Manage Connection Objects

Manage your connection settings via the API

This page details the /data v1 API options available to all objects within a connection.

• For a how-to on registering a connection, see the Register a connection guide.

• For details on the /data v1 API options available for connection-level objects, see the Manage connection settings guide.

These endpoints can be used for any connection on any supported technology.

Method	Endpoint	Description
GET	/data/object/{objectPath}	Search for a specific data object
POST	/data/object/search/{objectPath}	Search for the child objects of the data object defined in the objectPath or search all top-level data objects (connections) if the objectPath is omitted
POST	/data/crawl/{objectPath}	Trigger object sync for the specified data object
PUT	/data/settings/{objectPath}	Update the settings through overrides for the specified data object
DELETE	/data/object/{objectPath}	Delete the given data object and all its child objects

GET /data/object/{objectPath}

Search for a specific data object using the object path.

Required Immuta permission: CREATE_DATA_SOURCE, APPLICATION_ADMIN, GOVERNANCE, or Data Owner within the hierarchy

curl -X 'GET' \
  'https://your-immuta-url.com/data/object/yourConnectionKey' \
  -H 'accept: application/json' \
  -H 'Authorization: Bearer your-bearer-token'

Path parameters

Attribute	Description	Required
objectPath string	The list of names that uniquely identify the path to a data object in the remote platform's hierarchy. The first element should be the connectionKey and all names should be separated by forward slashes (/). For example, yourConnectionKey/yourDatabase/yourSchema.	Yes

Response schema

Attribute	Description
objectPath string	The list of names that uniquely identify the path to a data object in the remote platform's hierarchy. The first element should be the connectionKey and all names are separated by forward slashes.
technology string	The technology that the object comes from: Databricks , Glue , or Snowflake.
state string	Whether the object is currently active (enabled) or inactive (disabled).
settings object	Specifications of the connection's settings, including status, new children status, and data owners.
overrides object	Specifications of the data object's settings that differ from its parents' settings.
dataSourceId integer	The ID of the data source if it is a table object that is active.
createdAt timestamp	The time the data object was created in Immuta.
lastCrawled timestamp	The time object sync was last run on the data object.
remoteId string	The ID of the remote data object.

Example response

{
  "objectPath": ["yourConnectionKey"],
  "technology": "Snowflake",
  "state": "active",
  "settings": {
    "activateNewChildren": {
      "value": true,
      "hasDescendantsWithOverrides": false
    },
    "dataOwners": {
      "value": [{
        "id": 2,
        "type": "user"
      }],
      "hasDescendantsWithOverrides": false
    },
    "isActive": {
      "value": true,
      "hasDescendantsWithOverrides": false
    }
  },
  "overrides": [],
  "lastCrawled": 2023 - 08 - 21 T10: 39: 00.250 Z,
  "createdAt": 2023 - 08 - 21 T10: 39: 00.250 Z,
  "remoteId": null
}

POST /data/object/search/{objectPath}

Search for the children of the object defined in the objectPath. Or search all top-level data objects if the objectPath is omitted.

Required Immuta permission: CREATE_DATA_SOURCE, APPLICATION_ADMIN, GOVERNANCE, or Data Owner on the object

curl -X 'POST' \
  'https://your-immuta-url.com/data/object/search/yourConnectionKey' \
  -H 'accept: application/json' \
  -H 'Authorization: Bearer your-bearer-token'

Path parameters

Attribute	Description	Required
objectPath string	The list of names that uniquely identify the path to a data object in the remote platform's hierarchy. The first element should be the connectionKey and all names should be separated by forward slashes (/). For example, yourConnectionKey/yourDatabase/yourSchema.	Yes

Query parameters

Attribute	Description	Required
sortField string	The field to sort the search results.	No
sortOrder string	Denotes whether to sort the results in ascending (asc) or descending (desc) order. Default is asc.	No
offset integer	Use in combination with limit to fetch pages.	No
limit integer	Limits the number of results displayed per page.	No
searchText string	A partial, case-insensitive search on name.	No

