List all capability grants, or one user via ?userId (admin)

Authenticate every request with Authorization: Bearer <token> — a JWT or API token.

Download OpenAPI JSON