      "additional_spec_properties": {}
    }
  ]
}

post

Authorizations

AuthorizationstringRequired

Veza API key for authentication. Generate keys in Administration > API Keys.

Body

query_typeinteger · enumOptional

no_relationbooleanOptionalDeprecated

snapshot_idstringOptional

node_relationship_typeinteger · enumOptional

result_value_typeinteger · enumOptional

include_all_source_tags_in_resultsbooleanOptional

These fields control whether or not tags will be included in source and/or destination results

include_all_destination_tags_in_resultsbooleanOptional

additional_columns_to_getinteger · enum[]Optional

Allows FE to Alert BE if permissions are being displayed to the user

include_sub_permissionsbooleanOptional

Include node with sub permissions which is a permission showing for a resource when in reality the permission applies to a subresource.

include_permissions_summarybooleanOptional

This field should be used with AssessmentQueryResultValueType SOURCE_NODES_WITH_COUNTS to include permissions summarized (aggregated) by source node, meaning it contains all permissions used by each source node

unpivot_propertiesstring[]Optional

The properties that should be unpivoted in the results producing multiple rows per node/path To be able to unpivot a property, it must be a list/array type property. If multiple properties are used result will be Cartesian product(all unpivot combinations for node). If property does not exist on a node, and it is a valid property, we will just add that node as is. Syntax to specify properties is the full path to the property using dot notation and using properties json names. Both values and pathValues can be unpivoted:

Valid values for unpivoting: properties.<property_name>, unsupported_conditions.<condition_name>.conditions, joined_nodes..<valid_value_for_unpivoting>, raw_permissions, effective_permissions, access_stats.concrete_permissions, access_stats.canonical_permissions, filtered_raw_permissions, corresponding_effective_permissions, additional_node_properties.default_cohort_role_users_in_cohort, additional_node_properties.default_cohort_role_all_common_roles
Valid pathValues for unpivoting: unsupported_conditions.<condition_name>.conditions, joined_nodes..<valid_value_for_unpivoting>, source.<valid_value_for_unpivoting>, destination.<valid_value_for_unpivoting>, waypoint.<valid_value_for_unpivoting>, abstract_permissions,concrete_permissions, filtered_concrete_permissions, corresponding_abstract_permissions Examples for Unpivoting values:
Single field: unpivot_properties: ["properties.email_addresses"] result_values: {Values: [ {id:"1","properties"{"email_addresses":["[email protected]","[email protected]"]}} ]} After unpivot -> Multiple nodes with id 1: result_values: {Values: [ {id:"1","properties"{"email_addresses":"[email protected]"}}, {id:"1","properties"{"email_addresses":"[email protected]"}} ]}
Single field with missing unpivot property: unpivot_properties: ["properties.email_addresses"] result_values: {Values: [ {id:"1","properties"{"permissions": "abc"]}} ]} After unpivot -> Single node with id 1 (no email_addresses property to unpivot): result_values: {Values: [ {id:"1","properties"{"permissions":"abc"}}, ]}
Multiple fields - Cartesian Product: unpivot_properties: ["properties.email_addresses", "raw_permissions"] result_values: {Values: [ {id:"1","properties"{"email_addresses":["[email protected]","[email protected]"]}, "raw_permissions":["perm1","perm2"]} ]} After unpivot -> Multiple nodes with id 1: result_values: {Values: [ {id:"1","properties"{"email_addresses":"[email protected]"}, "raw_permissions":"perm1"}, {id:"1","properties"{"email_addresses":"[email protected]"}, "raw_permissions":"perm2"}, {id:"1","properties"{"email_addresses":"[email protected]"}, "raw_permissions":"perm1"}, {id:"1","properties"{"email_addresses":"[email protected]"}, "raw_permissions":"perm2"}, ]}

page_sizestringOptional

The maximum number of results to be returned. Fewer results may be returned even when more pages exist.

page_tokenstringOptional

The token specifying the specific page of results to retrieve.

