Assignments

List Role Assignments Endpoint

get

Endpoint to list role assignments.

Args: role_id: ID of the role for which to list assignments. workspace_id: ID of the workspace for which to list assignments. project_id: ID of the project for which to list assignments. user: The authenticated user. rbac: RBAC component.

Returns: The users and teams that have this role assigned to them.

Authorizations

OAuth2ComboScheme

OAuth2clientCredentialsRequired

Token URL:

---

OAuth2authorizationCodeRequired

Authorization URL: Token URL: Refresh URL:

Path parameters

role_idstring · uuidRequired

Query parameters

workspace_idstring · uuid · nullableOptional

project_idstring · uuid · nullableOptional

Responses

200

Successful Response

application/json

Model for viewing role assignments.

organization_idstring · uuidRequired

workspace_idstring · uuid · nullableOptional

project_idstring · uuid · nullableOptional

422

Validation Error

application/json

get/roles/{role_id}/assignments

HTTPcURLJavaScriptPython

GET /roles/{role_id}/assignments HTTP/1.1
Authorization: Bearer YOUR_OAUTH2_TOKEN
Accept: */*

[
  {
    "user": {
      "password": "text",
      "password_expired": true,
      "name": "text",
      "avatar_url": "text",
      "company": "text",
      "job_title": "text",
      "metadata": {
        "ANY_ADDITIONAL_PROPERTY": "anything"
      },
      "id": "123e4567-e89b-12d3-a456-426614174000",
      "username": "text",
      "email": "text",
      "oauth_provider": "text",
      "oauth_id": "text",
      "is_active": true,
      "is_superuser": false,
      "is_service_account": false,
      "organization_id": "123e4567-e89b-12d3-a456-426614174000",
      "password_changed_at": "2026-07-14T20:59:12.861Z",
      "is_onboarded": false
    },
    "team": {
      "name": "text",
      "description": "text",
      "id": "123e4567-e89b-12d3-a456-426614174000",
      "created": "2026-07-14T20:59:12.861Z",
      "updated": "2026-07-14T20:59:12.861Z",
      "member_count": 1
    },
    "invitation": {
      "id": "123e4567-e89b-12d3-a456-426614174000",
      "inviting_user_id": "123e4567-e89b-12d3-a456-426614174000",
      "email": "[e-mail]",
      "organization_id": "123e4567-e89b-12d3-a456-426614174000",
      "expiration_date": "2026-07-14T20:59:12.861Z",
      "state": "pending",
      "auto_accept": false
    },
    "role": {
      "name": "text",
      "description": "text",
      "id": "123e4567-e89b-12d3-a456-426614174000",
      "organization_id": "123e4567-e89b-12d3-a456-426614174000",
      "level": "organization",
      "system_managed": true,
      "type": "normal"
    },
    "organization_id": "123e4567-e89b-12d3-a456-426614174000",
    "workspace_id": "123e4567-e89b-12d3-a456-426614174000",
    "project_id": "123e4567-e89b-12d3-a456-426614174000"
  }
]

Assign Role Endpoint

post

Endpoint to assign a role.

Args: role_id: ID of the role to assign. user_id: ID of the user to assign the role to. team_id: ID of the team to assign the role to. invitation_id: ID of the invitation to assign the role to. workspace_id: ID of the workspace to assign the role to. project_id: ID of the project to assign the role to. user: The authenticated user. rbac: RBAC component. organization_manager: Organization manager.

Returns: Model of the created role assignment.

Raises: ValueError: If both or None of user_id and team_id are specified. ValueError: If project_id is specified but workspace_id is not. IllegalOperationError: If the user/team and role are not part of the same organization. IllegalOperationError: If the role can't be assigned at the given scope. IllegalOperationError: If the role is a share role.

