curl --request POST \
  --url https://{server}/api/assets/permissions/intersection/ \
  --header 'Content-Type: application/json' \
  --cookie sessionid= \
  --data '
{
  "asset_ids": [
    "3c90c3cc-0d44-4b50-8888-8dd25736052a"
  ]
}
'

[
  {
    "subject": {
      "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "subject_type": "<string>",
      "name": "<string>",
      "email": "<string>"
    },
    "flags": 123
  }
]