---
title: "Grant an EZGH product access to a secret"
description: "Lets one product (consumer) read the secret for one of its resources (consumerResource, a resource name in the secret's organization of a type that product uses secrets for). version is \"latest\" (default) or a number. Needs secrets.grants.create and secrets.versions.access on the secret, so nobody can grant more than they could read. A second grant for the same consumer and resource is 409 grant_exists; while grants are switched off the answer is 409 grants_unavailable. Uses an Idempotency-Key."
---

> Documentation Index
> Fetch the complete documentation index at: https://docs.ezghcloud.com/llms.txt
> Use this file to discover all available pages before exploring further.

Path: Secrets API

`POST /v1/organizations/{orgId}/projects/{projectId}/secrets/{secretId}/grants`

Lets one product (consumer) read the secret for one of its resources (consumerResource, a resource name in the secret's organization of a type that product uses secrets for). version is "latest" (default) or a number. Needs secrets.grants.create and secrets.versions.access on the secret, so nobody can grant more than they could read. A second grant for the same consumer and resource is 409 grant_exists; while grants are switched off the answer is 409 grants_unavailable. Uses an Idempotency-Key.

## Authentication

Requires one of the following:

- `apiKey`, http, header `Authorization`
- `oauth`, http, header `Authorization`
- `sessionCookie`, apiKey, in cookie

## Path parameters

- `CreateSecretGrant.path.orgId` (string, required)
  - format `uuid`
- `CreateSecretGrant.path.projectId` (string, required)
  - format `uuid`
- `CreateSecretGrant.path.secretId` (string, required)
  - format `uuid`

## Header parameters

- `CreateSecretGrant.header.Idempotency-Key` (string, optional) — Makes a retry safe: the same key and request get the stored response.
  - pattern `^[\x21-\x7e]{1,200}$`

## Request body

_Required._

- `CreateSecretGrant.consumer` (string, required) — The product's namespace, such as mcpcentral.
- `CreateSecretGrant.consumerResource` (string, required) — The product resource's name.
- `CreateSecretGrant.version` (one of, optional) — "latest" (default) or a version number the grant is pinned to, as a string or an integer.
  - default `"latest"`
  - one of: `string`, `integer`

## Example request

```json
{
  "consumer": "string",
  "consumerResource": "string",
  "version": "latest"
}
```

## Code samples

### cURL

```curl
curl --request POST \
  --url https://secrets.ezghcloud.com/v1/organizations/497f6eca-6276-4993-bfeb-53cbbbba6f08/projects/497f6eca-6276-4993-bfeb-53cbbbba6f08/secrets/497f6eca-6276-4993-bfeb-53cbbbba6f08/grants \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "consumer": "string",
  "consumerResource": "string",
  "version": "latest"
}
'
```

### TypeScript

```typescript
const url = 'https://secrets.ezghcloud.com/v1/organizations/497f6eca-6276-4993-bfeb-53cbbbba6f08/projects/497f6eca-6276-4993-bfeb-53cbbbba6f08/secrets/497f6eca-6276-4993-bfeb-53cbbbba6f08/grants';
const options = {
  method: 'POST',
  headers: {'Content-Type': 'application/json', Authorization: 'Bearer <token>'},
  body: JSON.stringify({consumer: 'string', consumerResource: 'string', version: 'latest'})
};

fetch(url, options)
  .then(res => res.json())
  .then(json => console.log(json))
  .catch(err => console.error(err));
```

### Python

```python
import requests

url = "https://secrets.ezghcloud.com/v1/organizations/497f6eca-6276-4993-bfeb-53cbbbba6f08/projects/497f6eca-6276-4993-bfeb-53cbbbba6f08/secrets/497f6eca-6276-4993-bfeb-53cbbbba6f08/grants"

payload = {
    "consumer": "string",
    "consumerResource": "string",
    "version": "latest"
}
headers = {
    "Content-Type": "application/json",
    "Authorization": "Bearer <token>"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)
```

## Responses

### 201

The new grant.

