{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "title": "Tenant and object authorization evaluation inputs",
  "description": "Change tenant membership, action scope or the writable field to inspect the authorization boundary.",
  "type": "object",
  "required": [
    "requested_tenant",
    "authorized_tenants",
    "scopes",
    "field"
  ],
  "properties": {
    "requested_tenant": {
      "type": "string",
      "description": "Tenant selected in the request."
    },
    "authorized_tenants": {
      "type": "array",
      "description": "Tenants established by trusted membership.",
      "items": {
        "type": "string"
      }
    },
    "scopes": {
      "type": "array",
      "description": "Granted action scopes.",
      "items": {
        "type": "string"
      }
    },
    "field": {
      "type": "string",
      "description": "Field the caller intends to update."
    }
  },
  "additionalProperties": false
}