Responses

200

application/json

default

Default error response

application/json

post

/api/v1/assessments/query_spec:result

{
  "values": [
    {
      "id": "text",
      "type": "text",
      "properties": {},
      "destination_node_count": 1,
      "engagement_access_stats": {
        "engagement_score": 1,
        "over_provisioned_score": 1,
        "total_count": "text",
        "accessed_count": "text"
      },
      "access_stats": {
        "last_used": "2026-02-05T01:31:06.506Z",
        "count": 1,
        "concrete_permissions": [
          "text"
        ],
        "canonical_permissions": [
          "text"
        ]
      },
      "risk_level": 1,
      "raw_permissions": [
        "text"
      ],
      "effective_permissions": [
        "text"
      ],
      "unsupported_conditions": {
        "ANY_ADDITIONAL_PROPERTY": {
          "conditions": [
            "text"
          ]
        }
      },
      "destination_node_percentage_of_total": 1,
      "tags": [
        {
          "type": "text",
          "key": "text",
          "value": "text",
          "properties": {
            "ANY_ADDITIONAL_PROPERTY": null
          }
        }
      ],
      "specified_tags": [
        {
          "type": "text",
          "key": "text",
          "value": "text",
          "properties": {
            "ANY_ADDITIONAL_PROPERTY": null
          }
        }
      ],
      "filtered_raw_permissions": [
        "text"
      ],
      "corresponding_effective_permissions": [
        "text"
      ],
      "single_entity_access_stats": {
        "last_used": "2026-02-05T01:31:06.506Z",
        "last_used_with_events_for": [
          {
            "name": "text",
            "last_used": "2026-02-05T01:31:06.506Z"
          }
        ]
      },
      "additional_node_properties": {
        "role_substitution_recommended_role": "text",
        "role_substitution_reason_for_high_priv_role": "text",
        "role_substitution_error": "text",
        "default_cohort_role_users_in_cohort": [
          "text"
        ],
        "default_cohort_role": "text",
        "default_cohort_role_all_common_roles": [
          "text"
        ],
        "default_cohort_role_error": "text",
        "login_anomaly_detection_stats": [
          {
            "time": "2026-02-05T01:31:06.506Z",
            "login_count": "text",
            "median_login_count": 1,
            "outlier_prediction": 1
          }
        ],
        "outlier_prediction": {
          "prediction": 1,
          "score": 1,
          "contributing_features": [
            {
              "name": "text",
              "value": 1,
              "explanation": "text"
            }
          ]
        },
        "associated_risks": [
          {
            "query_id": "text",
            "suppressed": true,
            "risk_level": 1
          }
        ]
      },
      "integration_type": "text",
      "joined_nodes": {
        "ANY_ADDITIONAL_PROPERTY": {
          "id": "text",
          "type": "text",
          "properties": {},
          "destination_node_count": 1,
          "engagement_access_stats": {
            "engagement_score": 1,
            "over_provisioned_score": 1,
            "total_count": "text",
            "accessed_count": "text"
          },
          "access_stats": {
            "last_used": "2026-02-05T01:31:06.506Z",
            "count": 1,
            "concrete_permissions": [
              "text"
            ],
            "canonical_permissions": [
              "text"
            ]
          },
          "risk_level": 1,
          "raw_permissions": [
            "text"
          ],
          "effective_permissions": [
            "text"
          ],
          "unsupported_conditions": {
            "ANY_ADDITIONAL_PROPERTY": {
              "conditions": [
                "text"
              ]
            }
          },
          "destination_node_percentage_of_total": 1,
          "tags": [
            {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            }
          ],
          "specified_tags": [
            {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            }
          ],
          "filtered_raw_permissions": [
            "text"
          ],
          "corresponding_effective_permissions": [
            "text"
          ],
          "single_entity_access_stats": {
            "last_used": "2026-02-05T01:31:06.506Z",
            "last_used_with_events_for": [
              {
                "name": "text",
                "last_used": "2026-02-05T01:31:06.506Z"
              }
            ]
          },
          "additional_node_properties": {
            "role_substitution_recommended_role": "text",
            "role_substitution_reason_for_high_priv_role": "text",
            "role_substitution_error": "text",
            "default_cohort_role_users_in_cohort": [
              "text"
            ],
            "default_cohort_role": "text",
            "default_cohort_role_all_common_roles": [
              "text"
            ],
            "default_cohort_role_error": "text",
            "login_anomaly_detection_stats": [
              {
                "time": "2026-02-05T01:31:06.506Z",
                "login_count": "text",
                "median_login_count": 1,
                "outlier_prediction": 1
              }
            ],
            "outlier_prediction": {
              "prediction": 1,
              "score": 1,
              "contributing_features": [
                {
                  "name": "text",
                  "value": 1,
                  "explanation": "text"
                }
              ]
            },
            "associated_risks": [
              {
                "query_id": "text",
                "suppressed": true,
                "risk_level": 1
              }
            ]
          },
          "integration_type": "text",
          "joined_nodes": {
            "ANY_ADDITIONAL_PROPERTY": "[Circular Reference]"
          },
          "additional_spec_properties": {}
        }
      },
      "additional_spec_properties": {}
    }
  ],
  "path_values": [
    {
      "source": {
        "id": "text",
        "type": "text",
        "properties": {},
        "destination_node_count": 1,
        "engagement_access_stats": {
          "engagement_score": 1,
          "over_provisioned_score": 1,
          "total_count": "text",
          "accessed_count": "text"
        },
        "access_stats": {
          "last_used": "2026-02-05T01:31:06.506Z",
          "count": 1,
          "concrete_permissions": [
            "text"
          ],
          "canonical_permissions": [
            "text"
          ]
        },
        "risk_level": 1,
        "raw_permissions": [
          "text"
        ],
        "effective_permissions": [
          "text"
        ],
        "unsupported_conditions": {
          "ANY_ADDITIONAL_PROPERTY": {
            "conditions": [
              "text"
            ]
          }
        },
        "destination_node_percentage_of_total": 1,
        "tags": [
          {
            "type": "text",
            "key": "text",
            "value": "text",
            "properties": {
              "ANY_ADDITIONAL_PROPERTY": null
            }
          }
        ],
        "specified_tags": [
          {
            "type": "text",
            "key": "text",
            "value": "text",
            "properties": {
              "ANY_ADDITIONAL_PROPERTY": null
            }
          }
        ],
        "filtered_raw_permissions": [
          "text"
        ],
        "corresponding_effective_permissions": [
          "text"
        ],
        "single_entity_access_stats": {
          "last_used": "2026-02-05T01:31:06.506Z",
          "last_used_with_events_for": [
            {
              "name": "text",
              "last_used": "2026-02-05T01:31:06.506Z"
            }
          ]
        },
        "additional_node_properties": {
          "role_substitution_recommended_role": "text",
          "role_substitution_reason_for_high_priv_role": "text",
          "role_substitution_error": "text",
          "default_cohort_role_users_in_cohort": [
            "text"
          ],
          "default_cohort_role": "text",
          "default_cohort_role_all_common_roles": [
            "text"
          ],
          "default_cohort_role_error": "text",
          "login_anomaly_detection_stats": [
            {
              "time": "2026-02-05T01:31:06.506Z",
              "login_count": "text",
              "median_login_count": 1,
              "outlier_prediction": 1
            }
          ],
          "outlier_prediction": {
            "prediction": 1,
            "score": 1,
            "contributing_features": [
              {
                "name": "text",
                "value": 1,
                "explanation": "text"
              }
            ]
          },
          "associated_risks": [
            {
              "query_id": "text",
              "suppressed": true,
              "risk_level": 1
            }
          ]
        },
        "integration_type": "text",
        "joined_nodes": {
          "ANY_ADDITIONAL_PROPERTY": {
            "id": "text",
            "type": "text",
            "properties": {},
            "destination_node_count": 1,
            "engagement_access_stats": {
              "engagement_score": 1,
              "over_provisioned_score": 1,
              "total_count": "text",
              "accessed_count": "text"
            },
            "access_stats": {
              "last_used": "2026-02-05T01:31:06.506Z",
              "count": 1,
              "concrete_permissions": [
                "text"
              ],
              "canonical_permissions": [
                "text"
              ]
            },
            "risk_level": 1,
            "raw_permissions": [
              "text"
            ],
            "effective_permissions": [
              "text"
            ],
            "unsupported_conditions": {
              "ANY_ADDITIONAL_PROPERTY": {
                "conditions": [
                  "text"
                ]
              }
            },
            "destination_node_percentage_of_total": 1,
            "tags": [
              {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              }
            ],
            "specified_tags": [
              {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              }
            ],
            "filtered_raw_permissions": [
              "text"
            ],
            "corresponding_effective_permissions": [
              "text"
            ],
            "single_entity_access_stats": {
              "last_used": "2026-02-05T01:31:06.506Z",
              "last_used_with_events_for": [
                {
                  "name": "text",
                  "last_used": "2026-02-05T01:31:06.506Z"
                }
              ]
            },
            "additional_node_properties": {
              "role_substitution_recommended_role": "text",
              "role_substitution_reason_for_high_priv_role": "text",
              "role_substitution_error": "text",
              "default_cohort_role_users_in_cohort": [
                "text"
              ],
              "default_cohort_role": "text",
              "default_cohort_role_all_common_roles": [
                "text"
              ],
              "default_cohort_role_error": "text",
              "login_anomaly_detection_stats": [
                {
                  "time": "2026-02-05T01:31:06.506Z",
                  "login_count": "text",
                  "median_login_count": 1,
                  "outlier_prediction": 1
                }
              ],
              "outlier_prediction": {
                "prediction": 1,
                "score": 1,
                "contributing_features": [
                  {
                    "name": "text",
                    "value": 1,
                    "explanation": "text"
                  }
                ]
              },
              "associated_risks": [
                {
                  "query_id": "text",
                  "suppressed": true,
                  "risk_level": 1
                }
              ]
            },
            "integration_type": "text",
            "joined_nodes": {
              "ANY_ADDITIONAL_PROPERTY": "[Circular Reference]"
            },
            "additional_spec_properties": {}
          }
        },
        "additional_spec_properties": {}
      },
      "abstract_permissions": [
        "text"
      ],
      "concrete_permissions": [
        "text"
      ],
      "unsupported_conditions": {
        "ANY_ADDITIONAL_PROPERTY": {
          "conditions": [
            "text"
          ]
        }
      },
      "destination": {
        "id": "text",
        "type": "text",
        "properties": {},
        "destination_node_count": 1,
        "engagement_access_stats": {
          "engagement_score": 1,
          "over_provisioned_score": 1,
          "total_count": "text",
          "accessed_count": "text"
        },
        "access_stats": {
          "last_used": "2026-02-05T01:31:06.506Z",
          "count": 1,
          "concrete_permissions": [
            "text"
          ],
          "canonical_permissions": [
            "text"
          ]
        },
        "risk_level": 1,
        "raw_permissions": [
          "text"
        ],
        "effective_permissions": [
          "text"
        ],
        "unsupported_conditions": {
          "ANY_ADDITIONAL_PROPERTY": {
            "conditions": [
              "text"
            ]
          }
        },
        "destination_node_percentage_of_total": 1,
        "tags": [
          {
            "type": "text",
            "key": "text",
            "value": "text",
            "properties": {
              "ANY_ADDITIONAL_PROPERTY": null
            }
          }
        ],
        "specified_tags": [
          {
            "type": "text",
            "key": "text",
            "value": "text",
            "properties": {
              "ANY_ADDITIONAL_PROPERTY": null
            }
          }
        ],
        "filtered_raw_permissions": [
          "text"
        ],
        "corresponding_effective_permissions": [
          "text"
        ],
        "single_entity_access_stats": {
          "last_used": "2026-02-05T01:31:06.506Z",
          "last_used_with_events_for": [
            {
              "name": "text",
              "last_used": "2026-02-05T01:31:06.506Z"
            }
          ]
        },
        "additional_node_properties": {
          "role_substitution_recommended_role": "text",
          "role_substitution_reason_for_high_priv_role": "text",
          "role_substitution_error": "text",
          "default_cohort_role_users_in_cohort": [
            "text"
          ],
          "default_cohort_role": "text",
          "default_cohort_role_all_common_roles": [
            "text"
          ],
          "default_cohort_role_error": "text",
          "login_anomaly_detection_stats": [
            {
              "time": "2026-02-05T01:31:06.506Z",
              "login_count": "text",
              "median_login_count": 1,
              "outlier_prediction": 1
            }
          ],
          "outlier_prediction": {
            "prediction": 1,
            "score": 1,
            "contributing_features": [
              {
                "name": "text",
                "value": 1,
                "explanation": "text"
              }
            ]
          },
          "associated_risks": [
            {
              "query_id": "text",
              "suppressed": true,
              "risk_level": 1
            }
          ]
        },
        "integration_type": "text",
        "joined_nodes": {
          "ANY_ADDITIONAL_PROPERTY": {
            "id": "text",
            "type": "text",
            "properties": {},
            "destination_node_count": 1,
            "engagement_access_stats": {
              "engagement_score": 1,
              "over_provisioned_score": 1,
              "total_count": "text",
              "accessed_count": "text"
            },
            "access_stats": {
              "last_used": "2026-02-05T01:31:06.506Z",
              "count": 1,
              "concrete_permissions": [
                "text"
              ],
              "canonical_permissions": [
                "text"
              ]
            },
            "risk_level": 1,
            "raw_permissions": [
              "text"
            ],
            "effective_permissions": [
              "text"
            ],
            "unsupported_conditions": {
              "ANY_ADDITIONAL_PROPERTY": {
                "conditions": [
                  "text"
                ]
              }
            },
            "destination_node_percentage_of_total": 1,
            "tags": [
              {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              }
            ],
            "specified_tags": [
              {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              }
            ],
            "filtered_raw_permissions": [
              "text"
            ],
            "corresponding_effective_permissions": [
              "text"
            ],
            "single_entity_access_stats": {
              "last_used": "2026-02-05T01:31:06.506Z",
              "last_used_with_events_for": [
                {
                  "name": "text",
                  "last_used": "2026-02-05T01:31:06.506Z"
                }
              ]
            },
            "additional_node_properties": {
              "role_substitution_recommended_role": "text",
              "role_substitution_reason_for_high_priv_role": "text",
              "role_substitution_error": "text",
              "default_cohort_role_users_in_cohort": [
                "text"
              ],
              "default_cohort_role": "text",
              "default_cohort_role_all_common_roles": [
                "text"
              ],
              "default_cohort_role_error": "text",
              "login_anomaly_detection_stats": [
                {
                  "time": "2026-02-05T01:31:06.506Z",
                  "login_count": "text",
                  "median_login_count": 1,
                  "outlier_prediction": 1
                }
              ],
              "outlier_prediction": {
                "prediction": 1,
                "score": 1,
                "contributing_features": [
                  {
                    "name": "text",
                    "value": 1,
                    "explanation": "text"
                  }
                ]
              },
              "associated_risks": [
                {
                  "query_id": "text",
                  "suppressed": true,
                  "risk_level": 1
                }
              ]
            },
            "integration_type": "text",
            "joined_nodes": {
              "ANY_ADDITIONAL_PROPERTY": "[Circular Reference]"
            },
            "additional_spec_properties": {}
          }
        },
        "additional_spec_properties": {}
      },
      "path_summary_nodes": [
        {
          "id": "text",
          "type": "text",
          "properties": {},
          "destination_node_count": 1,
          "engagement_access_stats": {
            "engagement_score": 1,
            "over_provisioned_score": 1,
            "total_count": "text",
            "accessed_count": "text"
          },
          "access_stats": {
            "last_used": "2026-02-05T01:31:06.506Z",
            "count": 1,
            "concrete_permissions": [
              "text"
            ],
            "canonical_permissions": [
              "text"
            ]
          },
          "risk_level": 1,
          "raw_permissions": [
            "text"
          ],
          "effective_permissions": [
            "text"
          ],
          "unsupported_conditions": {
            "ANY_ADDITIONAL_PROPERTY": {
              "conditions": [
                "text"
              ]
            }
          },
          "destination_node_percentage_of_total": 1,
          "tags": [
            {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            }
          ],
          "specified_tags": [
            {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            }
          ],
          "filtered_raw_permissions": [
            "text"
          ],
          "corresponding_effective_permissions": [
            "text"
          ],
          "single_entity_access_stats": {
            "last_used": "2026-02-05T01:31:06.506Z",
            "last_used_with_events_for": [
              {
                "name": "text",
                "last_used": "2026-02-05T01:31:06.506Z"
              }
            ]
          },
          "additional_node_properties": {
            "role_substitution_recommended_role": "text",
            "role_substitution_reason_for_high_priv_role": "text",
            "role_substitution_error": "text",
            "default_cohort_role_users_in_cohort": [
              "text"
            ],
            "default_cohort_role": "text",
            "default_cohort_role_all_common_roles": [
              "text"
            ],
            "default_cohort_role_error": "text",
            "login_anomaly_detection_stats": [
              {
                "time": "2026-02-05T01:31:06.506Z",
                "login_count": "text",
                "median_login_count": 1,
                "outlier_prediction": 1
              }
            ],
            "outlier_prediction": {
              "prediction": 1,
              "score": 1,
              "contributing_features": [
                {
                  "name": "text",
                  "value": 1,
                  "explanation": "text"
                }
              ]
            },
            "associated_risks": [
              {
                "query_id": "text",
                "suppressed": true,
                "risk_level": 1
              }
            ]
          },
          "integration_type": "text",
          "joined_nodes": {
            "ANY_ADDITIONAL_PROPERTY": {
              "id": "text",
              "type": "text",
              "properties": {},
              "destination_node_count": 1,
              "engagement_access_stats": {
                "engagement_score": 1,
                "over_provisioned_score": 1,
                "total_count": "text",
                "accessed_count": "text"
              },
              "access_stats": {
                "last_used": "2026-02-05T01:31:06.506Z",
                "count": 1,
                "concrete_permissions": [
                  "text"
                ],
                "canonical_permissions": [
                  "text"
                ]
              },
              "risk_level": 1,
              "raw_permissions": [
                "text"
              ],
              "effective_permissions": [
                "text"
              ],
              "unsupported_conditions": {
                "ANY_ADDITIONAL_PROPERTY": {
                  "conditions": [
                    "text"
                  ]
                }
              },
              "destination_node_percentage_of_total": 1,
              "tags": [
                {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                }
              ],
              "specified_tags": [
                {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                }
              ],
              "filtered_raw_permissions": [
                "text"
              ],
              "corresponding_effective_permissions": [
                "text"
              ],
              "single_entity_access_stats": {
                "last_used": "2026-02-05T01:31:06.506Z",
                "last_used_with_events_for": [
                  {
                    "name": "text",
                    "last_used": "2026-02-05T01:31:06.506Z"
                  }
                ]
              },
              "additional_node_properties": {
                "role_substitution_recommended_role": "text",
                "role_substitution_reason_for_high_priv_role": "text",
                "role_substitution_error": "text",
                "default_cohort_role_users_in_cohort": [
                  "text"
                ],
                "default_cohort_role": "text",
                "default_cohort_role_all_common_roles": [
                  "text"
                ],
                "default_cohort_role_error": "text",
                "login_anomaly_detection_stats": [
                  {
                    "time": "2026-02-05T01:31:06.506Z",
                    "login_count": "text",
                    "median_login_count": 1,
                    "outlier_prediction": 1
                  }
                ],
                "outlier_prediction": {
                  "prediction": 1,
                  "score": 1,
                  "contributing_features": [
                    {
                      "name": "text",
                      "value": 1,
                      "explanation": "text"
                    }
                  ]
                },
                "associated_risks": [
                  {
                    "query_id": "text",
                    "suppressed": true,
                    "risk_level": 1
                  }
                ]
              },
              "integration_type": "text",
              "joined_nodes": {
                "ANY_ADDITIONAL_PROPERTY": "[Circular Reference]"
              },
              "additional_spec_properties": {}
            }
          },
          "additional_spec_properties": {}
        }
      ],
      "results_truncated": true,
      "filtered_concrete_permissions": [
        "text"
      ],
      "corresponding_abstract_permissions": [
        "text"
      ],
      "filtered_concrete_permission_groups": [
        {
          "permissions": [
            "text"
          ]
        }
      ],
      "joined_nodes": {
        "ANY_ADDITIONAL_PROPERTY": {
          "id": "text",
          "type": "text",
          "properties": {},
          "destination_node_count": 1,
          "engagement_access_stats": {
            "engagement_score": 1,
            "over_provisioned_score": 1,
            "total_count": "text",
            "accessed_count": "text"
          },
          "access_stats": {
            "last_used": "2026-02-05T01:31:06.506Z",
            "count": 1,
            "concrete_permissions": [
              "text"
            ],
            "canonical_permissions": [
              "text"
            ]
          },
          "risk_level": 1,
          "raw_permissions": [
            "text"
          ],
          "effective_permissions": [
            "text"
          ],
          "unsupported_conditions": {
            "ANY_ADDITIONAL_PROPERTY": {
              "conditions": [
                "text"
              ]
            }
          },
          "destination_node_percentage_of_total": 1,
          "tags": [
            {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            }
          ],
          "specified_tags": [
            {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            }
          ],
          "filtered_raw_permissions": [
            "text"
          ],
          "corresponding_effective_permissions": [
            "text"
          ],
          "single_entity_access_stats": {
            "last_used": "2026-02-05T01:31:06.506Z",
            "last_used_with_events_for": [
              {
                "name": "text",
                "last_used": "2026-02-05T01:31:06.506Z"
              }
            ]
          },
          "additional_node_properties": {
            "role_substitution_recommended_role": "text",
            "role_substitution_reason_for_high_priv_role": "text",
            "role_substitution_error": "text",
            "default_cohort_role_users_in_cohort": [
              "text"
            ],
            "default_cohort_role": "text",
            "default_cohort_role_all_common_roles": [
              "text"
            ],
            "default_cohort_role_error": "text",
            "login_anomaly_detection_stats": [
              {
                "time": "2026-02-05T01:31:06.506Z",
                "login_count": "text",
                "median_login_count": 1,
                "outlier_prediction": 1
              }
            ],
            "outlier_prediction": {
              "prediction": 1,
              "score": 1,
              "contributing_features": [
                {
                  "name": "text",
                  "value": 1,
                  "explanation": "text"
                }
              ]
            },
            "associated_risks": [
              {
                "query_id": "text",
                "suppressed": true,
                "risk_level": 1
              }
            ]
          },
          "integration_type": "text",
          "joined_nodes": {
            "ANY_ADDITIONAL_PROPERTY": {
              "id": "text",
              "type": "text",
              "properties": {},
              "destination_node_count": 1,
              "engagement_access_stats": {
                "engagement_score": 1,
                "over_provisioned_score": 1,
                "total_count": "text",
                "accessed_count": "text"
              },
              "access_stats": {
                "last_used": "2026-02-05T01:31:06.506Z",
                "count": 1,
                "concrete_permissions": [
                  "text"
                ],
                "canonical_permissions": [
                  "text"
                ]
              },
              "risk_level": 1,
              "raw_permissions": [
                "text"
              ],
              "effective_permissions": [
                "text"
              ],
              "unsupported_conditions": {
                "ANY_ADDITIONAL_PROPERTY": {
                  "conditions": [
                    "text"
                  ]
                }
              },
              "destination_node_percentage_of_total": 1,
              "tags": [
                {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                }
              ],
              "specified_tags": [
                {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                }
              ],
              "filtered_raw_permissions": [
                "text"
              ],
              "corresponding_effective_permissions": [
                "text"
              ],
              "single_entity_access_stats": {
                "last_used": "2026-02-05T01:31:06.506Z",
                "last_used_with_events_for": [
                  {
                    "name": "text",
                    "last_used": "2026-02-05T01:31:06.506Z"
                  }
                ]
              },
              "additional_node_properties": {
                "role_substitution_recommended_role": "text",
                "role_substitution_reason_for_high_priv_role": "text",
                "role_substitution_error": "text",
                "default_cohort_role_users_in_cohort": [
                  "text"
                ],
                "default_cohort_role": "text",
                "default_cohort_role_all_common_roles": [
                  "text"
                ],
                "default_cohort_role_error": "text",
                "login_anomaly_detection_stats": [
                  {
                    "time": "2026-02-05T01:31:06.506Z",
                    "login_count": "text",
                    "median_login_count": 1,
                    "outlier_prediction": 1
                  }
                ],
                "outlier_prediction": {
                  "prediction": 1,
                  "score": 1,
                  "contributing_features": [
                    {
                      "name": "text",
                      "value": 1,
                      "explanation": "text"
                    }
                  ]
                },
                "associated_risks": [
                  {
                    "query_id": "text",
                    "suppressed": true,
                    "risk_level": 1
                  }
                ]
              },
              "integration_type": "text",
              "joined_nodes": {
                "ANY_ADDITIONAL_PROPERTY": "[Circular Reference]"
              },
              "additional_spec_properties": {}
            }
          },
          "additional_spec_properties": {}
        }
      },
      "additional_path_properties": {
        "outlier_prediction": {
          "prediction": 1,
          "score": 1,
          "contributing_features": [
            {
              "name": "text",
              "value": 1,
              "explanation": "text"
            }
          ]
        },
        "associated_risks": [
          {
            "query_id": "text",
            "suppressed": true,
            "risk_level": 1
          }
        ]
      },
      "waypoint": {
        "id": "text",
        "type": "text",
        "properties": {},
        "destination_node_count": 1,
        "engagement_access_stats": {
          "engagement_score": 1,
          "over_provisioned_score": 1,
          "total_count": "text",
          "accessed_count": "text"
        },
        "access_stats": {
          "last_used": "2026-02-05T01:31:06.506Z",
          "count": 1,
          "concrete_permissions": [
            "text"
          ],
          "canonical_permissions": [
            "text"
          ]
        },
        "risk_level": 1,
        "raw_permissions": [
          "text"
        ],
        "effective_permissions": [
          "text"
        ],
        "unsupported_conditions": {
          "ANY_ADDITIONAL_PROPERTY": {
            "conditions": [
              "text"
            ]
          }
        },
        "destination_node_percentage_of_total": 1,
        "tags": [
          {
            "type": "text",
            "key": "text",
            "value": "text",
            "properties": {
              "ANY_ADDITIONAL_PROPERTY": null
            }
          }
        ],
        "specified_tags": [
          {
            "type": "text",
            "key": "text",
            "value": "text",
            "properties": {
              "ANY_ADDITIONAL_PROPERTY": null
            }
          }
        ],
        "filtered_raw_permissions": [
          "text"
        ],
        "corresponding_effective_permissions": [
          "text"
        ],
        "single_entity_access_stats": {
          "last_used": "2026-02-05T01:31:06.506Z",
          "last_used_with_events_for": [
            {
              "name": "text",
              "last_used": "2026-02-05T01:31:06.506Z"
            }
          ]
        },
        "additional_node_properties": {
          "role_substitution_recommended_role": "text",
          "role_substitution_reason_for_high_priv_role": "text",
          "role_substitution_error": "text",
          "default_cohort_role_users_in_cohort": [
            "text"
          ],
          "default_cohort_role": "text",
          "default_cohort_role_all_common_roles": [
            "text"
          ],
          "default_cohort_role_error": "text",
          "login_anomaly_detection_stats": [
            {
              "time": "2026-02-05T01:31:06.506Z",
              "login_count": "text",
              "median_login_count": 1,
              "outlier_prediction": 1
            }
          ],
          "outlier_prediction": {
            "prediction": 1,
            "score": 1,
            "contributing_features": [
              {
                "name": "text",
                "value": 1,
                "explanation": "text"
              }
            ]
          },
          "associated_risks": [
            {
              "query_id": "text",
              "suppressed": true,
              "risk_level": 1
            }
          ]
        },
        "integration_type": "text",
        "joined_nodes": {
          "ANY_ADDITIONAL_PROPERTY": {
            "id": "text",
            "type": "text",
            "properties": {},
            "destination_node_count": 1,
            "engagement_access_stats": {
              "engagement_score": 1,
              "over_provisioned_score": 1,
              "total_count": "text",
              "accessed_count": "text"
            },
            "access_stats": {
              "last_used": "2026-02-05T01:31:06.506Z",
              "count": 1,
              "concrete_permissions": [
                "text"
              ],
              "canonical_permissions": [
                "text"
              ]
            },
            "risk_level": 1,
            "raw_permissions": [
              "text"
            ],
            "effective_permissions": [
              "text"
            ],
            "unsupported_conditions": {
              "ANY_ADDITIONAL_PROPERTY": {
                "conditions": [
                  "text"
                ]
              }
            },
            "destination_node_percentage_of_total": 1,
            "tags": [
              {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              }
            ],
            "specified_tags": [
              {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              }
            ],
            "filtered_raw_permissions": [
              "text"
            ],
            "corresponding_effective_permissions": [
              "text"
            ],
            "single_entity_access_stats": {
              "last_used": "2026-02-05T01:31:06.506Z",
              "last_used_with_events_for": [
                {
                  "name": "text",
                  "last_used": "2026-02-05T01:31:06.506Z"
                }
              ]
            },
            "additional_node_properties": {
              "role_substitution_recommended_role": "text",
              "role_substitution_reason_for_high_priv_role": "text",
              "role_substitution_error": "text",
              "default_cohort_role_users_in_cohort": [
                "text"
              ],
              "default_cohort_role": "text",
              "default_cohort_role_all_common_roles": [
                "text"
              ],
              "default_cohort_role_error": "text",
              "login_anomaly_detection_stats": [
                {
                  "time": "2026-02-05T01:31:06.506Z",
                  "login_count": "text",
                  "median_login_count": 1,
                  "outlier_prediction": 1
                }
              ],
              "outlier_prediction": {
                "prediction": 1,
                "score": 1,
                "contributing_features": [
                  {
                    "name": "text",
                    "value": 1,
                    "explanation": "text"
                  }
                ]
              },
              "associated_risks": [
                {
                  "query_id": "text",
                  "suppressed": true,
                  "risk_level": 1
                }
              ]
            },
            "integration_type": "text",
            "joined_nodes": {
              "ANY_ADDITIONAL_PROPERTY": "[Circular Reference]"
            },
            "additional_spec_properties": {}
          }
        },
        "additional_spec_properties": {}
      },
      "additional_spec_properties": {}
    }
  ],
  "approx_total_source_nodes_count": "text",
  "next_page_token": "text",
  "has_more": true
}