#### Example

```json
{
  "consumer": "string",
  "consumerResource": "string",
  "createdAt": "2019-08-24T14:15:22Z",
  "createdBy": {},
  "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
  "secretId": "c39edb4b-1d7b-4287-b1be-9dcaba334a25",
  "slug": "string",
  "version": "string"
}
```

- `CreateSecretGrant.response.201.consumer` (string, required)
- `CreateSecretGrant.response.201.consumerResource` (string, required)
- `CreateSecretGrant.response.201.createdAt` (string, required)
  - format `date-time`
- `CreateSecretGrant.response.201.createdBy` (object, required) — The creator's Trails userIdentity.
- `CreateSecretGrant.response.201.id` (string, required)
  - format `uuid`
- `CreateSecretGrant.response.201.secretId` (string, required)
  - format `uuid`
- `CreateSecretGrant.response.201.slug` (string, required)
- `CreateSecretGrant.response.201.version` (string, required)

### 400

invalid_request (with issues), invalid_cursor, or the endpoint's own 400 codes.

#### Example

```json
{
  "error": {
    "code": "string",
    "issues": [
      {
        "message": "string",
        "path": "string"
      }
    ],
    "message": "string",
    "quota": {
      "id": "string",
      "inFlight": 0,
      "kind": "allocation",
      "limit": 0,
      "periodStart": "2019-08-24T14:15:22Z",
      "region": "string",
      "resetsAt": "2019-08-24T14:15:22Z",
      "scope": "organization",
      "scopeResourceName": "string",
      "used": 0,
      "window": "string"
    }
  }
}
```

- `CreateSecretGrant.response.400.error` (object, required)
  - `CreateSecretGrant.response.400.error.code` (string, required)
    - maxLength 64; pattern `^[a-z][a-z0-9_]*$`
  - `CreateSecretGrant.response.400.error.message` (string, required)
    - maxLength 1024
  - `CreateSecretGrant.response.400.error.issues` (array<object>, optional) — invalid_request: one entry per problem, at a dotted path.
    - `CreateSecretGrant.response.400.error.issues.message` (string, required)
    - `CreateSecretGrant.response.400.error.issues.path` (string, required)
  - `CreateSecretGrant.response.400.error.quota` (object, optional) — quota_exceeded: the quota that refused the request. Never with Retry-After.
    - `CreateSecretGrant.response.400.error.quota.id` (string, required)
    - `CreateSecretGrant.response.400.error.quota.kind` (unknown, required)
      - one of `"allocation"`, `"rate"`, `"usage"`, `"concurrency"`
    - `CreateSecretGrant.response.400.error.quota.limit` (integer, required)
      - min 0
    - `CreateSecretGrant.response.400.error.quota.scope` (unknown, required)
      - one of `"organization"`, `"project"`, `"resource"`
    - `CreateSecretGrant.response.400.error.quota.inFlight` (integer, optional)
      - min 0
    - `CreateSecretGrant.response.400.error.quota.periodStart` (string, optional)
      - format `date-time`
    - `CreateSecretGrant.response.400.error.quota.region` (string, optional)
    - `CreateSecretGrant.response.400.error.quota.resetsAt` (string, optional)
      - format `date-time`
    - `CreateSecretGrant.response.400.error.quota.scopeResourceName` (string, optional)
    - `CreateSecretGrant.response.400.error.quota.used` (integer, optional)
      - min 0
    - `CreateSecretGrant.response.400.error.quota.window` (string, optional) — rate only: an ISO 8601 duration, PT1S to PT1H.

### 401

unauthenticated: no credential, or one that doesn't check out.

