Minimal API to get allowed operations on resources