POST /api/v1/assessments/query_spec:result HTTP/1.1
Host: your-tenant.vezacloud.com
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 15320

{
  "query_type": 1,
  "source_node_types": {
    "nodes": [
      {
        "node_type": "text",
        "condition_expression": {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            "[Circular Reference]"
          ],
          "operator": 0,
          "not": true
        },
        "node_id": "text",
        "count_condition_expression": {
          "specs": [
            {
              "fn": 1,
              "value": "text",
              "value_as": 1
            }
          ],
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "include_zero_count_results": true
        },
        "direct_relationship_only": true,
        "node_type_grouping_constraint": {
          "node_types": [
            "text"
          ],
          "constraint_type": 1
        },
        "properties_to_get": [
          "text"
        ],
        "tags_to_get": [
          {
            "type": 1,
            "key": "text"
          }
        ],
        "integration_types": [
          "text"
        ]
      }
    ],
    "nodes_operator": 0
  },
  "destination_node_types": {
    "nodes": [
      {
        "node_type": "text",
        "condition_expression": {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            "[Circular Reference]"
          ],
          "operator": 0,
          "not": true
        },
        "node_id": "text",
        "count_condition_expression": {
          "specs": [
            {
              "fn": 1,
              "value": "text",
              "value_as": 1
            }
          ],
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "include_zero_count_results": true
        },
        "direct_relationship_only": true,
        "node_type_grouping_constraint": {
          "node_types": [
            "text"
          ],
          "constraint_type": 1
        },
        "properties_to_get": [
          "text"
        ],
        "tags_to_get": [
          {
            "type": 1,
            "key": "text"
          }
        ],
        "integration_types": [
          "text"
        ]
      }
    ],
    "nodes_operator": 0
  },
  "required_intermediate_node_types": {
    "nodes": [
      {
        "node_type": "text",
        "condition_expression": {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            "[Circular Reference]"
          ],
          "operator": 0,
          "not": true
        },
        "node_id": "text",
        "count_condition_expression": {
          "specs": [
            {
              "fn": 1,
              "value": "text",
              "value_as": 1
            }
          ],
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "include_zero_count_results": true
        },
        "direct_relationship_only": true,
        "node_type_grouping_constraint": {
          "node_types": [
            "text"
          ],
          "constraint_type": 1
        },
        "properties_to_get": [
          "text"
        ],
        "tags_to_get": [
          {
            "type": 1,
            "key": "text"
          }
        ],
        "integration_types": [
          "text"
        ]
      }
    ],
    "nodes_operator": 0
  },
  "avoided_intermediate_node_types": {
    "nodes": [
      {
        "node_type": "text",
        "condition_expression": {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            "[Circular Reference]"
          ],
          "operator": 0,
          "not": true
        },
        "node_id": "text",
        "count_condition_expression": {
          "specs": [
            {
              "fn": 1,
              "value": "text",
              "value_as": 1
            }
          ],
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "include_zero_count_results": true
        },
        "direct_relationship_only": true,
        "node_type_grouping_constraint": {
          "node_types": [
            "text"
          ],
          "constraint_type": 1
        },
        "properties_to_get": [
          "text"
        ],
        "tags_to_get": [
          {
            "type": 1,
            "key": "text"
          }
        ],
        "integration_types": [
          "text"
        ]
      }
    ],
    "nodes_operator": 0
  },
  "raw_permissions": {
    "values": [
      "text"
    ],
    "operator": 1
  },
  "effective_permissions": {
    "values": [
      1
    ],
    "operator": 1
  },
  "customized_variables": [
    {
      "key": "text",
      "value": "text"
    }
  ],
  "snapshot_id": "text",
  "access_filter": {
    "engagement_score": {
      "op": 1,
      "value": 1
    },
    "over_provisioned_score": {
      "op": 1,
      "value": 1
    },
    "include_secondary_grantee": true,
    "include_indirect_resource": true,
    "exclude_indirect_grantee": true,
    "anomaly_detection_history_days": "text",
    "last_used": {
      "op": 1,
      "value": "2026-02-05T01:31:06.506Z",
      "target": 1,
      "relative_timevar_value": "text"
    }
  },
  "node_relationship_type": 1,
  "relates_to_exp": {
    "specs": [
      {
        "node_types": {
          "nodes": "[Circular Reference]",
          "nodes_operator": 0
        },
        "required_intermediate_node_types": {
          "nodes": "[Circular Reference]",
          "nodes_operator": 0
        },
        "avoided_intermediate_node_types": {
          "nodes": "[Circular Reference]",
          "nodes_operator": 0
        },
        "raw_permissions": {
          "values": [
            "text"
          ],
          "operator": 1
        },
        "effective_permissions": {
          "values": [
            1
          ],
          "operator": 1
        },
        "unsupported_condition_mode": 1,
        "no_relation": true,
        "direction": 1,
        "path_type": 1
      }
    ],
    "child_expressions": [
      {
        "specs": [
          {
            "node_types": {
              "nodes": "[Circular Reference]",
              "nodes_operator": 0
            },
            "required_intermediate_node_types": {
              "nodes": "[Circular Reference]",
              "nodes_operator": 0
            },
            "avoided_intermediate_node_types": {
              "nodes": "[Circular Reference]",
              "nodes_operator": 0
            },
            "raw_permissions": {
              "values": [
                "text"
              ],
              "operator": 1
            },
            "effective_permissions": {
              "values": [
                1
              ],
              "operator": 1
            },
            "unsupported_condition_mode": 1,
            "no_relation": true,
            "direction": 1,
            "path_type": 1
          }
        ],
        "child_expressions": [
          "[Circular Reference]"
        ],
        "operator": 1,
        "not": true,
        "and_op_type": 1
      }
    ],
    "operator": 1,
    "not": true,
    "and_op_type": 1
  },
  "path_summary_node_types": {
    "nodes": [
      {
        "node_type": "text",
        "condition_expression": {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            "[Circular Reference]"
          ],
          "operator": 0,
          "not": true
        },
        "node_id": "text",
        "count_condition_expression": {
          "specs": [
            {
              "fn": 1,
              "value": "text",
              "value_as": 1
            }
          ],
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "include_zero_count_results": true
        },
        "direct_relationship_only": true,
        "node_type_grouping_constraint": {
          "node_types": [
            "text"
          ],
          "constraint_type": 1
        },
        "properties_to_get": [
          "text"
        ],
        "tags_to_get": [
          {
            "type": 1,
            "key": "text"
          }
        ],
        "integration_types": [
          "text"
        ]
      }
    ],
    "nodes_operator": 0
  },
  "all_entity_condition": {
    "specs": [
      {
        "fn": 0,
        "property": "email",
        "value": null,
        "not": false,
        "value_property_name": "text",
        "value_property_from_other_node": true,
        "source_property": "text"
      }
    ],
    "tag_specs": [
      {
        "tag": {
          "type": "text",
          "key": "text",
          "value": "text",
          "properties": {
            "ANY_ADDITIONAL_PROPERTY": null
          }
        },
        "exclude": true,
        "fn": 1,
        "source_query_id": "text",
        "source_tag_key": "text"
      }
    ],
    "child_expressions": [
      {
        "specs": [
          {
            "fn": 0,
            "property": "email",
            "value": null,
            "not": false,
            "value_property_name": "text",
            "value_property_from_other_node": true,
            "source_property": "text"
          }
        ],
        "tag_specs": [
          {
            "tag": {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            },
            "exclude": true,
            "fn": 1,
            "source_query_id": "text",
            "source_tag_key": "text"
          }
        ],
        "child_expressions": [
          {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          }
        ],
        "operator": 0,
        "not": true
      }
    ],
    "operator": 0,
    "not": true
  },
  "path_summary_count_conditions": {
    "conditions": [
      {
        "fn": 1,
        "value": "text",
        "value_as": 1
      }
    ]
  },
  "result_value_type": 1,
  "include_all_source_tags_in_results": true,
  "include_all_destination_tags_in_results": true,
  "additional_columns_to_get": [
    1
  ],
  "result_enrichment": {
    "join_node_specs": [
      {
        "with": "text",
        "node_spec": {
          "node_type": "text",
          "condition_expression": {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": [
              "[Circular Reference]"
            ],
            "operator": 0,
            "not": true
          },
          "node_id": "text",
          "count_condition_expression": {
            "specs": [
              {
                "fn": 1,
                "value": "text",
                "value_as": 1
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 1,
            "not": true,
            "include_zero_count_results": true
          },
          "direct_relationship_only": true,
          "node_type_grouping_constraint": {
            "node_types": [
              "text"
            ],
            "constraint_type": 1
          },
          "properties_to_get": [
            "text"
          ],
          "tags_to_get": [
            {
              "type": 1,
              "key": "text"
            }
          ],
          "integration_types": [
            "text"
          ]
        },
        "as": "text"
      }
    ],
    "outlier_detection": {
      "type": 1,
      "manager_centric_config": {
        "grouping_properties": [
          {
            "property_name": "text",
            "node_type": "text",
            "target": 1,
            "joined_node_alias": "text"
          }
        ],
        "threshold": 1
      }
    },
    "include_associated_risks": true,
    "risks_filter": "text"
  },
  "include_sub_permissions": true,
  "include_permissions_summary": true,
  "waypoint_nodes": {
    "nodes": [
      {
        "node_type": "text",
        "condition_expression": {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            "[Circular Reference]"
          ],
          "operator": 0,
          "not": true
        },
        "node_id": "text",
        "count_condition_expression": {
          "specs": [
            {
              "fn": 1,
              "value": "text",
              "value_as": 1
            }
          ],
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "include_zero_count_results": true
        },
        "direct_relationship_only": true,
        "node_type_grouping_constraint": {
          "node_types": [
            "text"
          ],
          "constraint_type": 1
        },
        "properties_to_get": [
          "text"
        ],
        "tags_to_get": [
          {
            "type": 1,
            "key": "text"
          }
        ],
        "integration_types": [
          "text"
        ]
      }
    ],
    "nodes_operator": 0
  },
  "unpivot_properties": [
    "text"
  ],
  "union_specs": [
    {
      "query_type": 1,
      "source_node_types": {
        "nodes": [
          {
            "node_type": "text",
            "condition_expression": {
              "specs": [
                {
                  "fn": 0,
                  "property": "email",
                  "value": null,
                  "not": false,
                  "value_property_name": "text",
                  "value_property_from_other_node": true,
                  "source_property": "text"
                }
              ],
              "tag_specs": [
                {
                  "tag": {
                    "type": "text",
                    "key": "text",
                    "value": "text",
                    "properties": {
                      "ANY_ADDITIONAL_PROPERTY": null
                    }
                  },
                  "exclude": true,
                  "fn": 1,
                  "source_query_id": "text",
                  "source_tag_key": "text"
                }
              ],
              "child_expressions": [
                "[Circular Reference]"
              ],
              "operator": 0,
              "not": true
            },
            "node_id": "text",
            "count_condition_expression": {
              "specs": [
                {
                  "fn": 1,
                  "value": "text",
                  "value_as": 1
                }
              ],
              "child_expressions": "[Circular Reference]",
              "operator": 1,
              "not": true,
              "include_zero_count_results": true
            },
            "direct_relationship_only": true,
            "node_type_grouping_constraint": {
              "node_types": [
                "text"
              ],
              "constraint_type": 1
            },
            "properties_to_get": [
              "text"
            ],
            "tags_to_get": [
              {
                "type": 1,
                "key": "text"
              }
            ],
            "integration_types": [
              "text"
            ]
          }
        ],
        "nodes_operator": 0
      },
      "customized_variables": [
        {
          "key": "text",
          "value": "text"
        }
      ],
      "access_filter": {
        "engagement_score": {
          "op": 1,
          "value": 1
        },
        "over_provisioned_score": {
          "op": 1,
          "value": 1
        },
        "include_secondary_grantee": true,
        "include_indirect_resource": true,
        "exclude_indirect_grantee": true,
        "anomaly_detection_history_days": "text",
        "last_used": {
          "op": 1,
          "value": "2026-02-05T01:31:06.506Z",
          "target": 1,
          "relative_timevar_value": "text"
        }
      },
      "node_relationship_type": 1,
      "relates_to_exp": {
        "specs": [
          {
            "node_types": {
              "nodes": "[Circular Reference]",
              "nodes_operator": 0
            },
            "required_intermediate_node_types": {
              "nodes": "[Circular Reference]",
              "nodes_operator": 0
            },
            "avoided_intermediate_node_types": {
              "nodes": "[Circular Reference]",
              "nodes_operator": 0
            },
            "raw_permissions": {
              "values": [
                "text"
              ],
              "operator": 1
            },
            "effective_permissions": {
              "values": [
                1
              ],
              "operator": 1
            },
            "unsupported_condition_mode": 1,
            "no_relation": true,
            "direction": 1,
            "path_type": 1
          }
        ],
        "child_expressions": [
          {
            "specs": [
              {
                "node_types": {
                  "nodes": "[Circular Reference]",
                  "nodes_operator": 0
                },
                "required_intermediate_node_types": {
                  "nodes": "[Circular Reference]",
                  "nodes_operator": 0
                },
                "avoided_intermediate_node_types": {
                  "nodes": "[Circular Reference]",
                  "nodes_operator": 0
                },
                "raw_permissions": {
                  "values": [
                    "text"
                  ],
                  "operator": 1
                },
                "effective_permissions": {
                  "values": [
                    1
                  ],
                  "operator": 1
                },
                "unsupported_condition_mode": 1,
                "no_relation": true,
                "direction": 1,
                "path_type": 1
              }
            ],
            "child_expressions": [
              "[Circular Reference]"
            ],
            "operator": 1,
            "not": true,
            "and_op_type": 1
          }
        ],
        "operator": 1,
        "not": true,
        "and_op_type": 1
      },
      "path_summary_node_types": {
        "nodes": [
          {
            "node_type": "text",
            "condition_expression": {
              "specs": [
                {
                  "fn": 0,
                  "property": "email",
                  "value": null,
                  "not": false,
                  "value_property_name": "text",
                  "value_property_from_other_node": true,
                  "source_property": "text"
                }
              ],
              "tag_specs": [
                {
                  "tag": {
                    "type": "text",
                    "key": "text",
                    "value": "text",
                    "properties": {
                      "ANY_ADDITIONAL_PROPERTY": null
                    }
                  },
                  "exclude": true,
                  "fn": 1,
                  "source_query_id": "text",
                  "source_tag_key": "text"
                }
              ],
              "child_expressions": [
                "[Circular Reference]"
              ],
              "operator": 0,
              "not": true
            },
            "node_id": "text",
            "count_condition_expression": {
              "specs": [
                {
                  "fn": 1,
                  "value": "text",
                  "value_as": 1
                }
              ],
              "child_expressions": "[Circular Reference]",
              "operator": 1,
              "not": true,
              "include_zero_count_results": true
            },
            "direct_relationship_only": true,
            "node_type_grouping_constraint": {
              "node_types": [
                "text"
              ],
              "constraint_type": 1
            },
            "properties_to_get": [
              "text"
            ],
            "tags_to_get": [
              {
                "type": 1,
                "key": "text"
              }
            ],
            "integration_types": [
              "text"
            ]
          }
        ],
        "nodes_operator": 0
      },
      "all_entity_condition": {
        "specs": [
          {
            "fn": 0,
            "property": "email",
            "value": null,
            "not": false,
            "value_property_name": "text",
            "value_property_from_other_node": true,
            "source_property": "text"
          }
        ],
        "tag_specs": [
          {
            "tag": {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            },
            "exclude": true,
            "fn": 1,
            "source_query_id": "text",
            "source_tag_key": "text"
          }
        ],
        "child_expressions": [
          {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": [
              {
                "specs": [
                  {
                    "fn": 0,
                    "property": "email",
                    "value": null,
                    "not": false,
                    "value_property_name": "text",
                    "value_property_from_other_node": true,
                    "source_property": "text"
                  }
                ],
                "tag_specs": [
                  {
                    "tag": {
                      "type": "text",
                      "key": "text",
                      "value": "text",
                      "properties": {
                        "ANY_ADDITIONAL_PROPERTY": null
                      }
                    },
                    "exclude": true,
                    "fn": 1,
                    "source_query_id": "text",
                    "source_tag_key": "text"
                  }
                ],
                "child_expressions": "[Circular Reference]",
                "operator": 0,
                "not": true
              }
            ],
            "operator": 0,
            "not": true
          }
        ],
        "operator": 0,
        "not": true
      },
      "path_summary_count_conditions": {
        "conditions": [
          {
            "fn": 1,
            "value": "text",
            "value_as": 1
          }
        ]
      },
      "waypoint_nodes": {
        "nodes": [
          {
            "node_type": "text",
            "condition_expression": {
              "specs": [
                {
                  "fn": 0,
                  "property": "email",
                  "value": null,
                  "not": false,
                  "value_property_name": "text",
                  "value_property_from_other_node": true,
                  "source_property": "text"
                }
              ],
              "tag_specs": [
                {
                  "tag": {
                    "type": "text",
                    "key": "text",
                    "value": "text",
                    "properties": {
                      "ANY_ADDITIONAL_PROPERTY": null
                    }
                  },
                  "exclude": true,
                  "fn": 1,
                  "source_query_id": "text",
                  "source_tag_key": "text"
                }
              ],
              "child_expressions": [
                "[Circular Reference]"
              ],
              "operator": 0,
              "not": true
            },
            "node_id": "text",
            "count_condition_expression": {
              "specs": [
                {
                  "fn": 1,
                  "value": "text",
                  "value_as": 1
                }
              ],
              "child_expressions": "[Circular Reference]",
              "operator": 1,
              "not": true,
              "include_zero_count_results": true
            },
            "direct_relationship_only": true,
            "node_type_grouping_constraint": {
              "node_types": [
                "text"
              ],
              "constraint_type": 1
            },
            "properties_to_get": [
              "text"
            ],
            "tags_to_get": [
              {
                "type": 1,
                "key": "text"
              }
            ],
            "integration_types": [
              "text"
            ]
          }
        ],
        "nodes_operator": 0
      },
      "additional_spec_properties": {}
    }
  ],
  "page_size": "text",
  "page_token": "text"
}

