A valid request URL is required to generate request examples{
"timestamp": "2023-11-07T05:31:56Z",
"status": 404,
"error": "Not Found",
"message": "Not Found.",
"path": "/api/v1/rbac-manager/policies/srn2:policy%23missing"
}{
"timestamp": "2023-11-07T05:31:56Z",
"status": 404,
"error": "Not Found",
"message": "Not Found.",
"path": "/api/v1/rbac-manager/policies/srn2:policy%23missing"
}{
"timestamp": "2023-11-07T05:31:56Z",
"status": 404,
"error": "Not Found",
"message": "Not Found.",
"path": "/api/v1/rbac-manager/policies/srn2:policy%23missing"
}{
"status": 404,
"error": "Not Found",
"message": "Not Found."
}Role assignments
Assign a role to a subject
Grants the role to a user, an identity-provider group, an email domain, or a service token. Assignments cannot be edited: to move a subject to a different role, delete the assignment and create a new one.
POST
/
roles
/
{roleSrn}
/
create-assignment
A valid request URL is required to generate request examples{
"timestamp": "2023-11-07T05:31:56Z",
"status": 404,
"error": "Not Found",
"message": "Not Found.",
"path": "/api/v1/rbac-manager/policies/srn2:policy%23missing"
}{
"timestamp": "2023-11-07T05:31:56Z",
"status": 404,
"error": "Not Found",
"message": "Not Found.",
"path": "/api/v1/rbac-manager/policies/srn2:policy%23missing"
}{
"timestamp": "2023-11-07T05:31:56Z",
"status": 404,
"error": "Not Found",
"message": "Not Found.",
"path": "/api/v1/rbac-manager/policies/srn2:policy%23missing"
}{
"status": 404,
"error": "Not Found",
"message": "Not Found."
}Authorizations
A StarTree API token or a service token (st-<accessKey>-<secretKey>).
Path Parameters
SRN of the role, with # encoded as %23.
Body
application/json
The user email, group name, domain, or service token access key, depending on subjectType.
Example:
"jane.doe@example.com"
user-email: an individual user's email address.group: the name of a group in your identity provider.domain: an email domain, such asexample.com.service-token: a service token, identified by its access key (the 16 characters betweenst-and the next-).
Available options:
user-email, group, domain, service-token Optional key-value metadata stored with the assignment.
Show child attributes
Show child attributes
Response
Role assigned. The response body is empty.
Was this page helpful?