Authorizations

OAuth2ComboScheme

OAuth2clientCredentialsRequired

Token URL:

---

OAuth2authorizationCodeRequired

Authorization URL: Token URL: Refresh URL:

Path parameters

role_idstring · uuidRequired

Query parameters

user_idstring · uuid · nullableOptional

team_idstring · uuid · nullableOptional

invitation_idstring · uuid · nullableOptional

workspace_idstring · uuid · nullableOptional

project_idstring · uuid · nullableOptional

Responses

200

Successful Response

application/json

Model for viewing role assignments.

organization_idstring · uuidRequired

workspace_idstring · uuid · nullableOptional

project_idstring · uuid · nullableOptional

422

Validation Error

application/json

post/roles/{role_id}/assignments

HTTPcURLJavaScriptPython

POST /roles/{role_id}/assignments HTTP/1.1
Authorization: Bearer YOUR_OAUTH2_TOKEN
Accept: */*

{
  "user": {
    "password": "text",
    "password_expired": true,
    "name": "text",
    "avatar_url": "text",
    "company": "text",
    "job_title": "text",
    "metadata": {
      "ANY_ADDITIONAL_PROPERTY": "anything"
    },
    "id": "123e4567-e89b-12d3-a456-426614174000",
    "username": "text",
    "email": "text",
    "oauth_provider": "text",
    "oauth_id": "text",
    "is_active": true,
    "is_superuser": false,
    "is_service_account": false,
    "organization_id": "123e4567-e89b-12d3-a456-426614174000",
    "password_changed_at": "2026-07-14T20:59:12.861Z",
    "is_onboarded": false
  },
  "team": {
    "name": "text",
    "description": "text",
    "id": "123e4567-e89b-12d3-a456-426614174000",
    "created": "2026-07-14T20:59:12.861Z",
    "updated": "2026-07-14T20:59:12.861Z",
    "member_count": 1
  },
  "invitation": {
    "id": "123e4567-e89b-12d3-a456-426614174000",
    "inviting_user_id": "123e4567-e89b-12d3-a456-426614174000",
    "email": "[e-mail]",
    "organization_id": "123e4567-e89b-12d3-a456-426614174000",
    "expiration_date": "2026-07-14T20:59:12.861Z",
    "state": "pending",
    "auto_accept": false
  },
  "role": {
    "name": "text",
    "description": "text",
    "id": "123e4567-e89b-12d3-a456-426614174000",
    "organization_id": "123e4567-e89b-12d3-a456-426614174000",
    "level": "organization",
    "system_managed": true,
    "type": "normal"
  },
  "organization_id": "123e4567-e89b-12d3-a456-426614174000",
  "workspace_id": "123e4567-e89b-12d3-a456-426614174000",
  "project_id": "123e4567-e89b-12d3-a456-426614174000"
}

Revoke Role Endpoint

delete

Endpoint to revoke a role.

Args: role_id: ID of the role to revoke. user_id: ID of the user to revoke the role from. team_id: ID of the team to revoke the role from. invitation_id: ID of the invitation to revoke the role from. workspace_id: ID of the workspace to revoke the role from. project_id: ID of the project to revoke the role from. user: The authenticated user. rbac: RBAC component. organization_manager: Organization manager.

Raises: IllegalOperationError: If trying to revoke the admin role of an organization owner or the last assigned role of any organization member.

Authorizations

OAuth2ComboScheme

OAuth2clientCredentialsRequired

Token URL:

---

OAuth2authorizationCodeRequired

Authorization URL: Token URL: Refresh URL:

Path parameters

role_idstring · uuidRequired

Query parameters

user_idstring · uuid · nullableOptional

team_idstring · uuid · nullableOptional

invitation_idstring · uuid · nullableOptional

workspace_idstring · uuid · nullableOptional

project_idstring · uuid · nullableOptional

Responses

200

Successful Response

application/json

anyOptional

422

Validation Error

application/json

delete/roles/{role_id}/assignments

HTTPcURLJavaScriptPython

DELETE /roles/{role_id}/assignments HTTP/1.1
Authorization: Bearer YOUR_OAUTH2_TOKEN
Accept: */*

No content