{
  "values": [
    {
      "id": "arn:aws:s3:::aws-cloudtrail-logs-877042069677-a35f269d",
      "type": "S3Bucket",
      "properties": {
        "allows_acls": true,
        "aws_account_id": "877042069677",
        "block_public_access_enabled": true,
        "block_public_acls": true,
        "block_public_policy": true,
        "created_at": "2022-02-07T20:33:19Z",
        "datasource_id": "877042069677:s3",
        "default_encryption_enabled": true,
        "default_retention_mode": "DISABLED",
        "hosts_website": false,
        "ignore_public_acls": true,
        "name": "aws-cloudtrail-logs-877042069677-a35f269d",
        "object_lock_enabled": false,
        "object_ownership_controls": "ObjectWriter",
        "provider_id": "877042069677",
        "region": "us-east-1",
        "replication_rules_count": 0,
        "request_payer": "BucketOwner",
        "restrict_public_buckets": true,
        "server_access_logs_enabled": false
      },
      "destination_node_count": 0,
      "permissions": [
        {
          "id": "arn:aws:iam::877042069677:user/j.smith::eperm::877042069677/S3Bucket/9e5c59f46ddc58231c08bc23534d1a83c0bffe87",
          "type": "AwsIamEffectivePermission",
          "properties": {
            "aws_account_id": "877042069677",
            "datasource_id": "877042069677::eperm::877042069677:s3",
            "name": "Create,Write,Delete,Read,Metadata,NonData",
            "permissions": [
              "s3:AbortMultipartUpload",
              "s3:BypassGovernanceRetention",
              "s3:DeleteBucket",
              "s3:DeleteBucketPolicy",
              "s3:DeleteBucketWebsite",
              "s3:DeleteObject",
              "s3:DeleteObjectTagging",
              "s3:DeleteObjectVersion",
              "s3:DeleteObjectVersionTagging",
              "s3:GetAccelerateConfiguration",
              "s3:GetAnalyticsConfiguration",
              "s3:GetBucketAcl",
              "s3:GetBucketCORS",
              "s3:GetBucketLocation",
              "s3:GetBucketLogging",
              "s3:GetBucketNotification",
              "s3:GetBucketObjectLockConfiguration",
              "s3:GetBucketPolicy",
              "s3:GetBucketPolicyStatus",
              "s3:GetBucketPublicAccessBlock",
              "s3:GetBucketRequestPayment",
              "s3:GetBucketTagging",
              "s3:GetBucketVersioning",
              "s3:GetBucketWebsite",
              "s3:GetEncryptionConfiguration",
              "s3:GetInventoryConfiguration",
              "s3:GetLifecycleConfiguration",
              "s3:GetMetricsConfiguration",
              "s3:GetObject",
              "s3:GetObjectAcl",
              "s3:GetObjectLegalHold",
              "s3:GetObjectRetention",
              "s3:GetObjectTagging",
              "s3:GetObjectTorrent",
              "s3:GetObjectVersion",
              "s3:GetObjectVersionAcl",
              "s3:GetObjectVersionForReplication",
              "s3:GetObjectVersionTagging",
              "s3:GetObjectVersionTorrent",
              "s3:GetReplicationConfiguration",
              "s3:ListBucket",
              "s3:ListBucketMultipartUploads",
              "s3:ListBucketVersions",
              "s3:ListMultipartUploadParts",
              "s3:ObjectOwnerOverrideToBucketOwner",
              "s3:PutAccelerateConfiguration",
              "s3:PutAnalyticsConfiguration",
              "s3:PutBucketAcl",
              "s3:PutBucketCORS",
              "s3:PutBucketLogging",
              "s3:PutBucketNotification",
              "s3:PutBucketObjectLockConfiguration",
              "s3:PutBucketPolicy",
              "s3:PutBucketPublicAccessBlock",
              "s3:PutBucketRequestPayment",
              "s3:PutBucketTagging",
              "s3:PutBucketVersioning",
              "s3:PutBucketWebsite",
              "s3:PutEncryptionConfiguration",
              "s3:PutInventoryConfiguration",
              "s3:PutLifecycleConfiguration",
              "s3:PutMetricsConfiguration",
              "s3:PutObject",
              "s3:PutObjectAcl",
              "s3:PutObjectLegalHold",
              "s3:PutObjectRetention",
              "s3:PutObjectTagging",
              "s3:PutObjectVersionAcl",
              "s3:PutObjectVersionTagging",
              "s3:ReplicateDelete",
              "s3:ReplicateObject",
              "s3:ReplicateTags",
              "s3:RestoreObject"
            ],
            "provider_id": "877042069677"
          },
          "destination_node_count": 0,
          "permissions": [],
          "engagement_access_stats": null,
          "access_stats": null,
          "destination_node_ids": [],
          "risk_level": "NONE",
          "raw_permissions": [],
          "effective_permissions": []
        }
      ],
      "engagement_access_stats": null,
      "access_stats": null,
      "destination_node_ids": [],
      "risk_level": "NONE",
      "raw_permissions": [
        "s3:AbortMultipartUpload",
        "s3:BypassGovernanceRetention",
        "s3:DeleteBucket",
        "s3:DeleteBucketPolicy",
        "s3:DeleteBucketWebsite",
        "s3:DeleteObject",
        "s3:DeleteObjectTagging",
        "s3:DeleteObjectVersion",
        "s3:DeleteObjectVersionTagging",
        "s3:GetAccelerateConfiguration",
        "s3:GetAnalyticsConfiguration",
        "s3:GetBucketAcl",
        "s3:GetBucketCORS",
        "s3:GetBucketLocation",
        "s3:GetBucketLogging",
        "s3:GetBucketNotification",
        "s3:GetBucketObjectLockConfiguration",
        "s3:GetBucketPolicy",
        "s3:GetBucketPolicyStatus",
        "s3:GetBucketPublicAccessBlock",
        "s3:GetBucketRequestPayment",
        "s3:GetBucketTagging",
        "s3:GetBucketVersioning",
        "s3:GetBucketWebsite",
        "s3:GetEncryptionConfiguration",
        "s3:GetInventoryConfiguration",
        "s3:GetLifecycleConfiguration",
        "s3:GetMetricsConfiguration",
        "s3:GetObject",
        "s3:GetObjectAcl",
        "s3:GetObjectLegalHold",
        "s3:GetObjectRetention",
        "s3:GetObjectTagging",
        "s3:GetObjectTorrent",
        "s3:GetObjectVersion",
        "s3:GetObjectVersionAcl",
        "s3:GetObjectVersionForReplication",
        "s3:GetObjectVersionTagging",
        "s3:GetObjectVersionTorrent",
        "s3:GetReplicationConfiguration",
        "s3:ListBucket",
        "s3:ListBucketMultipartUploads",
        "s3:ListBucketVersions",
        "s3:ListMultipartUploadParts",
        "s3:ObjectOwnerOverrideToBucketOwner",
        "s3:PutAccelerateConfiguration",
        "s3:PutAnalyticsConfiguration",
        "s3:PutBucketAcl",
        "s3:PutBucketCORS",
        "s3:PutBucketLogging",
        "s3:PutBucketNotification",
        "s3:PutBucketObjectLockConfiguration",
        "s3:PutBucketPolicy",
        "s3:PutBucketPublicAccessBlock",
        "s3:PutBucketRequestPayment",
        "s3:PutBucketTagging",
        "s3:PutBucketVersioning",
        "s3:PutBucketWebsite",
        "s3:PutEncryptionConfiguration",
        "s3:PutInventoryConfiguration",
        "s3:PutLifecycleConfiguration",
        "s3:PutMetricsConfiguration",
        "s3:PutObject",
        "s3:PutObjectAcl",
        "s3:PutObjectLegalHold",
        "s3:PutObjectRetention",
        "s3:PutObjectTagging",
        "s3:PutObjectVersionAcl",
        "s3:PutObjectVersionTagging",
        "s3:ReplicateDelete",
        "s3:ReplicateObject",
        "s3:ReplicateTags",
        "s3:RestoreObject"
      ],
      "effective_permissions": [
        "Create",
        "Delete",
        "Metadata",
        "NonData",
        "Read",
        "Write"
      ]
    }
  ],
  "path_values": [],
  "next_page_token": "",
  "has_more": false
}

