The users role assignments endpoint implements functions to create, read, and delete the role assignments associated with user resources. For more information about roles and the permissions associated with each role, see Roles.

Role assignments are defined by the role itself, and at a more granular level by the scope attribute associated with the role assignment. The role assignment scope identifies the type of platform resource that defines the scope, and the id of the specific resource to which the scope applies. The following sample shows the scope attribute, which includes the resource type and id attributes. In this case, the scope is restricted to the environment resource identified by its id.

{
  "scope": {
   "id": "d928aa51-c194-4333-9cf5-0fd0c9b7d62f",
   "type": "ENVIRONMENT"
   }
}

Role assignment scope types include:

• Organization

  This scope type designates an organization resource as the assignment scope of the role.

• Environment

  This scope designates an environment resource as the assignment scope of the role.

• Population

  This scope designates a population resource as the assignment scope of the role. The maximum number of roles you can assign is 250.

Use Cases

• Assign a role to a user

Users role assignments data model

Response codes