#### Example

```json
{
  "error": {
    "code": "string",
    "issues": [
      {
        "message": "string",
        "path": "string"
      }
    ],
    "message": "string",
    "quota": {
      "id": "string",
      "inFlight": 0,
      "kind": "allocation",
      "limit": 0,
      "periodStart": "2019-08-24T14:15:22Z",
      "region": "string",
      "resetsAt": "2019-08-24T14:15:22Z",
      "scope": "organization",
      "scopeResourceName": "string",
      "used": 0,
      "window": "string"
    }
  }
}
```

- `CreateSecretGrant.response.401.error` (object, required)
  - `CreateSecretGrant.response.401.error.code` (string, required)
    - maxLength 64; pattern `^[a-z][a-z0-9_]*$`
  - `CreateSecretGrant.response.401.error.message` (string, required)
    - maxLength 1024
  - `CreateSecretGrant.response.401.error.issues` (array<object>, optional) — invalid_request: one entry per problem, at a dotted path.
    - `CreateSecretGrant.response.401.error.issues.message` (string, required)
    - `CreateSecretGrant.response.401.error.issues.path` (string, required)
  - `CreateSecretGrant.response.401.error.quota` (object, optional) — quota_exceeded: the quota that refused the request. Never with Retry-After.
    - `CreateSecretGrant.response.401.error.quota.id` (string, required)
    - `CreateSecretGrant.response.401.error.quota.kind` (unknown, required)
      - one of `"allocation"`, `"rate"`, `"usage"`, `"concurrency"`
    - `CreateSecretGrant.response.401.error.quota.limit` (integer, required)
      - min 0
    - `CreateSecretGrant.response.401.error.quota.scope` (unknown, required)
      - one of `"organization"`, `"project"`, `"resource"`
    - `CreateSecretGrant.response.401.error.quota.inFlight` (integer, optional)
      - min 0
    - `CreateSecretGrant.response.401.error.quota.periodStart` (string, optional)
      - format `date-time`
    - `CreateSecretGrant.response.401.error.quota.region` (string, optional)
    - `CreateSecretGrant.response.401.error.quota.resetsAt` (string, optional)
      - format `date-time`
    - `CreateSecretGrant.response.401.error.quota.scopeResourceName` (string, optional)
    - `CreateSecretGrant.response.401.error.quota.used` (integer, optional)
      - min 0
    - `CreateSecretGrant.response.401.error.quota.window` (string, optional) — rate only: an ISO 8601 duration, PT1S to PT1H.

### 403

access_denied: the caller's policies don't allow the action; forbidden_origin: a cookie-authenticated write from an origin that isn't allowed; spend_limit_reached.

#### Example

```json
{
  "error": {
    "code": "string",
    "issues": [
      {
        "message": "string",
        "path": "string"
      }
    ],
    "message": "string",
    "quota": {
      "id": "string",
      "inFlight": 0,
      "kind": "allocation",
      "limit": 0,
      "periodStart": "2019-08-24T14:15:22Z",
      "region": "string",
      "resetsAt": "2019-08-24T14:15:22Z",
      "scope": "organization",
      "scopeResourceName": "string",
      "used": 0,
      "window": "string"
    }
  }
}
```

- `CreateSecretGrant.response.403.error` (object, required)
  - `CreateSecretGrant.response.403.error.code` (string, required)
    - maxLength 64; pattern `^[a-z][a-z0-9_]*$`
  - `CreateSecretGrant.response.403.error.message` (string, required)
    - maxLength 1024
  - `CreateSecretGrant.response.403.error.issues` (array<object>, optional) — invalid_request: one entry per problem, at a dotted path.
    - `CreateSecretGrant.response.403.error.issues.message` (string, required)
    - `CreateSecretGrant.response.403.error.issues.path` (string, required)
  - `CreateSecretGrant.response.403.error.quota` (object, optional) — quota_exceeded: the quota that refused the request. Never with Retry-After.
    - `CreateSecretGrant.response.403.error.quota.id` (string, required)
    - `CreateSecretGrant.response.403.error.quota.kind` (unknown, required)
      - one of `"allocation"`, `"rate"`, `"usage"`, `"concurrency"`
    - `CreateSecretGrant.response.403.error.quota.limit` (integer, required)
      - min 0
    - `CreateSecretGrant.response.403.error.quota.scope` (unknown, required)
      - one of `"organization"`, `"project"`, `"resource"`
    - `CreateSecretGrant.response.403.error.quota.inFlight` (integer, optional)
      - min 0
    - `CreateSecretGrant.response.403.error.quota.periodStart` (string, optional)
      - format `date-time`
    - `CreateSecretGrant.response.403.error.quota.region` (string, optional)
    - `CreateSecretGrant.response.403.error.quota.resetsAt` (string, optional)
      - format `date-time`
    - `CreateSecretGrant.response.403.error.quota.scopeResourceName` (string, optional)
    - `CreateSecretGrant.response.403.error.quota.used` (integer, optional)
      - min 0
    - `CreateSecretGrant.response.403.error.quota.window` (string, optional) — rate only: an ISO 8601 duration, PT1S to PT1H.