{
  "values": [
    {
      "id": "text",
      "name": "text",
      "description": "text",
      "result_type": 0,
      "query_type": 1,
      "raw_permissions": {
        "values": [
          "text"
        ],
        "operator": 1
      },
      "effective_permissions": {
        "values": [
          1
        ],
        "operator": 1
      },
      "variables": [
        "text"
      ],
      "source_node_types": {
        "nodes": [
          {
            "node_type": "text",
            "condition_expression": "[Circular Reference]",
            "node_id": "text",
            "count_condition_expression": "[Circular Reference]",
            "direct_relationship_only": true,
            "node_type_grouping_constraint": {
              "node_types": [
                "text"
              ],
              "constraint_type": 1
            },
            "properties_to_get": [
              "text"
            ],
            "tags_to_get": [
              {
                "type": 1,
                "key": "text"
              }
            ],
            "integration_types": [
              "text"
            ]
          }
        ],
        "nodes_operator": 0
      },
      "required_intermediate_node_types": {
        "nodes": [
          {
            "node_type": "text",
            "condition_expression": "[Circular Reference]",
            "node_id": "text",
            "count_condition_expression": "[Circular Reference]",
            "direct_relationship_only": true,
            "node_type_grouping_constraint": {
              "node_types": [
                "text"
              ],
              "constraint_type": 1
            },
            "properties_to_get": [
              "text"
            ],
            "tags_to_get": [
              {
                "type": 1,
                "key": "text"
              }
            ],
            "integration_types": [
              "text"
            ]
          }
        ],
        "nodes_operator": 0
      },
      "avoided_intermediate_node_types": {
        "nodes": [
          {
            "node_type": "text",
            "condition_expression": "[Circular Reference]",
            "node_id": "text",
            "count_condition_expression": "[Circular Reference]",
            "direct_relationship_only": true,
            "node_type_grouping_constraint": {
              "node_types": [
                "text"
              ],
              "constraint_type": 1
            },
            "properties_to_get": [
              "text"
            ],
            "tags_to_get": [
              {
                "type": 1,
                "key": "text"
              }
            ],
            "integration_types": [
              "text"
            ]
          }
        ],
        "nodes_operator": 0
      },
      "destination_node_types": {
        "nodes": [
          {
            "node_type": "text",
            "condition_expression": "[Circular Reference]",
            "node_id": "text",
            "count_condition_expression": "[Circular Reference]",
            "direct_relationship_only": true,
            "node_type_grouping_constraint": {
              "node_types": [
                "text"
              ],
              "constraint_type": 1
            },
            "properties_to_get": [
              "text"
            ],
            "tags_to_get": [
              {
                "type": 1,
                "key": "text"
              }
            ],
            "integration_types": [
              "text"
            ]
          }
        ],
        "nodes_operator": 0
      },
      "access_filter": {
        "engagement_score": {
          "op": 1,
          "value": 1
        },
        "over_provisioned_score": {
          "op": 1,
          "value": 1
        },
        "include_secondary_grantee": true,
        "include_indirect_resource": true,
        "exclude_indirect_grantee": true,
        "anomaly_detection_history_days": "text",
        "last_used": {
          "op": 1,
          "value": "2026-02-05T01:31:06.506Z",
          "target": 1,
          "relative_timevar_value": "text"
        }
      },
      "created_by": "text",
      "visibility": 1,
      "owners": [
        "text"
      ],
      "node_relationship_type": 0,
      "integration_types": [
        "text"
      ],
      "labels": [
        "text"
      ],
      "created_at": "2026-02-05T01:31:06.506Z",
      "updated_at": "2026-02-05T01:31:06.506Z",
      "source_type": "text",
      "destination_types": [
        "text"
      ],
      "relates_to_exp": {
        "specs": [
          "[Circular Reference]"
        ],
        "child_expressions": [
          "[Circular Reference]"
        ],
        "operator": 1,
        "not": true,
        "and_op_type": 1
      },
      "all_entity_condition": {
        "specs": [
          {
            "fn": 0,
            "property": "email",
            "value": null,
            "not": false,
            "value_property_name": "text",
            "value_property_from_other_node": true,
            "source_property": "text"
          }
        ],
        "tag_specs": [
          {
            "tag": {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            },
            "exclude": true,
            "fn": 1,
            "source_query_id": "text",
            "source_tag_key": "text"
          }
        ],
        "child_expressions": [
          {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          }
        ],
        "operator": 0,
        "not": true
      },
      "path_summary_node_types": {
        "nodes": [
          {
            "node_type": "text",
            "condition_expression": "[Circular Reference]",
            "node_id": "text",
            "count_condition_expression": "[Circular Reference]",
            "direct_relationship_only": true,
            "node_type_grouping_constraint": {
              "node_types": [
                "text"
              ],
              "constraint_type": 1
            },
            "properties_to_get": [
              "text"
            ],
            "tags_to_get": [
              {
                "type": 1,
                "key": "text"
              }
            ],
            "integration_types": [
              "text"
            ]
          }
        ],
        "nodes_operator": 0
      },
      "path_summary_count_conditions": {
        "conditions": [
          {
            "fn": 1,
            "value": "text",
            "value_as": 1
          }
        ]
      },
      "risk_level": 0,
      "risk_suppressed_constraints": {
        "nodes": [
          "[Circular Reference]"
        ]
      },
      "analysis_type": 1,
      "result": 1,
      "result_evaluated_at": "2026-02-05T01:31:06.506Z",
      "result_evaluated": true,
      "risk_explanation": "text",
      "risk_remediation": "text",
      "updated_by": "text",
      "natural_language": "text",
      "result_enrichment": {
        "join_node_specs": [
          {
            "with": "text",
            "node_spec": "[Circular Reference]",
            "as": "text"
          }
        ],
        "outlier_detection": {
          "type": 1,
          "manager_centric_config": {
            "grouping_properties": [
              {
                "property_name": "text",
                "node_type": "text",
                "target": 1,
                "joined_node_alias": "text"
              }
            ],
            "threshold": 1
          }
        },
        "include_associated_risks": true,
        "risks_filter": "text"
      },
      "change_source": 1,
      "uneditable": true,
      "approx_total_source_nodes_count": "text",
      "include_sub_permissions": true,
      "save_mode": 1,
      "vql_query": "text",
      "source_type_integration": "text",
      "shared": true,
      "team_id": "text",
      "include_permissions_summary": true,
      "risk_statistics": {
        "affected_node_count": "text",
        "suppressed_node_count": "text",
        "last_occurred_at": "2026-02-05T01:31:06.506Z",
        "status": 1
      },
      "risk_profiles": [
        0
      ],
      "internal_id": "text",
      "waypoint_nodes": {
        "nodes": [
          {
            "node_type": "text",
            "condition_expression": "[Circular Reference]",
            "node_id": "text",
            "count_condition_expression": "[Circular Reference]",
            "direct_relationship_only": true,
            "node_type_grouping_constraint": {
              "node_types": [
                "text"
              ],
              "constraint_type": 1
            },
            "properties_to_get": [
              "text"
            ],
            "tags_to_get": [
              {
                "type": 1,
                "key": "text"
              }
            ],
            "integration_types": [
              "text"
            ]
          }
        ],
        "nodes_operator": 0
      },
      "optional": true,
      "union_specs": [
        {
          "query_type": 1,
          "source_node_types": {
            "nodes": "[Circular Reference]",
            "nodes_operator": 0
          },
          "customized_variables": [
            {
              "key": "text",
              "value": "text"
            }
          ],
          "access_filter": {
            "engagement_score": {
              "op": 1,
              "value": 1
            },
            "over_provisioned_score": {
              "op": 1,
              "value": 1
            },
            "include_secondary_grantee": true,
            "include_indirect_resource": true,
            "exclude_indirect_grantee": true,
            "anomaly_detection_history_days": "text",
            "last_used": {
              "op": 1,
              "value": "2026-02-05T01:31:06.506Z",
              "target": 1,
              "relative_timevar_value": "text"
            }
          },
          "node_relationship_type": 1,
          "relates_to_exp": "[Circular Reference]",
          "path_summary_node_types": {
            "nodes": "[Circular Reference]",
            "nodes_operator": 0
          },
          "all_entity_condition": {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          },
          "path_summary_count_conditions": {
            "conditions": [
              {
                "fn": 1,
                "value": "text",
                "value_as": 1
              }
            ]
          },
          "waypoint_nodes": {
            "nodes": "[Circular Reference]",
            "nodes_operator": 0
          },
          "additional_spec_properties": {}
        }
      ]
    }
  ],
  "next_page_token": "text",
  "has_more": true
}

