# Sharing & identity API

> Share resources with grants, list teams, and identify the token under /api/grants, /api/orgs, and /api/whoami.

*[View this page in the Flax docs](https://flax-analytics.com/docs/api-reference/sharing)*

Share charts, sheets, and dashboards with teams or people, and discover the identity
and teams a token can act on.

## Identify the token

`GET /api/whoami` — the calling token's user, org (tenant), org role, seat, scopes,
and team memberships. Unlike `/api/me` (browser-only), this is available to a
service-account token — call it first to learn your `orgId` and check your scopes.

## Teams

`GET /api/orgs/{orgId}/teams` — the org's teams (each with your role). Use a team id as
`granteeTeamId` below, or as `teamId` when creating a team-scoped resource.

## Grants

- `GET /api/grants?resourceType=&resourceId=` — the grants on a resource.
- `POST /api/grants` — share a resource with a team or person at `view` or `edit`.
  Requires the `write` scope and org-admin or the owning team's lead. For a **dashboard**,
  set `cascadeChartsPermission` to also grant its underlying charts — otherwise the
  recipient opens the dashboard with empty tiles.
- `DELETE /api/grants/{grantId}?resourceType=&resourceId=` — revoke a grant (`manage`).

```bash
# share a dashboard with a team, and its charts at view
curl -X POST https://flax-analytics.com/api/grants \
  -H "Authorization: Bearer flax_pat_..." \
  -H "Content-Type: application/json" \
  -d '{"resourceType":"dashboard","resourceId":"dsh_1","granteeTeamId":"team_1",
       "permission":"view","cascadeChartsPermission":"view"}'
```

## Related

- [Teams & RBAC](/docs/administration/teams-and-rbac)