### 404

not_found: unknown, malformed, or in an organization the caller isn't in.

#### Example

```json
{
  "error": {
    "code": "string",
    "issues": [
      {
        "message": "string",
        "path": "string"
      }
    ],
    "message": "string",
    "quota": {
      "id": "string",
      "inFlight": 0,
      "kind": "allocation",
      "limit": 0,
      "periodStart": "2019-08-24T14:15:22Z",
      "region": "string",
      "resetsAt": "2019-08-24T14:15:22Z",
      "scope": "organization",
      "scopeResourceName": "string",
      "used": 0,
      "window": "string"
    }
  }
}
```

- `CreateSecretGrant.response.404.error` (object, required)
  - `CreateSecretGrant.response.404.error.code` (string, required)
    - maxLength 64; pattern `^[a-z][a-z0-9_]*$`
  - `CreateSecretGrant.response.404.error.message` (string, required)
    - maxLength 1024
  - `CreateSecretGrant.response.404.error.issues` (array<object>, optional) — invalid_request: one entry per problem, at a dotted path.
    - `CreateSecretGrant.response.404.error.issues.message` (string, required)
    - `CreateSecretGrant.response.404.error.issues.path` (string, required)
  - `CreateSecretGrant.response.404.error.quota` (object, optional) — quota_exceeded: the quota that refused the request. Never with Retry-After.
    - `CreateSecretGrant.response.404.error.quota.id` (string, required)
    - `CreateSecretGrant.response.404.error.quota.kind` (unknown, required)
      - one of `"allocation"`, `"rate"`, `"usage"`, `"concurrency"`
    - `CreateSecretGrant.response.404.error.quota.limit` (integer, required)
      - min 0
    - `CreateSecretGrant.response.404.error.quota.scope` (unknown, required)
      - one of `"organization"`, `"project"`, `"resource"`
    - `CreateSecretGrant.response.404.error.quota.inFlight` (integer, optional)
      - min 0
    - `CreateSecretGrant.response.404.error.quota.periodStart` (string, optional)
      - format `date-time`
    - `CreateSecretGrant.response.404.error.quota.region` (string, optional)
    - `CreateSecretGrant.response.404.error.quota.resetsAt` (string, optional)
      - format `date-time`
    - `CreateSecretGrant.response.404.error.quota.scopeResourceName` (string, optional)
    - `CreateSecretGrant.response.404.error.quota.used` (integer, optional)
      - min 0
    - `CreateSecretGrant.response.404.error.quota.window` (string, optional) — rate only: an ISO 8601 duration, PT1S to PT1H.

### 409

quota_exceeded (an allocation quota, with quota), idempotency_conflict, idempotency_in_progress (with Retry-After), organization_deletion_pending, operation_in_progress, or the endpoint's own 409 codes.

#### Example

```json
{
  "error": {
    "code": "string",
    "issues": [
      {
        "message": "string",
        "path": "string"
      }
    ],
    "message": "string",
    "quota": {
      "id": "string",
      "inFlight": 0,
      "kind": "allocation",
      "limit": 0,
      "periodStart": "2019-08-24T14:15:22Z",
      "region": "string",
      "resetsAt": "2019-08-24T14:15:22Z",
      "scope": "organization",
      "scopeResourceName": "string",
      "used": 0,
      "window": "string"
    }
  }
}
```