{
  "values": [
    {
      "id": "text",
      "type": "text",
      "properties": {},
      "destination_node_count": 1,
      "engagement_access_stats": {
        "engagement_score": 1,
        "over_provisioned_score": 1,
        "total_count": "text",
        "accessed_count": "text"
      },
      "access_stats": {
        "last_used": "2026-02-05T01:31:06.506Z",
        "count": 1,
        "concrete_permissions": [
          "text"
        ],
        "canonical_permissions": [
          "text"
        ]
      },
      "risk_level": 1,
      "raw_permissions": [
        "text"
      ],
      "effective_permissions": [
        "text"
      ],
      "unsupported_conditions": {
        "ANY_ADDITIONAL_PROPERTY": {
          "conditions": [
            "text"
          ]
        }
      },
      "destination_node_percentage_of_total": 1,
      "tags": [
        {
          "type": "text",
          "key": "text",
          "value": "text",
          "properties": {
            "ANY_ADDITIONAL_PROPERTY": null
          }
        }
      ],
      "specified_tags": [
        {
          "type": "text",
          "key": "text",
          "value": "text",
          "properties": {
            "ANY_ADDITIONAL_PROPERTY": null
          }
        }
      ],
      "filtered_raw_permissions": [
        "text"
      ],
      "corresponding_effective_permissions": [
        "text"
      ],
      "single_entity_access_stats": {
        "last_used": "2026-02-05T01:31:06.506Z",
        "last_used_with_events_for": [
          {
            "name": "text",
            "last_used": "2026-02-05T01:31:06.506Z"
          }
        ]
      },
      "additional_node_properties": {
        "role_substitution_recommended_role": "text",
        "role_substitution_reason_for_high_priv_role": "text",
        "role_substitution_error": "text",
        "default_cohort_role_users_in_cohort": [
          "text"
        ],
        "default_cohort_role": "text",
        "default_cohort_role_all_common_roles": [
          "text"
        ],
        "default_cohort_role_error": "text",
        "login_anomaly_detection_stats": [
          {
            "time": "2026-02-05T01:31:06.506Z",
            "login_count": "text",
            "median_login_count": 1,
            "outlier_prediction": 1
          }
        ],
        "outlier_prediction": {
          "prediction": 1,
          "score": 1,
          "contributing_features": [
            {
              "name": "text",
              "value": 1,
              "explanation": "text"
            }
          ]
        },
        "associated_risks": [
          {
            "query_id": "text",
            "suppressed": true,
            "risk_level": 1
          }
        ]
      },
      "integration_type": "text",
      "joined_nodes": {
        "ANY_ADDITIONAL_PROPERTY": {
          "id": "text",
          "type": "text",
          "properties": {},
          "destination_node_count": 1,
          "engagement_access_stats": {
            "engagement_score": 1,
            "over_provisioned_score": 1,
            "total_count": "text",
            "accessed_count": "text"
          },
          "access_stats": {
            "last_used": "2026-02-05T01:31:06.506Z",
            "count": 1,
            "concrete_permissions": [
              "text"
            ],
            "canonical_permissions": [
              "text"
            ]
          },
          "risk_level": 1,
          "raw_permissions": [
            "text"
          ],
          "effective_permissions": [
            "text"
          ],
          "unsupported_conditions": {
            "ANY_ADDITIONAL_PROPERTY": {
              "conditions": [
                "text"
              ]
            }
          },
          "destination_node_percentage_of_total": 1,
          "tags": [
            {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            }
          ],
          "specified_tags": [
            {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            }
          ],
          "filtered_raw_permissions": [
            "text"
          ],
          "corresponding_effective_permissions": [
            "text"
          ],
          "single_entity_access_stats": {
            "last_used": "2026-02-05T01:31:06.506Z",
            "last_used_with_events_for": [
              {
                "name": "text",
                "last_used": "2026-02-05T01:31:06.506Z"
              }
            ]
          },
          "additional_node_properties": {
            "role_substitution_recommended_role": "text",
            "role_substitution_reason_for_high_priv_role": "text",
            "role_substitution_error": "text",
            "default_cohort_role_users_in_cohort": [
              "text"
            ],
            "default_cohort_role": "text",
            "default_cohort_role_all_common_roles": [
              "text"
            ],
            "default_cohort_role_error": "text",
            "login_anomaly_detection_stats": [
              {
                "time": "2026-02-05T01:31:06.506Z",
                "login_count": "text",
                "median_login_count": 1,
                "outlier_prediction": 1
              }
            ],
            "outlier_prediction": {
              "prediction": 1,
              "score": 1,
              "contributing_features": [
                {
                  "name": "text",
                  "value": 1,
                  "explanation": "text"
                }
              ]
            },
            "associated_risks": [
              {
                "query_id": "text",
                "suppressed": true,
                "risk_level": 1
              }
            ]
          },
          "integration_type": "text",
          "joined_nodes": {
            "ANY_ADDITIONAL_PROPERTY": "[Circular Reference]"
          },
          "additional_spec_properties": {}
        }
      },
      "additional_spec_properties": {}
    }
  ],
  "path_values": [
    {
      "source": {
        "id": "text",
        "type": "text",
        "properties": {},
        "destination_node_count": 1,
        "engagement_access_stats": {
          "engagement_score": 1,
          "over_provisioned_score": 1,
          "total_count": "text",
          "accessed_count": "text"
        },
        "access_stats": {
          "last_used": "2026-02-05T01:31:06.506Z",
          "count": 1,
          "concrete_permissions": [
            "text"
          ],
          "canonical_permissions": [
            "text"
          ]
        },
        "risk_level": 1,
        "raw_permissions": [
          "text"
        ],
        "effective_permissions": [
          "text"
        ],
        "unsupported_conditions": {
          "ANY_ADDITIONAL_PROPERTY": {
            "conditions": [
              "text"
            ]
          }
        },
        "destination_node_percentage_of_total": 1,
        "tags": [
          {
            "type": "text",
            "key": "text",
            "value": "text",
            "properties": {
              "ANY_ADDITIONAL_PROPERTY": null
            }
          }
        ],
        "specified_tags": [
          {
            "type": "text",
            "key": "text",
            "value": "text",
            "properties": {
              "ANY_ADDITIONAL_PROPERTY": null
            }
          }
        ],
        "filtered_raw_permissions": [
          "text"
        ],
        "corresponding_effective_permissions": [
          "text"
        ],
        "single_entity_access_stats": {
          "last_used": "2026-02-05T01:31:06.506Z",
          "last_used_with_events_for": [
            {
              "name": "text",
              "last_used": "2026-02-05T01:31:06.506Z"
            }
          ]
        },
        "additional_node_properties": {
          "role_substitution_recommended_role": "text",
          "role_substitution_reason_for_high_priv_role": "text",
          "role_substitution_error": "text",
          "default_cohort_role_users_in_cohort": [
            "text"
          ],
          "default_cohort_role": "text",
          "default_cohort_role_all_common_roles": [
            "text"
          ],
          "default_cohort_role_error": "text",
          "login_anomaly_detection_stats": [
            {
              "time": "2026-02-05T01:31:06.506Z",
              "login_count": "text",
              "median_login_count": 1,
              "outlier_prediction": 1
            }
          ],
          "outlier_prediction": {
            "prediction": 1,
            "score": 1,
            "contributing_features": [
              {
                "name": "text",
                "value": 1,
                "explanation": "text"
              }
            ]
          },
          "associated_risks": [
            {
              "query_id": "text",
              "suppressed": true,
              "risk_level": 1
            }
          ]
        },
        "integration_type": "text",
        "joined_nodes": {
          "ANY_ADDITIONAL_PROPERTY": {
            "id": "text",
            "type": "text",
            "properties": {},
            "destination_node_count": 1,
            "engagement_access_stats": {
              "engagement_score": 1,
              "over_provisioned_score": 1,
              "total_count": "text",
              "accessed_count": "text"
            },
            "access_stats": {
              "last_used": "2026-02-05T01:31:06.506Z",
              "count": 1,
              "concrete_permissions": [
                "text"
              ],
              "canonical_permissions": [
                "text"
              ]
            },
            "risk_level": 1,
            "raw_permissions": [
              "text"
            ],
            "effective_permissions": [
              "text"
            ],
            "unsupported_conditions": {
              "ANY_ADDITIONAL_PROPERTY": {
                "conditions": [
                  "text"
                ]
              }
            },
            "destination_node_percentage_of_total": 1,
            "tags": [
              {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              }
            ],
            "specified_tags": [
              {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              }
            ],
            "filtered_raw_permissions": [
              "text"
            ],
            "corresponding_effective_permissions": [
              "text"
            ],
            "single_entity_access_stats": {
              "last_used": "2026-02-05T01:31:06.506Z",
              "last_used_with_events_for": [
                {
                  "name": "text",
                  "last_used": "2026-02-05T01:31:06.506Z"
                }
              ]
            },
            "additional_node_properties": {
              "role_substitution_recommended_role": "text",
              "role_substitution_reason_for_high_priv_role": "text",
              "role_substitution_error": "text",
              "default_cohort_role_users_in_cohort": [
                "text"
              ],
              "default_cohort_role": "text",
              "default_cohort_role_all_common_roles": [
                "text"
              ],
              "default_cohort_role_error": "text",
              "login_anomaly_detection_stats": [
                {
                  "time": "2026-02-05T01:31:06.506Z",
                  "login_count": "text",
                  "median_login_count": 1,
                  "outlier_prediction": 1
                }
              ],
              "outlier_prediction": {
                "prediction": 1,
                "score": 1,
                "contributing_features": [
                  {
                    "name": "text",
                    "value": 1,
                    "explanation": "text"
                  }
                ]
              },
              "associated_risks": [
                {
                  "query_id": "text",
                  "suppressed": true,
                  "risk_level": 1
                }
              ]
            },
            "integration_type": "text",
            "joined_nodes": {
              "ANY_ADDITIONAL_PROPERTY": "[Circular Reference]"
            },
            "additional_spec_properties": {}
          }
        },
        "additional_spec_properties": {}
      },
      "abstract_permissions": [
        "text"
      ],
      "concrete_permissions": [
        "text"
      ],
      "unsupported_conditions": {
        "ANY_ADDITIONAL_PROPERTY": {
          "conditions": [
            "text"
          ]
        }
      },
      "destination": {
        "id": "text",
        "type": "text",
        "properties": {},
        "destination_node_count": 1,
        "engagement_access_stats": {
          "engagement_score": 1,
          "over_provisioned_score": 1,
          "total_count": "text",
          "accessed_count": "text"
        },
        "access_stats": {
          "last_used": "2026-02-05T01:31:06.506Z",
          "count": 1,
          "concrete_permissions": [
            "text"
          ],
          "canonical_permissions": [
            "text"
          ]
        },
        "risk_level": 1,
        "raw_permissions": [
          "text"
        ],
        "effective_permissions": [
          "text"
        ],
        "unsupported_conditions": {
          "ANY_ADDITIONAL_PROPERTY": {
            "conditions": [
              "text"
            ]
          }
        },
        "destination_node_percentage_of_total": 1,
        "tags": [
          {
            "type": "text",
            "key": "text",
            "value": "text",
            "properties": {
              "ANY_ADDITIONAL_PROPERTY": null
            }
          }
        ],
        "specified_tags": [
          {
            "type": "text",
            "key": "text",
            "value": "text",
            "properties": {
              "ANY_ADDITIONAL_PROPERTY": null
            }
          }
        ],
        "filtered_raw_permissions": [
          "text"
        ],
        "corresponding_effective_permissions": [
          "text"
        ],
        "single_entity_access_stats": {
          "last_used": "2026-02-05T01:31:06.506Z",
          "last_used_with_events_for": [
            {
              "name": "text",
              "last_used": "2026-02-05T01:31:06.506Z"
            }
          ]
        },
        "additional_node_properties": {
          "role_substitution_recommended_role": "text",
          "role_substitution_reason_for_high_priv_role": "text",
          "role_substitution_error": "text",
          "default_cohort_role_users_in_cohort": [
            "text"
          ],
          "default_cohort_role": "text",
          "default_cohort_role_all_common_roles": [
            "text"
          ],
          "default_cohort_role_error": "text",
          "login_anomaly_detection_stats": [
            {
              "time": "2026-02-05T01:31:06.506Z",
              "login_count": "text",
              "median_login_count": 1,
              "outlier_prediction": 1
            }
          ],
          "outlier_prediction": {
            "prediction": 1,
            "score": 1,
            "contributing_features": [
              {
                "name": "text",
                "value": 1,
                "explanation": "text"
              }
            ]
          },
          "associated_risks": [
            {
              "query_id": "text",
              "suppressed": true,
              "risk_level": 1
            }
          ]
        },
        "integration_type": "text",
        "joined_nodes": {
          "ANY_ADDITIONAL_PROPERTY": {
            "id": "text",
            "type": "text",
            "properties": {},
            "destination_node_count": 1,
            "engagement_access_stats": {
              "engagement_score": 1,
              "over_provisioned_score": 1,
              "total_count": "text",
              "accessed_count": "text"
            },
            "access_stats": {
              "last_used": "2026-02-05T01:31:06.506Z",
              "count": 1,
              "concrete_permissions": [
                "text"
              ],
              "canonical_permissions": [
                "text"
              ]
            },
            "risk_level": 1,
            "raw_permissions": [
              "text"
            ],
            "effective_permissions": [
              "text"
            ],
            "unsupported_conditions": {
              "ANY_ADDITIONAL_PROPERTY": {
                "conditions": [
                  "text"
                ]
              }
            },
            "destination_node_percentage_of_total": 1,
            "tags": [
              {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              }
            ],
            "specified_tags": [
              {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              }
            ],
            "filtered_raw_permissions": [
              "text"
            ],
            "corresponding_effective_permissions": [
              "text"
            ],
            "single_entity_access_stats": {
              "last_used": "2026-02-05T01:31:06.506Z",
              "last_used_with_events_for": [
                {
                  "name": "text",
                  "last_used": "2026-02-05T01:31:06.506Z"
                }
              ]
            },
            "additional_node_properties": {
              "role_substitution_recommended_role": "text",
              "role_substitution_reason_for_high_priv_role": "text",
              "role_substitution_error": "text",
              "default_cohort_role_users_in_cohort": [
                "text"
              ],
              "default_cohort_role": "text",
              "default_cohort_role_all_common_roles": [
                "text"
              ],
              "default_cohort_role_error": "text",
              "login_anomaly_detection_stats": [
                {
                  "time": "2026-02-05T01:31:06.506Z",
                  "login_count": "text",
                  "median_login_count": 1,
                  "outlier_prediction": 1
                }
              ],
              "outlier_prediction": {
                "prediction": 1,
                "score": 1,
                "contributing_features": [
                  {
                    "name": "text",
                    "value": 1,
                    "explanation": "text"
                  }
                ]
              },
              "associated_risks": [
                {
                  "query_id": "text",
                  "suppressed": true,
                  "risk_level": 1
                }
              ]
            },
            "integration_type": "text",
            "joined_nodes": {
              "ANY_ADDITIONAL_PROPERTY": "[Circular Reference]"
            },
            "additional_spec_properties": {}
          }
        },
        "additional_spec_properties": {}
      },
      "path_summary_nodes": [
        {
          "id": "text",
          "type": "text",
          "properties": {},
          "destination_node_count": 1,
          "engagement_access_stats": {
            "engagement_score": 1,
            "over_provisioned_score": 1,
            "total_count": "text",
            "accessed_count": "text"
          },
          "access_stats": {
            "last_used": "2026-02-05T01:31:06.506Z",
            "count": 1,
            "concrete_permissions": [
              "text"
            ],
            "canonical_permissions": [
              "text"
            ]
          },
          "risk_level": 1,
          "raw_permissions": [
            "text"
          ],
          "effective_permissions": [
            "text"
          ],
          "unsupported_conditions": {
            "ANY_ADDITIONAL_PROPERTY": {
              "conditions": [
                "text"
              ]
            }
          },
          "destination_node_percentage_of_total": 1,
          "tags": [
            {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            }
          ],
          "specified_tags": [
            {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            }
          ],
          "filtered_raw_permissions": [
            "text"
          ],
          "corresponding_effective_permissions": [
            "text"
          ],
          "single_entity_access_stats": {
            "last_used": "2026-02-05T01:31:06.506Z",
            "last_used_with_events_for": [
              {
                "name": "text",
                "last_used": "2026-02-05T01:31:06.506Z"
              }
            ]
          },
          "additional_node_properties": {
            "role_substitution_recommended_role": "text",
            "role_substitution_reason_for_high_priv_role": "text",
            "role_substitution_error": "text",
            "default_cohort_role_users_in_cohort": [
              "text"
            ],
            "default_cohort_role": "text",
            "default_cohort_role_all_common_roles": [
              "text"
            ],
            "default_cohort_role_error": "text",
            "login_anomaly_detection_stats": [
              {
                "time": "2026-02-05T01:31:06.506Z",
                "login_count": "text",
                "median_login_count": 1,
                "outlier_prediction": 1
              }
            ],
            "outlier_prediction": {
              "prediction": 1,
              "score": 1,
              "contributing_features": [
                {
                  "name": "text",
                  "value": 1,
                  "explanation": "text"
                }
              ]
            },
            "associated_risks": [
              {
                "query_id": "text",
                "suppressed": true,
                "risk_level": 1
              }
            ]
          },
          "integration_type": "text",
          "joined_nodes": {
            "ANY_ADDITIONAL_PROPERTY": {
              "id": "text",
              "type": "text",
              "properties": {},
              "destination_node_count": 1,
              "engagement_access_stats": {
                "engagement_score": 1,
                "over_provisioned_score": 1,
                "total_count": "text",
                "accessed_count": "text"
              },
              "access_stats": {
                "last_used": "2026-02-05T01:31:06.506Z",
                "count": 1,
                "concrete_permissions": [
                  "text"
                ],
                "canonical_permissions": [
                  "text"
                ]
              },
              "risk_level": 1,
              "raw_permissions": [
                "text"
              ],
              "effective_permissions": [
                "text"
              ],
              "unsupported_conditions": {
                "ANY_ADDITIONAL_PROPERTY": {
                  "conditions": [
                    "text"
                  ]
                }
              },
              "destination_node_percentage_of_total": 1,
              "tags": [
                {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                }
              ],
              "specified_tags": [
                {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                }
              ],
              "filtered_raw_permissions": [
                "text"
              ],
              "corresponding_effective_permissions": [
                "text"
              ],
              "single_entity_access_stats": {
                "last_used": "2026-02-05T01:31:06.506Z",
                "last_used_with_events_for": [
                  {
                    "name": "text",
                    "last_used": "2026-02-05T01:31:06.506Z"
                  }
                ]
              },
              "additional_node_properties": {
                "role_substitution_recommended_role": "text",
                "role_substitution_reason_for_high_priv_role": "text",
                "role_substitution_error": "text",
                "default_cohort_role_users_in_cohort": [
                  "text"
                ],
                "default_cohort_role": "text",
                "default_cohort_role_all_common_roles": [
                  "text"
                ],
                "default_cohort_role_error": "text",
                "login_anomaly_detection_stats": [
                  {
                    "time": "2026-02-05T01:31:06.506Z",
                    "login_count": "text",
                    "median_login_count": 1,
                    "outlier_prediction": 1
                  }
                ],
                "outlier_prediction": {
                  "prediction": 1,
                  "score": 1,
                  "contributing_features": [
                    {
                      "name": "text",
                      "value": 1,
                      "explanation": "text"
                    }
                  ]
                },
                "associated_risks": [
                  {
                    "query_id": "text",
                    "suppressed": true,
                    "risk_level": 1
                  }
                ]
              },
              "integration_type": "text",
              "joined_nodes": {
                "ANY_ADDITIONAL_PROPERTY": "[Circular Reference]"
              },
              "additional_spec_properties": {}
            }
          },
          "additional_spec_properties": {}
        }
      ],
      "results_truncated": true,
      "filtered_concrete_permissions": [
        "text"
      ],
      "corresponding_abstract_permissions": [
        "text"
      ],
      "filtered_concrete_permission_groups": [
        {
          "permissions": [
            "text"
          ]
        }
      ],
      "joined_nodes": {
        "ANY_ADDITIONAL_PROPERTY": {
          "id": "text",
          "type": "text",
          "properties": {},
          "destination_node_count": 1,
          "engagement_access_stats": {
            "engagement_score": 1,
            "over_provisioned_score": 1,
            "total_count": "text",
            "accessed_count": "text"
          },
          "access_stats": {
            "last_used": "2026-02-05T01:31:06.506Z",
            "count": 1,
            "concrete_permissions": [
              "text"
            ],
            "canonical_permissions": [
              "text"
            ]
          },
          "risk_level": 1,
          "raw_permissions": [
            "text"
          ],
          "effective_permissions": [
            "text"
          ],
          "unsupported_conditions": {
            "ANY_ADDITIONAL_PROPERTY": {
              "conditions": [
                "text"
              ]
            }
          },
          "destination_node_percentage_of_total": 1,
          "tags": [
            {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            }
          ],
          "specified_tags": [
            {
              "type": "text",
              "key": "text",
              "value": "text",
              "properties": {
                "ANY_ADDITIONAL_PROPERTY": null
              }
            }
          ],
          "filtered_raw_permissions": [
            "text"
          ],
          "corresponding_effective_permissions": [
            "text"
          ],
          "single_entity_access_stats": {
            "last_used": "2026-02-05T01:31:06.506Z",
            "last_used_with_events_for": [
              {
                "name": "text",
                "last_used": "2026-02-05T01:31:06.506Z"
              }
            ]
          },
          "additional_node_properties": {
            "role_substitution_recommended_role": "text",
            "role_substitution_reason_for_high_priv_role": "text",
            "role_substitution_error": "text",
            "default_cohort_role_users_in_cohort": [
              "text"
            ],
            "default_cohort_role": "text",
            "default_cohort_role_all_common_roles": [
              "text"
            ],
            "default_cohort_role_error": "text",
            "login_anomaly_detection_stats": [
              {
                "time": "2026-02-05T01:31:06.506Z",
                "login_count": "text",
                "median_login_count": 1,
                "outlier_prediction": 1
              }
            ],
            "outlier_prediction": {
              "prediction": 1,
              "score": 1,
              "contributing_features": [
                {
                  "name": "text",
                  "value": 1,
                  "explanation": "text"
                }
              ]
            },
            "associated_risks": [
              {
                "query_id": "text",
                "suppressed": true,
                "risk_level": 1
              }
            ]
          },
          "integration_type": "text",
          "joined_nodes": {
            "ANY_ADDITIONAL_PROPERTY": {
              "id": "text",
              "type": "text",
              "properties": {},
              "destination_node_count": 1,
              "engagement_access_stats": {
                "engagement_score": 1,
                "over_provisioned_score": 1,
                "total_count": "text",
                "accessed_count": "text"
              },
              "access_stats": {
                "last_used": "2026-02-05T01:31:06.506Z",
                "count": 1,
                "concrete_permissions": [
                  "text"
                ],
                "canonical_permissions": [
                  "text"
                ]
              },
              "risk_level": 1,
              "raw_permissions": [
                "text"
              ],
              "effective_permissions": [
                "text"
              ],
              "unsupported_conditions": {
                "ANY_ADDITIONAL_PROPERTY": {
                  "conditions": [
                    "text"
                  ]
                }
              },
              "destination_node_percentage_of_total": 1,
              "tags": [
                {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                }
              ],
              "specified_tags": [
                {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                }
              ],
              "filtered_raw_permissions": [
                "text"
              ],
              "corresponding_effective_permissions": [
                "text"
              ],
              "single_entity_access_stats": {
                "last_used": "2026-02-05T01:31:06.506Z",
                "last_used_with_events_for": [
                  {
                    "name": "text",
                    "last_used": "2026-02-05T01:31:06.506Z"
                  }
                ]
              },
              "additional_node_properties": {
                "role_substitution_recommended_role": "text",
                "role_substitution_reason_for_high_priv_role": "text",
                "role_substitution_error": "text",
                "default_cohort_role_users_in_cohort": [
                  "text"
                ],
                "default_cohort_role": "text",
                "default_cohort_role_all_common_roles": [
                  "text"
                ],
                "default_cohort_role_error": "text",
                "login_anomaly_detection_stats": [
                  {
                    "time": "2026-02-05T01:31:06.506Z",
                    "login_count": "text",
                    "median_login_count": 1,
                    "outlier_prediction": 1
                  }
                ],
                "outlier_prediction": {
                  "prediction": 1,
                  "score": 1,
                  "contributing_features": [
                    {
                      "name": "text",
                      "value": 1,
                      "explanation": "text"
                    }
                  ]
                },
                "associated_risks": [
                  {
                    "query_id": "text",
                    "suppressed": true,
                    "risk_level": 1
                  }
                ]
              },
              "integration_type": "text",
              "joined_nodes": {
                "ANY_ADDITIONAL_PROPERTY": "[Circular Reference]"
              },
              "additional_spec_properties": {}
            }
          },
          "additional_spec_properties": {}
        }
      },
      "additional_path_properties": {
        "outlier_prediction": {
          "prediction": 1,
          "score": 1,
          "contributing_features": [
            {
              "name": "text",
              "value": 1,
              "explanation": "text"
            }
          ]
        },
        "associated_risks": [
          {
            "query_id": "text",
            "suppressed": true,
            "risk_level": 1
          }
        ]
      },
      "waypoint": {
        "id": "text",
        "type": "text",
        "properties": {},
        "destination_node_count": 1,
        "engagement_access_stats": {
          "engagement_score": 1,
          "over_provisioned_score": 1,
          "total_count": "text",
          "accessed_count": "text"
        },
        "access_stats": {
          "last_used": "2026-02-05T01:31:06.506Z",
          "count": 1,
          "concrete_permissions": [
            "text"
          ],
          "canonical_permissions": [
            "text"
          ]
        },
        "risk_level": 1,
        "raw_permissions": [
          "text"
        ],
        "effective_permissions": [
          "text"
        ],
        "unsupported_conditions": {
          "ANY_ADDITIONAL_PROPERTY": {
            "conditions": [
              "text"
            ]
          }
        },
        "destination_node_percentage_of_total": 1,
        "tags": [
          {
            "type": "text",
            "key": "text",
            "value": "text",
            "properties": {
              "ANY_ADDITIONAL_PROPERTY": null
            }
          }
        ],
        "specified_tags": [
          {
            "type": "text",
            "key": "text",
            "value": "text",
            "properties": {
              "ANY_ADDITIONAL_PROPERTY": null
            }
          }
        ],
        "filtered_raw_permissions": [
          "text"
        ],
        "corresponding_effective_permissions": [
          "text"
        ],
        "single_entity_access_stats": {
          "last_used": "2026-02-05T01:31:06.506Z",
          "last_used_with_events_for": [
            {
              "name": "text",
              "last_used": "2026-02-05T01:31:06.506Z"
            }
          ]
        },
        "additional_node_properties": {
          "role_substitution_recommended_role": "text",
          "role_substitution_reason_for_high_priv_role": "text",
          "role_substitution_error": "text",
          "default_cohort_role_users_in_cohort": [
            "text"
          ],
          "default_cohort_role": "text",
          "default_cohort_role_all_common_roles": [
            "text"
          ],
          "default_cohort_role_error": "text",
          "login_anomaly_detection_stats": [
            {
              "time": "2026-02-05T01:31:06.506Z",
              "login_count": "text",
              "median_login_count": 1,
              "outlier_prediction": 1
            }
          ],
          "outlier_prediction": {
            "prediction": 1,
            "score": 1,
            "contributing_features": [
              {
                "name": "text",
                "value": 1,
                "explanation": "text"
              }
            ]
          },
          "associated_risks": [
            {
              "query_id": "text",
              "suppressed": true,
              "risk_level": 1
            }
          ]
        },
        "integration_type": "text",
        "joined_nodes": {
          "ANY_ADDITIONAL_PROPERTY": {
            "id": "text",
            "type": "text",
            "properties": {},
            "destination_node_count": 1,
            "engagement_access_stats": {
              "engagement_score": 1,
              "over_provisioned_score": 1,
              "total_count": "text",
              "accessed_count": "text"
            },
            "access_stats": {
              "last_used": "2026-02-05T01:31:06.506Z",
              "count": 1,
              "concrete_permissions": [
                "text"
              ],
              "canonical_permissions": [
                "text"
              ]
            },
            "risk_level": 1,
            "raw_permissions": [
              "text"
            ],
            "effective_permissions": [
              "text"
            ],
            "unsupported_conditions": {
              "ANY_ADDITIONAL_PROPERTY": {
                "conditions": [
                  "text"
                ]
              }
            },
            "destination_node_percentage_of_total": 1,
            "tags": [
              {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              }
            ],
            "specified_tags": [
              {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              }
            ],
            "filtered_raw_permissions": [
              "text"
            ],
            "corresponding_effective_permissions": [
              "text"
            ],
            "single_entity_access_stats": {
              "last_used": "2026-02-05T01:31:06.506Z",
              "last_used_with_events_for": [
                {
                  "name": "text",
                  "last_used": "2026-02-05T01:31:06.506Z"
                }
              ]
            },
            "additional_node_properties": {
              "role_substitution_recommended_role": "text",
              "role_substitution_reason_for_high_priv_role": "text",
              "role_substitution_error": "text",
              "default_cohort_role_users_in_cohort": [
                "text"
              ],
              "default_cohort_role": "text",
              "default_cohort_role_all_common_roles": [
                "text"
              ],
              "default_cohort_role_error": "text",
              "login_anomaly_detection_stats": [
                {
                  "time": "2026-02-05T01:31:06.506Z",
                  "login_count": "text",
                  "median_login_count": 1,
                  "outlier_prediction": 1
                }
              ],
              "outlier_prediction": {
                "prediction": 1,
                "score": 1,
                "contributing_features": [
                  {
                    "name": "text",
                    "value": 1,
                    "explanation": "text"
                  }
                ]
              },
              "associated_risks": [
                {
                  "query_id": "text",
                  "suppressed": true,
                  "risk_level": 1
                }
              ]
            },
            "integration_type": "text",
            "joined_nodes": {
              "ANY_ADDITIONAL_PROPERTY": "[Circular Reference]"
            },
            "additional_spec_properties": {}
          }
        },
        "additional_spec_properties": {}
      },
      "additional_spec_properties": {}
    }
  ],
  "approx_total_source_nodes_count": "text",
  "next_page_token": "text",
  "has_more": true
}

