# at.marque.team.member

> Published by [marque.at](https://lexicon.garden/identity/did:plc:nckosudltxrtrjkt4zz4jy5y)

✓ This is the authoritative definition for this NSID.

## Description

An accepted team member grant, authored by the domain owner. Stored in the owner's repository.

## Links

- [View on Lexicon Garden](https://lexicon.garden/lexicon/did:plc:nckosudltxrtrjkt4zz4jy5y/at.marque.team.member)
- [Documentation](https://lexicon.garden/lexicon/did:plc:nckosudltxrtrjkt4zz4jy5y/at.marque.team.member/docs)
- [Examples](https://lexicon.garden/lexicon/did:plc:nckosudltxrtrjkt4zz4jy5y/at.marque.team.member/examples)

## Definitions

### `at.marque.team.member`

**Type**: `record`

Record representing an owner-authored grant of capabilities to a member. The record key is the stable membership id from PostgreSQL. This record is the portable grant; a record written by the member must never be treated as authorization.

**Key**: `any`

| Property | Type | Required | Description |
|----------|------|----------|-------------|
| `member` | `string` (did) | Yes | DID of the account granted access. |
| `subject` | `ref` → `com.atproto.repo.strongRef` | Yes | Strong reference to the owner's at.marque.team record. |
| `createdAt` | `string` (datetime) | Yes | When the grant was created. |
| `updatedAt` | `string` (datetime) | Yes | When the grant was last updated. |
| `permissions` | `array` | Yes | Capabilities granted to the member. An empty list is read-only (viewer) access. |

## Raw Schema

```json
{
  "id": "at.marque.team.member",
  "defs": {
    "main": {
      "key": "any",
      "type": "record",
      "record": {
        "type": "object",
        "required": [
          "subject",
          "member",
          "permissions",
          "createdAt",
          "updatedAt"
        ],
        "properties": {
          "member": {
            "type": "string",
            "format": "did",
            "description": "DID of the account granted access."
          },
          "subject": {
            "ref": "com.atproto.repo.strongRef",
            "type": "ref",
            "description": "Strong reference to the owner's at.marque.team record."
          },
          "createdAt": {
            "type": "string",
            "format": "datetime",
            "description": "When the grant was created."
          },
          "updatedAt": {
            "type": "string",
            "format": "datetime",
            "description": "When the grant was last updated."
          },
          "permissions": {
            "type": "array",
            "items": {
              "type": "string",
              "knownValues": [
                "dns.records.write",
                "dns.nameservers.write",
                "dns.dnssec.write",
                "integrations.atproto.write"
              ]
            },
            "maxLength": 4,
            "description": "Capabilities granted to the member. An empty list is read-only (viewer) access."
          }
        }
      },
      "description": "Record representing an owner-authored grant of capabilities to a member. The record key is the stable membership id from PostgreSQL. This record is the portable grant; a record written by the member must never be treated as authorization."
    }
  },
  "$type": "com.atproto.lexicon.schema",
  "lexicon": 1,
  "description": "An accepted team member grant, authored by the domain owner. Stored in the owner's repository."
}
```