- `CreateSecretGrant.response.409.error` (object, required)
  - `CreateSecretGrant.response.409.error.code` (string, required)
    - maxLength 64; pattern `^[a-z][a-z0-9_]*$`
  - `CreateSecretGrant.response.409.error.message` (string, required)
    - maxLength 1024
  - `CreateSecretGrant.response.409.error.issues` (array<object>, optional) — invalid_request: one entry per problem, at a dotted path.
    - `CreateSecretGrant.response.409.error.issues.message` (string, required)
    - `CreateSecretGrant.response.409.error.issues.path` (string, required)
  - `CreateSecretGrant.response.409.error.quota` (object, optional) — quota_exceeded: the quota that refused the request. Never with Retry-After.
    - `CreateSecretGrant.response.409.error.quota.id` (string, required)
    - `CreateSecretGrant.response.409.error.quota.kind` (unknown, required)
      - one of `"allocation"`, `"rate"`, `"usage"`, `"concurrency"`
    - `CreateSecretGrant.response.409.error.quota.limit` (integer, required)
      - min 0
    - `CreateSecretGrant.response.409.error.quota.scope` (unknown, required)
      - one of `"organization"`, `"project"`, `"resource"`
    - `CreateSecretGrant.response.409.error.quota.inFlight` (integer, optional)
      - min 0
    - `CreateSecretGrant.response.409.error.quota.periodStart` (string, optional)
      - format `date-time`
    - `CreateSecretGrant.response.409.error.quota.region` (string, optional)
    - `CreateSecretGrant.response.409.error.quota.resetsAt` (string, optional)
      - format `date-time`
    - `CreateSecretGrant.response.409.error.quota.scopeResourceName` (string, optional)
    - `CreateSecretGrant.response.409.error.quota.used` (integer, optional)
      - min 0
    - `CreateSecretGrant.response.409.error.quota.window` (string, optional) — rate only: an ISO 8601 duration, PT1S to PT1H.

### 413

payload_too_large: the body is over the endpoint's limit (1 MiB unless it says otherwise).

#### Example

```json
{
  "error": {
    "code": "string",
    "issues": [
      {
        "message": "string",
        "path": "string"
      }
    ],
    "message": "string",
    "quota": {
      "id": "string",
      "inFlight": 0,
      "kind": "allocation",
      "limit": 0,
      "periodStart": "2019-08-24T14:15:22Z",
      "region": "string",
      "resetsAt": "2019-08-24T14:15:22Z",
      "scope": "organization",
      "scopeResourceName": "string",
      "used": 0,
      "window": "string"
    }
  }
}
```

- `CreateSecretGrant.response.413.error` (object, required)
  - `CreateSecretGrant.response.413.error.code` (string, required)
    - maxLength 64; pattern `^[a-z][a-z0-9_]*$`
  - `CreateSecretGrant.response.413.error.message` (string, required)
    - maxLength 1024
  - `CreateSecretGrant.response.413.error.issues` (array<object>, optional) — invalid_request: one entry per problem, at a dotted path.
    - `CreateSecretGrant.response.413.error.issues.message` (string, required)
    - `CreateSecretGrant.response.413.error.issues.path` (string, required)
  - `CreateSecretGrant.response.413.error.quota` (object, optional) — quota_exceeded: the quota that refused the request. Never with Retry-After.
    - `CreateSecretGrant.response.413.error.quota.id` (string, required)
    - `CreateSecretGrant.response.413.error.quota.kind` (unknown, required)
      - one of `"allocation"`, `"rate"`, `"usage"`, `"concurrency"`
    - `CreateSecretGrant.response.413.error.quota.limit` (integer, required)
      - min 0
    - `CreateSecretGrant.response.413.error.quota.scope` (unknown, required)
      - one of `"organization"`, `"project"`, `"resource"`
    - `CreateSecretGrant.response.413.error.quota.inFlight` (integer, optional)
      - min 0
    - `CreateSecretGrant.response.413.error.quota.periodStart` (string, optional)
      - format `date-time`
    - `CreateSecretGrant.response.413.error.quota.region` (string, optional)
    - `CreateSecretGrant.response.413.error.quota.resetsAt` (string, optional)
      - format `date-time`
    - `CreateSecretGrant.response.413.error.quota.scopeResourceName` (string, optional)
    - `CreateSecretGrant.response.413.error.quota.used` (integer, optional)
      - min 0
    - `CreateSecretGrant.response.413.error.quota.window` (string, optional) — rate only: an ISO 8601 duration, PT1S to PT1H.