Response schema

Attribute	Description
count integer	The number of results for your search.
hits.objectPath string	The list of names that uniquely identify the path to a data object in the remote platform's hierarchy. The first element should be the connectionKey and all names are separated by forward slashes.
hits.technology string	The technology that the object comes from (i.e., Snowflake, Databricks, Glue, etc.).
hits.state string	Whether the object is currently active (enabled) or inactive (disabled).
hits.settings object	Specifications of the connection's settings, including status, new children status, and data owners.
hits.overrides object	Specifications of the data object's settings that differ from its parents' settings.
hits.dataSourceId integer	The ID of the data source if it is a table object that is active (enabled).
hits.createdAt timestamp	The time the data object was created in Immuta.
hits.lastCrawled timestamp	The time object sync was last run on the data object.
hits.remoteId string	The ID of the remote data object.

Example response

{
  "count": 1,
  "hits": [{
    "objectPath": ["yourConnectionKey"],
    "technology": "Snowflake",
    "state": "active",
    "settings": {
      "activateNewChildren": {
        "value": true,
        "hasDescendantsWithOverrides": false
      },
      "dataOwners": {
        "value": [{
          "id": 2,
          "type": "user"
        }],
        "hasDescendantsWithOverrides": false
      },
      "isActive": {
        "value": true,
        "hasDescendantsWithOverrides": false
      }
    },
    "overrides": [],
    "lastCrawled": 2023 - 08 - 21 T10: 39: 00.250 Z,
    "createdAt": 2023 - 08 - 21 T10: 39: 00.250 Z,
    "remoteId": null
  }]
}

POST /data/crawl/{objectPath}

Trigger object sync for the specified data object.

Required Immuta permission: GOVERNANCE or APPLICATION_ADMIN global permission or Data Owner on the object

curl -X 'POST' \
    'https://<your-immuta-url>/data/crawl/yourConnectionKey/yourDatabase/yourSchema' \
    -H 'accept: application/json' \
    -H 'Content-Type: application/json' \
    -H 'Authorization: <your-bearer-token>' \
    -d '{
     "forceRecursive": false
     }'

Path parameters

Attribute	Description	Required
objectPath string	The list of names that uniquely identify the path to a data object in the remote platform's hierarchy. The first element should be the connectionKey and all names should be separated by forward slashes (/). For example, yourConnectionKey/yourDatabase/yourSchema.	Yes

Query parameters

Attribute	Description	Required
forceRecursive boolean	If false, only active (enabled) objects will have object sync run. If true, both active (enabled) and inactive (disabled) data objects will be synced; any child objects from inactive (disabled) objects will be set as inactive (disabled). Defaults to false.	No.

Response schema

Attribute	Description
objectPath string	The list of names that uniquely identify the path to a data object in the remote platform's hierarchy. The first element should be the connectionKey and all names are separated by forward slashes.
bulkId string	A bulk ID that can be used to search for the status of background jobs triggered by this request.

Example response

{
  "objectPath": ['yourConnectionKey', 'yourDatabase', 'yourSchema'],
  "bulkId": 'the-job's-unique-identifier'
}

PUT /data/settings/{objectPath}

Update the settings through overrides for the specified data object. All changes will trickle down to child objects as new overrides; however, existing overrides on child objects will still be respected. Data owners cannot be removed, only added. To remove data owners, edit the settings at the connection level.

Required Immuta permission: APPLICATION_ADMIN or GOVERNANCE global permission

curl -X 'PUT' \
    'https://<your-immuta-url>/data/settings/yourConnectionKey/yourDatabase' \
    -H 'accept: application/json' \
    -H 'Content-Type: application/json' \
    -H 'Authorization: <your-bearer-token>' \
    -d '{
        "overrides": {
          "isActive": true,
          "activateNewChildren": true,
          "dataOwners": [{
            "id": 3,
            "type": "group"
          }]
        }
      }'

