Skip to main content
The RBAC Manager API is the programmatic way to do everything the Security Manager UI does: define policies, group them into roles, assign roles to users, groups, domains, and service tokens, and check what a subject is allowed to do. The base URL is https://rbac-manager.<env>.startree.cloud/api/v1/rbac-manager, where <env> is your environment. Every call needs an Authorization: Bearer <token> header. See Generating an API Token. Resources are addressed by StarTree Resource Name (SRN), for example srn2:policy#my-policy or srn2:role#table-reader. In a URL path, encode the # as %23.

Using the RBAC API

Step-by-step walkthrough: create a policy, create a role, attach the policy, assign the role.

Custom policies

Policy document format, SRN syntax, and example policies for common roles.