### 429

too_many_requests, with Retry-After; or quota_exceeded (a rate, usage or concurrency quota, with quota), never with Retry-After.

#### Example

```json
{
  "error": {
    "code": "string",
    "issues": [
      {
        "message": "string",
        "path": "string"
      }
    ],
    "message": "string",
    "quota": {
      "id": "string",
      "inFlight": 0,
      "kind": "allocation",
      "limit": 0,
      "periodStart": "2019-08-24T14:15:22Z",
      "region": "string",
      "resetsAt": "2019-08-24T14:15:22Z",
      "scope": "organization",
      "scopeResourceName": "string",
      "used": 0,
      "window": "string"
    }
  }
}
```

- `CreateSecretGrant.response.429.error` (object, required)
  - `CreateSecretGrant.response.429.error.code` (string, required)
    - maxLength 64; pattern `^[a-z][a-z0-9_]*$`
  - `CreateSecretGrant.response.429.error.message` (string, required)
    - maxLength 1024
  - `CreateSecretGrant.response.429.error.issues` (array<object>, optional) — invalid_request: one entry per problem, at a dotted path.
    - `CreateSecretGrant.response.429.error.issues.message` (string, required)
    - `CreateSecretGrant.response.429.error.issues.path` (string, required)
  - `CreateSecretGrant.response.429.error.quota` (object, optional) — quota_exceeded: the quota that refused the request. Never with Retry-After.
    - `CreateSecretGrant.response.429.error.quota.id` (string, required)
    - `CreateSecretGrant.response.429.error.quota.kind` (unknown, required)
      - one of `"allocation"`, `"rate"`, `"usage"`, `"concurrency"`
    - `CreateSecretGrant.response.429.error.quota.limit` (integer, required)
      - min 0
    - `CreateSecretGrant.response.429.error.quota.scope` (unknown, required)
      - one of `"organization"`, `"project"`, `"resource"`
    - `CreateSecretGrant.response.429.error.quota.inFlight` (integer, optional)
      - min 0
    - `CreateSecretGrant.response.429.error.quota.periodStart` (string, optional)
      - format `date-time`
    - `CreateSecretGrant.response.429.error.quota.region` (string, optional)
    - `CreateSecretGrant.response.429.error.quota.resetsAt` (string, optional)
      - format `date-time`
    - `CreateSecretGrant.response.429.error.quota.scopeResourceName` (string, optional)
    - `CreateSecretGrant.response.429.error.quota.used` (integer, optional)
      - min 0
    - `CreateSecretGrant.response.429.error.quota.window` (string, optional) — rate only: an ISO 8601 duration, PT1S to PT1H.

### 500

internal_error: a bug; the details are in the logs, under the request ID.

#### Example

```json
{
  "error": {
    "code": "string",
    "issues": [
      {
        "message": "string",
        "path": "string"
      }
    ],
    "message": "string",
    "quota": {
      "id": "string",
      "inFlight": 0,
      "kind": "allocation",
      "limit": 0,
      "periodStart": "2019-08-24T14:15:22Z",
      "region": "string",
      "resetsAt": "2019-08-24T14:15:22Z",
      "scope": "organization",
      "scopeResourceName": "string",
      "used": 0,
      "window": "string"
    }
  }
}
```