Path parameters

Attribute	Description	Required
objectPath string	The list of names that uniquely identify the path to a data object in the remote platform's hierarchy. The first element should be the connectionKey and all names should be separated by forward slashes (/). For example, yourConnectionKey/yourDatabase/yourSchema.	Yes

Body parameters

Attribute	Description	Required
overrides object	A list of settings configured differently from the parent object's settings.	No
overrides.isActive boolean	If true, the object and all its child objects are active (enabled). If you enable a Databricks Unity Catalog data object and it has no subscription policy set on it, Immuta will REVOKE access to the data in Databricks for all Immuta users, even if they had been directly granted access to the table in Unity Catalog. If a user is not registered in Immuta, Immuta will have no effect on that user's access to data in Unity Catalog. See the Databricks Unity Catalog reference guide for more details.	No
overrides.activateNewChildren boolean	If true, all new children found during object sync will be registered as active (enabled).	No
overrides.dataOwners array	A list of users and groups that are data owners on the connection. These users will be data owners for all the data sources under the data object they are assigned to.	No
overrides.dataOwners.id integer	The ID of the user or group to make data owner.	No
overrides.dataOwners.type string	The type to make data owner. Options are user or group.	No

Response schema

Attribute	Description
objectPath string	The list of names that uniquely identify the path to a data object in the remote platform's hierarchy. The first element should be the connectionKey and all names should be separated by forward slashes.
technology string	The backing technology of the connection. Options are Databricks , Glue , or Snowflake.
state string	Whether the object is currently active (enabled) or inactive (disabled).
settings object	Specifications of the connection's settings, including status, new children status, and data owners.
overrides object	Specifications of the data object's settings that differ from its parents' settings.
dataSourceId integer	The ID of the data source if it is a table object that is active (enabled).
createdAt timestamp	The time the data object was created in Immuta.
lastCrawled timestamp	The time object sync was last run on the data object.
remoteId string	The ID of the remote data object.
bulkId string	A bulk ID that can be used to search for the status of background jobs triggered by this request.

Example response

{
  "objectPath": ["yourConnectionKey/yourDatabase"],
  "technology": "Snowflake",
  "state": "active",
  "settings": {
    "activateNewChildren": {
      "value": true,
      "hasDescendantsWithOverrides": true
    },
    "dataOwners": {
      "value": [{
        "id": 2,
        "type": "user"
      }],
      "hasDescendantsWithOverrides": true
    },
    "isActive": {
      "value": true,
      "hasDescendantsWithOverrides": true
    }
  },
  "overrides": [
    "isActive",
    "activateNewChildren",
    "dataOwners"
  ],
  "dataSourceId": null,
  "lastCrawled": 2023 - 08 - 21 T10: 39: 00.250 Z,
  "createdAt": 2023 - 08 - 21 T10: 39: 00.250 Z,
  "remoteId": null,
  "bulkId": 'the-job's-unique-identifier'
}

DELETE /data/object/{objectPath}

Delete the given object and all its child objects. For example, if you delete a database, all its schemas and tables will also be deleted.

Required Immuta permission: GOVERNANCE or APPLICATION_ADMIN global permission or Data Owner on the object

See the Deregister a connection guide to delete a connection and all its data objects.

curl -X 'DELETE' \
    'https://<your-immuta-url>/data/object/yourConnectionKey/yourDatabase/yourSchema' \
    -H 'accept: application/json' \
    -H 'Content-Type: application/json' \
    -H 'Authorization: <your-bearer-token>' 

Path parameters

Attribute	Description	Required
objectPath string	The list of names that uniquely identify the path to a data object in the remote platform's hierarchy. The first element should be the connectionKey and all names should be separated by forward slashes (/). For example, yourConnectionKey/yourDatabase/yourSchema.	Yes

Response schema

Attribute	Description
objectPath string	The list of names that uniquely identify the path to a data object in the remote platform's hierarchy. The first element should be the connectionKey and all names are separated by forward slashes.
childCount integer	The number of child objects of the data object that were deleted.

Example response

{
  "objectPath": ['yourConnectionKey', 'yourDatabase', 'yourSchema'],
  "childCount": 5
}