POST /api/v1/assessments/query_spec:destination_nodes HTTP/1.1
Host: your-tenant.vezacloud.com
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 11227

{
  "spec": {
    "query_type": 1,
    "source_node_types": {
      "nodes": [
        {
          "node_type": "text",
          "condition_expression": {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          },
          "node_id": "text",
          "count_condition_expression": "[Circular Reference]",
          "direct_relationship_only": true,
          "node_type_grouping_constraint": {
            "node_types": [
              "text"
            ],
            "constraint_type": 1
          },
          "properties_to_get": [
            "text"
          ],
          "tags_to_get": [
            {
              "type": 1,
              "key": "text"
            }
          ],
          "integration_types": [
            "text"
          ]
        }
      ],
      "nodes_operator": 0
    },
    "destination_node_types": {
      "nodes": [
        {
          "node_type": "text",
          "condition_expression": {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          },
          "node_id": "text",
          "count_condition_expression": "[Circular Reference]",
          "direct_relationship_only": true,
          "node_type_grouping_constraint": {
            "node_types": [
              "text"
            ],
            "constraint_type": 1
          },
          "properties_to_get": [
            "text"
          ],
          "tags_to_get": [
            {
              "type": 1,
              "key": "text"
            }
          ],
          "integration_types": [
            "text"
          ]
        }
      ],
      "nodes_operator": 0
    },
    "required_intermediate_node_types": {
      "nodes": [
        {
          "node_type": "text",
          "condition_expression": {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          },
          "node_id": "text",
          "count_condition_expression": "[Circular Reference]",
          "direct_relationship_only": true,
          "node_type_grouping_constraint": {
            "node_types": [
              "text"
            ],
            "constraint_type": 1
          },
          "properties_to_get": [
            "text"
          ],
          "tags_to_get": [
            {
              "type": 1,
              "key": "text"
            }
          ],
          "integration_types": [
            "text"
          ]
        }
      ],
      "nodes_operator": 0
    },
    "avoided_intermediate_node_types": {
      "nodes": [
        {
          "node_type": "text",
          "condition_expression": {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          },
          "node_id": "text",
          "count_condition_expression": "[Circular Reference]",
          "direct_relationship_only": true,
          "node_type_grouping_constraint": {
            "node_types": [
              "text"
            ],
            "constraint_type": 1
          },
          "properties_to_get": [
            "text"
          ],
          "tags_to_get": [
            {
              "type": 1,
              "key": "text"
            }
          ],
          "integration_types": [
            "text"
          ]
        }
      ],
      "nodes_operator": 0
    },
    "raw_permissions": {
      "values": [
        "text"
      ],
      "operator": 1
    },
    "effective_permissions": {
      "values": [
        1
      ],
      "operator": 1
    },
    "customized_variables": [
      {
        "key": "text",
        "value": "text"
      }
    ],
    "snapshot_id": "text",
    "access_filter": {
      "engagement_score": {
        "op": 1,
        "value": 1
      },
      "over_provisioned_score": {
        "op": 1,
        "value": 1
      },
      "include_secondary_grantee": true,
      "include_indirect_resource": true,
      "exclude_indirect_grantee": true,
      "anomaly_detection_history_days": "text",
      "last_used": {
        "op": 1,
        "value": "2026-02-05T01:31:06.506Z",
        "target": 1,
        "relative_timevar_value": "text"
      }
    },
    "node_relationship_type": 1,
    "relates_to_exp": {
      "specs": [
        {
          "node_types": "[Circular Reference]",
          "required_intermediate_node_types": "[Circular Reference]",
          "avoided_intermediate_node_types": "[Circular Reference]",
          "raw_permissions": {
            "values": [
              "text"
            ],
            "operator": 1
          },
          "effective_permissions": {
            "values": [
              1
            ],
            "operator": 1
          },
          "unsupported_condition_mode": 1,
          "no_relation": true,
          "direction": 1,
          "path_type": 1
        }
      ],
      "child_expressions": [
        {
          "specs": "[Circular Reference]",
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "and_op_type": 1
        }
      ],
      "operator": 1,
      "not": true,
      "and_op_type": 1
    },
    "path_summary_node_types": {
      "nodes": [
        {
          "node_type": "text",
          "condition_expression": {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          },
          "node_id": "text",
          "count_condition_expression": "[Circular Reference]",
          "direct_relationship_only": true,
          "node_type_grouping_constraint": {
            "node_types": [
              "text"
            ],
            "constraint_type": 1
          },
          "properties_to_get": [
            "text"
          ],
          "tags_to_get": [
            {
              "type": 1,
              "key": "text"
            }
          ],
          "integration_types": [
            "text"
          ]
        }
      ],
      "nodes_operator": 0
    },
    "all_entity_condition": {
      "specs": [
        {
          "fn": 0,
          "property": "email",
          "value": null,
          "not": false,
          "value_property_name": "text",
          "value_property_from_other_node": true,
          "source_property": "text"
        }
      ],
      "tag_specs": [
        {
          "tag": {
            "type": "text",
            "key": "text",
            "value": "text",
            "properties": {
              "ANY_ADDITIONAL_PROPERTY": null
            }
          },
          "exclude": true,
          "fn": 1,
          "source_query_id": "text",
          "source_tag_key": "text"
        }
      ],
      "child_expressions": [
        {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            "[Circular Reference]"
          ],
          "operator": 0,
          "not": true
        }
      ],
      "operator": 0,
      "not": true
    },
    "path_summary_count_conditions": {
      "conditions": [
        {
          "fn": 1,
          "value": "text",
          "value_as": 1
        }
      ]
    },
    "result_value_type": 1,
    "include_all_source_tags_in_results": true,
    "include_all_destination_tags_in_results": true,
    "additional_columns_to_get": [
      1
    ],
    "result_enrichment": {
      "join_node_specs": [
        {
          "with": "text",
          "node_spec": "[Circular Reference]",
          "as": "text"
        }
      ],
      "outlier_detection": {
        "type": 1,
        "manager_centric_config": {
          "grouping_properties": [
            {
              "property_name": "text",
              "node_type": "text",
              "target": 1,
              "joined_node_alias": "text"
            }
          ],
          "threshold": 1
        }
      },
      "include_associated_risks": true,
      "risks_filter": "text"
    },
    "include_sub_permissions": true,
    "include_permissions_summary": true,
    "waypoint_nodes": {
      "nodes": [
        {
          "node_type": "text",
          "condition_expression": {
            "specs": [
              {
                "fn": 0,
                "property": "email",
                "value": null,
                "not": false,
                "value_property_name": "text",
                "value_property_from_other_node": true,
                "source_property": "text"
              }
            ],
            "tag_specs": [
              {
                "tag": {
                  "type": "text",
                  "key": "text",
                  "value": "text",
                  "properties": {
                    "ANY_ADDITIONAL_PROPERTY": null
                  }
                },
                "exclude": true,
                "fn": 1,
                "source_query_id": "text",
                "source_tag_key": "text"
              }
            ],
            "child_expressions": "[Circular Reference]",
            "operator": 0,
            "not": true
          },
          "node_id": "text",
          "count_condition_expression": "[Circular Reference]",
          "direct_relationship_only": true,
          "node_type_grouping_constraint": {
            "node_types": [
              "text"
            ],
            "constraint_type": 1
          },
          "properties_to_get": [
            "text"
          ],
          "tags_to_get": [
            {
              "type": 1,
              "key": "text"
            }
          ],
          "integration_types": [
            "text"
          ]
        }
      ],
      "nodes_operator": 0
    },
    "unpivot_properties": [
      "text"
    ],
    "union_specs": [
      {
        "query_type": 1,
        "source_node_types": {
          "nodes": [
            {
              "node_type": "text",
              "condition_expression": {
                "specs": [
                  {
                    "fn": 0,
                    "property": "email",
                    "value": null,
                    "not": false,
                    "value_property_name": "text",
                    "value_property_from_other_node": true,
                    "source_property": "text"
                  }
                ],
                "tag_specs": [
                  {
                    "tag": {
                      "type": "text",
                      "key": "text",
                      "value": "text",
                      "properties": {
                        "ANY_ADDITIONAL_PROPERTY": null
                      }
                    },
                    "exclude": true,
                    "fn": 1,
                    "source_query_id": "text",
                    "source_tag_key": "text"
                  }
                ],
                "child_expressions": "[Circular Reference]",
                "operator": 0,
                "not": true
              },
              "node_id": "text",
              "count_condition_expression": "[Circular Reference]",
              "direct_relationship_only": true,
              "node_type_grouping_constraint": {
                "node_types": [
                  "text"
                ],
                "constraint_type": 1
              },
              "properties_to_get": [
                "text"
              ],
              "tags_to_get": [
                {
                  "type": 1,
                  "key": "text"
                }
              ],
              "integration_types": [
                "text"
              ]
            }
          ],
          "nodes_operator": 0
        },
        "customized_variables": [
          {
            "key": "text",
            "value": "text"
          }
        ],
        "access_filter": {
          "engagement_score": {
            "op": 1,
            "value": 1
          },
          "over_provisioned_score": {
            "op": 1,
            "value": 1
          },
          "include_secondary_grantee": true,
          "include_indirect_resource": true,
          "exclude_indirect_grantee": true,
          "anomaly_detection_history_days": "text",
          "last_used": {
            "op": 1,
            "value": "2026-02-05T01:31:06.506Z",
            "target": 1,
            "relative_timevar_value": "text"
          }
        },
        "node_relationship_type": 1,
        "relates_to_exp": {
          "specs": "[Circular Reference]",
          "child_expressions": "[Circular Reference]",
          "operator": 1,
          "not": true,
          "and_op_type": 1
        },
        "path_summary_node_types": {
          "nodes": [
            {
              "node_type": "text",
              "condition_expression": {
                "specs": [
                  {
                    "fn": 0,
                    "property": "email",
                    "value": null,
                    "not": false,
                    "value_property_name": "text",
                    "value_property_from_other_node": true,
                    "source_property": "text"
                  }
                ],
                "tag_specs": [
                  {
                    "tag": {
                      "type": "text",
                      "key": "text",
                      "value": "text",
                      "properties": {
                        "ANY_ADDITIONAL_PROPERTY": null
                      }
                    },
                    "exclude": true,
                    "fn": 1,
                    "source_query_id": "text",
                    "source_tag_key": "text"
                  }
                ],
                "child_expressions": "[Circular Reference]",
                "operator": 0,
                "not": true
              },
              "node_id": "text",
              "count_condition_expression": "[Circular Reference]",
              "direct_relationship_only": true,
              "node_type_grouping_constraint": {
                "node_types": [
                  "text"
                ],
                "constraint_type": 1
              },
              "properties_to_get": [
                "text"
              ],
              "tags_to_get": [
                {
                  "type": 1,
                  "key": "text"
                }
              ],
              "integration_types": [
                "text"
              ]
            }
          ],
          "nodes_operator": 0
        },
        "all_entity_condition": {
          "specs": [
            {
              "fn": 0,
              "property": "email",
              "value": null,
              "not": false,
              "value_property_name": "text",
              "value_property_from_other_node": true,
              "source_property": "text"
            }
          ],
          "tag_specs": [
            {
              "tag": {
                "type": "text",
                "key": "text",
                "value": "text",
                "properties": {
                  "ANY_ADDITIONAL_PROPERTY": null
                }
              },
              "exclude": true,
              "fn": 1,
              "source_query_id": "text",
              "source_tag_key": "text"
            }
          ],
          "child_expressions": [
            {
              "specs": [
                {
                  "fn": 0,
                  "property": "email",
                  "value": null,
                  "not": false,
                  "value_property_name": "text",
                  "value_property_from_other_node": true,
                  "source_property": "text"
                }
              ],
              "tag_specs": [
                {
                  "tag": {
                    "type": "text",
                    "key": "text",
                    "value": "text",
                    "properties": {
                      "ANY_ADDITIONAL_PROPERTY": null
                    }
                  },
                  "exclude": true,
                  "fn": 1,
                  "source_query_id": "text",
                  "source_tag_key": "text"
                }
              ],
              "child_expressions": [
                "[Circular Reference]"
              ],
              "operator": 0,
              "not": true
            }
          ],
          "operator": 0,
          "not": true
        },
        "path_summary_count_conditions": {
          "conditions": [
            {
              "fn": 1,
              "value": "text",
              "value_as": 1
            }
          ]
        },
        "waypoint_nodes": {
          "nodes": [
            {
              "node_type": "text",
              "condition_expression": {
                "specs": [
                  {
                    "fn": 0,
                    "property": "email",
                    "value": null,
                    "not": false,
                    "value_property_name": "text",
                    "value_property_from_other_node": true,
                    "source_property": "text"
                  }
                ],
                "tag_specs": [
                  {
                    "tag": {
                      "type": "text",
                      "key": "text",
                      "value": "text",
                      "properties": {
                        "ANY_ADDITIONAL_PROPERTY": null
                      }
                    },
                    "exclude": true,
                    "fn": 1,
                    "source_query_id": "text",
                    "source_tag_key": "text"
                  }
                ],
                "child_expressions": "[Circular Reference]",
                "operator": 0,
                "not": true
              },
              "node_id": "text",
              "count_condition_expression": "[Circular Reference]",
              "direct_relationship_only": true,
              "node_type_grouping_constraint": {
                "node_types": [
                  "text"
                ],
                "constraint_type": 1
              },
              "properties_to_get": [
                "text"
              ],
              "tags_to_get": [
                {
                  "type": 1,
                  "key": "text"
                }
              ],
              "integration_types": [
                "text"
              ]
            }
          ],
          "nodes_operator": 0
        },
        "additional_spec_properties": {}
      }
    ],
    "page_size": "text",
    "page_token": "text"
  },
  "source_node_id": "text",
  "snapshot_id": "text"
}

Quick Start

API overview and sample queries

The Query Builder is fundamental to Rules and Risks, enabling external notifications and enhanced search visibility based on query constraints and conditions. When combined with Webhooks for remediation workflows, these can offer in-the-box tools to begin integrating Veza with external processes.