- `CreateSecretGrant.response.500.error` (object, required)
  - `CreateSecretGrant.response.500.error.code` (string, required)
    - maxLength 64; pattern `^[a-z][a-z0-9_]*$`
  - `CreateSecretGrant.response.500.error.message` (string, required)
    - maxLength 1024
  - `CreateSecretGrant.response.500.error.issues` (array<object>, optional) — invalid_request: one entry per problem, at a dotted path.
    - `CreateSecretGrant.response.500.error.issues.message` (string, required)
    - `CreateSecretGrant.response.500.error.issues.path` (string, required)
  - `CreateSecretGrant.response.500.error.quota` (object, optional) — quota_exceeded: the quota that refused the request. Never with Retry-After.
    - `CreateSecretGrant.response.500.error.quota.id` (string, required)
    - `CreateSecretGrant.response.500.error.quota.kind` (unknown, required)
      - one of `"allocation"`, `"rate"`, `"usage"`, `"concurrency"`
    - `CreateSecretGrant.response.500.error.quota.limit` (integer, required)
      - min 0
    - `CreateSecretGrant.response.500.error.quota.scope` (unknown, required)
      - one of `"organization"`, `"project"`, `"resource"`
    - `CreateSecretGrant.response.500.error.quota.inFlight` (integer, optional)
      - min 0
    - `CreateSecretGrant.response.500.error.quota.periodStart` (string, optional)
      - format `date-time`
    - `CreateSecretGrant.response.500.error.quota.region` (string, optional)
    - `CreateSecretGrant.response.500.error.quota.resetsAt` (string, optional)
      - format `date-time`
    - `CreateSecretGrant.response.500.error.quota.scopeResourceName` (string, optional)
    - `CreateSecretGrant.response.500.error.quota.used` (integer, optional)
      - min 0
    - `CreateSecretGrant.response.500.error.quota.window` (string, optional) — rate only: an ISO 8601 duration, PT1S to PT1H.

### 503

unavailable: a dependency the request needs is down. Retry after Retry-After.

#### Example

```json
{
  "error": {
    "code": "string",
    "issues": [
      {
        "message": "string",
        "path": "string"
      }
    ],
    "message": "string",
    "quota": {
      "id": "string",
      "inFlight": 0,
      "kind": "allocation",
      "limit": 0,
      "periodStart": "2019-08-24T14:15:22Z",
      "region": "string",
      "resetsAt": "2019-08-24T14:15:22Z",
      "scope": "organization",
      "scopeResourceName": "string",
      "used": 0,
      "window": "string"
    }
  }
}
```

- `CreateSecretGrant.response.503.error` (object, required)
  - `CreateSecretGrant.response.503.error.code` (string, required)
    - maxLength 64; pattern `^[a-z][a-z0-9_]*$`
  - `CreateSecretGrant.response.503.error.message` (string, required)
    - maxLength 1024
  - `CreateSecretGrant.response.503.error.issues` (array<object>, optional) — invalid_request: one entry per problem, at a dotted path.
    - `CreateSecretGrant.response.503.error.issues.message` (string, required)
    - `CreateSecretGrant.response.503.error.issues.path` (string, required)
  - `CreateSecretGrant.response.503.error.quota` (object, optional) — quota_exceeded: the quota that refused the request. Never with Retry-After.
    - `CreateSecretGrant.response.503.error.quota.id` (string, required)
    - `CreateSecretGrant.response.503.error.quota.kind` (unknown, required)
      - one of `"allocation"`, `"rate"`, `"usage"`, `"concurrency"`
    - `CreateSecretGrant.response.503.error.quota.limit` (integer, required)
      - min 0
    - `CreateSecretGrant.response.503.error.quota.scope` (unknown, required)
      - one of `"organization"`, `"project"`, `"resource"`
    - `CreateSecretGrant.response.503.error.quota.inFlight` (integer, optional)
      - min 0
    - `CreateSecretGrant.response.503.error.quota.periodStart` (string, optional)
      - format `date-time`
    - `CreateSecretGrant.response.503.error.quota.region` (string, optional)
    - `CreateSecretGrant.response.503.error.quota.resetsAt` (string, optional)
      - format `date-time`
    - `CreateSecretGrant.response.503.error.quota.scopeResourceName` (string, optional)
    - `CreateSecretGrant.response.503.error.quota.used` (integer, optional)
      - min 0
    - `CreateSecretGrant.response.503.error.quota.window` (string, optional) — rate only: an ISO 8601 duration, PT1S to PT1H.


Source: https://docs.ezghcloud.com/secrets-api/CreateSecretGrant/index.md