As Veza does not write changes to your environment, you can use the query builder API to build your own tools and integrate Veza with your internal systems and security processes.

For example, you might use Veza APIs to:

Programmatically detect and add Snowflake users to a role when another role already exists with the required permissions
Progressively query for data resources matching a naming pattern or other condition, and apply tags with the provider's built-in APIs
Discover and alter overly permissive policies granting access to sensitive data

Your Veza success team can offer additional support and access to development tools including a Python SDK. This guide covers some simple examples to help get started with custom queries, including links to additional documentation.

Authentication

To run the provided commands, you'll need to first generate a token from Administration > . You'll also need to know the base URL of your Veza deployment, such as your-org.veza.com.

Query specifications

You can validate that a query is functioning as intended before saving it with , which will return the total number of entities in the search results.

returns a paginated list of query results, including entity details. This operation does not return a total count of results. A query spec does not require the full saved query , and instead takes a condensed payload.

returns the related destination nodes for a single entity in the results of a saved query. This endpoint can be used, for example, to review the related roles for an individual user when the query specifies User > Role.

Sample Request

Post your request to or , depending on whether you need a list of the included nodes (including all entity properties), or want the full result count:

See for more information about possible options.

Sample Response

The response always returns a value, next_page_token, and has_more. If more results are available, you can get the next page of results by passing the page_token in the request query.

The values array will contain the Individual entity details:

For more information, see .

Get destination nodes

Use to find the related entities for an individual result for a query spec. Specify the source_node_id of the entity to get relationships for:

Sample Request

Sample response

Save a query

If you want to run the same query repeatedly, or enable Veza or based on the results, you can save it under .

A saved query includes a name and description, along with any other .

Get saved query result count or entity details

Use the query ID to run a saved query. Just as for query_spec operations, you can request the paginated entity details or the result count, or get destination nodes for a result:

Responses will contain the node details or the total count, depending on the method used.

Query Builder Parameters

Options for saved and spec query requests

When calling query spec endpoints or saving a query, you will specify the search parameters in a JSON object in the request body. Saved queries and query specifications support a range of parameters and options, described in this document.

Queries begin with a source node type and optionally a destination node type. A simple query might show "all Okta users with relationships to S3 Buckets". A more advanced query will add additional constraints on entity attributes or tags, or filter on relationships to intermediate entities, such as a role, group, or local user.

Most requests will return entities of the source node type. Use GetAssessmentQuerySpecDestinationNodes or GetAssessmentQueryDestinationNodes to return related entities for an individual source entity in a query result.

As the Veza uses these APIs, you can preview different sample requests and responses by constructing queries from the web interface, opening the Save dropdown menu, and choosing View Query Spec API.

Query parameters

Field

Type

Notes

NodeSpecCollection

A collection of node specifications, defining constraints or other query parameters on each entity type.

You can query for a single principal or resource by filtering on node ID.

Field

Type

Notes

NodeSpec

Contains the type, tags, and conditions applied to a node, narrowing the focus of the query.

Note that you can add conditions and tags to either the source node type or the destination.

Field

Type

Notes

NodeTypeGroupingConstraint

Query specs support supertypes with constraints. They can specified in the same way as concrete node types. node_type_grouping_constraint can be used to limit the concrete node type set belonging to the specified super type, with possible constraint type values EXCLUDE or INCLUDE. Example spec:

ConditionExpression

Additional constraints can be applied using a node condition_expression. Conditions specified within the expression can target node attributes such as name, date created, or any other properties Veza has discovered.

Conditions can always apply to source and destination node types. Conditions can only apply to intermediate node types when the query defines required_intermediate_node_types.

Conditions have a function (fn). Valid operators are:

Comparison operators:

EQ: Equals
LT: Less Than
LTE: Less Than or Equal

String operators:

STARTS_WITH: Starts With
CONTAINS: Contains
ENDS_WITH: Ends With

Set operators:

IN: Value is in list
IN_FROM_QUERY_SOURCE_RESULTS: Value is in results from another query

List property operators (for properties that contain arrays):

LIST_CONTAINS: List Contains (deprecated, use LIST_ANY_ELEMENT_EQ)
LIST_ALL_ELEMENTS_IN: All list elements are in the specified set
LIST_ANY_ELEMENT_EQ

Date-based operators can be:

LT: 'Not in the Last', LTE: 'Before', GT: 'In the Last', GTE: 'After', EQ: 'At',

For example:

The condition value can be true, false, a number, an RFC3339 timestamp, or a string. For example, to find S3 Bucket destinations where public ACLs haven't been blocked:

Conditions can also contain a string-typed value. For example, to find all Okta users with the prefix "sa-":

Note that you can specify nodes where the condition doesn't apply by setting "not": true for the constraint.

There can also be a not on the whole expression:

You can get all the properties available for different node types (which vary depending on the provider and service) by searching for the entities in Access Graph and viewing the node details.

No relation

Enable no_relation to only return nodes without a relationship to the destination node types. For example, to show Microsoft Azure AD users that do not belong to the group "Alabama":

Avoids intermediate node types

You may want to query for entities that have direct access to a resource, without a specific intermediate relationship. For example, you can query for IAM users whose resource access does not also involve a role.

To query for relationships that do not include a specific node type in the authorization path, specify an exclusion in the avoids_intermediate_node_types object:

Waypoint nodes

Waypoint nodes allow you to filter query results to only include paths that pass through a specific intermediate entity. This is useful for auditing access that flows through particular roles, groups, or service accounts.

Unlike required_intermediate_node_types which specifies that any entity of a given type must exist in the path, waypoint_nodes requires a specific entity (identified by node_id or name) to be in the path.

Key differences:

required_intermediate_node_types: "Path must include some Snowflake Role"
waypoint_nodes: "Path must include the specific ACCOUNTADMIN role"

Important notes:

Currently limited to one waypoint entity per query
The waypoint must be an intermediate entity (not the source or destination)
The Query Builder UI presents waypoints and summary entities as alternative options, but both can be specified in API requests

Example: Find Okta users accessing Snowflake databases through the ACCOUNTADMIN role:

Alternatively, you can specify the waypoint by node_id:

Query type

Query Type

Description

When copying JSON query specifications from the Query Builder UI, you may see "query_type": "SYSTEM_CREATED" in the generated payload. When using this to create queries via the API, you must change the value to "query_type": "SOURCE_TO_DESTINATION". The API does not accept SYSTEM_CREATED as a valid query type for user-created queries, as this type is reserved for Veza's out-of-the-box queries.

Permissions

To return only entities with one or more permissions to a resource, you can list either system or effective permissions, with an AND or OR operator.

RawPermissionCollection

"Raw" or "System" permissions describe privileges using the service providers terms, for example s3:PutBucketAcl.

Field

Type

Notes

You can review all the possible permissions Veza has discovered for an entity by selecting it as a related entity in a Query Builder search. The "Permissions" dropdown menu will include all effective and raw permissions for the resource type.

EffectivePermissionCollection

Field

Type

Notes

Effective permissions are an abstraction of an entity's authorization to a resource. When discovering authorization metadata for a connected provider, Veza maps each raw permission a principal has on a resource to the corresponding canonical permission, and calculates the cumulative effective permissions.

RelatesToExp

Queries constructed using the v1 API and the Segregation of Duty page can use "relates to" expressions to get results based on relationships to more than one related entity types, with AND | OR logic. For example: Show all users that are in Group A and Group B, or Show users that are in Group X and have Role Y.

Multiple Destination Types with OR Logic

You can query for relationships to multiple destination entity types simultaneously by using RelatesToExp with an OR operator. This returns source entities that have a relationship to any of the specified destination types.

Example: Find Okta users with access to any AWS data storage service (S3 OR RDS OR DynamoDB):

In this example:

A user appears in results if they have access to S3 OR RDS OR DynamoDB (or any combination)
Each destination type can have its own filters, tags, and permission requirements
The OR operator creates a union of results across all destination types

Adding filters to each destination type:

This query finds users with access to either:

Production S3 buckets, OR
Publicly accessible RDS databases

RelatesToExp Evaluation

For E = { specs: [A, B, ...], child_expressions: [X, Y, ...], operator, not }

"source has a path to E" is defined as:
If operator is AND (default): "source has a path to ALL of (A,B, ..., X, Y, ...)"
If operator

RelatesToExp Field Specifications

and_op_type: AndOperatorType (INFERRED [default], SOURCE_INTERSECT, PAIR_INTERSECT)
child_expressions: RelatesToExpressions Array

AndOperatorType

INFERRED (default): Replaced with SOURCE_INTERSECT or PAIR_INTERSECT based on query execution context.
SOURCE_INTERSECT: Intersection based on source node.

Given the following graph relationship:

U1 and U2 are entity type U, and R1 and R2 are entity type R. Here U2 is in the result of U-> (P1->R AND P2->R) with SOURCE_INTERSECT. With PAIR_INTERSECT, U2 is not in the result because neither R1 or R2 matches both U->P1->R and U->P2->R.

If we change the graph to have R1 match both U->P1->R and U->P2->R:

Now U2 is in the result of the same query with PAIR_INTERSECT. PAIR_INTERSECT makes more sense for queries like “users have permission A && B to database” when the meaning is “permission A && B to the same database”

AndOperatorType defaults:

INFERRED will be replaced with one of SOURCE_INTERSECT or PAIR_INTERSECT when executing the query.
INFERRED is replaced with PAIR_INTERSECT only if:

RelatesToSpec

A RelatesToSpec represents a precise path definition:

source has a path to any node spec in node_types
- direction determines the direction of the path
the path has all required_intermediate_node_types

Field

Type

Description

RelatesToDirection can be:

ANY_DIRECTION : Backend automatically selects ONE optimal direction, preferring paths containing permissions. Returns results from the selected direction only (not from all directions).
SINGLE_DIRECTIONAL: Direction to be chosen by the API if there is only one valid direction. Otherwise this input is invalid.
OUTGOING

Understanding ANY_DIRECTION Behavior

When ANY_DIRECTION is specified, Veza uses the following logic to select a query direction:

Evaluate both directions for valid paths between the source and destination entity types
Select the direction containing permission relationships (such as permissions, roles, or group memberships)
If both directions have permissions: Choose OUTGOING direction

It deterministically selects the single most relevant direction based on where permissions exist in the relationship path.

Example: User to Database Query

Outgoing path: User → Role → Permission → Database (contains permission edges)
- Result: Selected by default
Incoming path: User ← ManagedBy ← Database (no permission edges)

Example: Database to User Query

Outgoing path: Database → ManagedBy → User (no permission edges)
Incoming path: Database ← Permission ← Role ← User (contains permission edges)
- Result: Selected by default

The order of entity types in your query (source vs. destination) does NOT determine the direction. Veza chooses based on where permission relationships exist in the graph schema, not based on which entity you specify first.

RiskSuppressedConstraintsCollection

define conditions on entity types to mark exceptions for queries with a risk level.

Query APIs

hashtagBase URL

hashtagAuthentication

hashtagGetting started

Query Builder Terminology

hashtagEntity (Node)

Query Builder Results

hashtagSample Response: Get Nodes

Save a query

Get a saved query

Delete a query

Get query result

Get query spec nodes

Private APIs

hashtagOverview

hashtagAvailable APIs

hashtagCommon Use Cases

hashtagLimitations

hashtagRelated Documentation

Get Access Relationship

hashtagOverview

Role Maintenance

hashtagOverview

hashtagUse cases and features

hashtagLimitations

hashtagRole Maintenance API

hashtagRequest Parameters

hashtagGranteeModification Structure

hashtagResourcePermissions Structure

hashtagRequest and Response Protocol

hashtagProto Message Definitions

hashtagResponse Structure

hashtagUsage Example

hashtagRequest

hashtagResponse

hashtagExample: Adding permissions only

hashtagRequest

hashtagResponse

hashtagExample: Removing permissions only

hashtagRequest

hashtagResponse

hashtagRelated APIs

Cohort Role Analysis

hashtagOverview

Query APIs

hashtagBase URL

hashtagAuthentication

hashtagGetting started

Get query spec nodes

Role Maintenance

hashtagOverview

hashtagUse cases and features

hashtagLimitations

hashtagRole Maintenance API

hashtagRequest Parameters

hashtagGranteeModification Structure

hashtagResourcePermissions Structure

hashtagRequest and Response Protocol

hashtagProto Message Definitions

hashtagResponse Structure

hashtagUsage Example

hashtagRequest

hashtagResponse

hashtagExample: Adding permissions only

hashtagRequest

hashtagResponse

hashtagExample: Removing permissions only

hashtagRequest

hashtagResponse

hashtagRelated APIs

Delete a query

Get a saved query

Save a query

Private APIs

hashtagOverview

hashtagAvailable APIs

hashtagCommon Use Cases

hashtagLimitations

hashtagRelated Documentation

Get Access Relationship

Base URL

Authentication

Getting started

Entity (Node)

Sample Response: Get Nodes

Overview

Available APIs

Common Use Cases

Limitations

Related Documentation

Overview

Overview

Use cases and features

Limitations

Role Maintenance API

Request Parameters

GranteeModification Structure

ResourcePermissions Structure

Request and Response Protocol

Proto Message Definitions

Response Structure

Usage Example

Request

Response

Example: Adding permissions only

Request

Response

Example: Removing permissions only

Request

Response

Related APIs

Overview

Base URL

Authentication

Getting started

Overview

Use cases and features

Limitations

Role Maintenance API

Request Parameters

GranteeModification Structure

ResourcePermissions Structure

Request and Response Protocol

Proto Message Definitions

Response Structure

Usage Example

Request

Response

Example: Adding permissions only

Request

Response

Example: Removing permissions only

Request

Response

Related APIs

Overview

Available APIs

Common Use Cases

Limitations

Related Documentation

Overview

Use cases and features

Limitations

Get Access Relationship

Request Parameters

Result Ordering

Special Considerations

Response Structure

NodeAccessChange Structure

ResourceAccessChange Structure

Usage Examples

Example 1: Using Resource Permissions (Recommended)

Example 2: Using Resource ID and Permissions

Response

Related APIs

Sample Response: Get Nodes

Entity (Node)

Entity Attribute

Entity Type

Entity Type Grouping