Access control endpoints allow you to review and manage user role assignments. Organization and environment roles are managed separately. Furthermore, a user’s organizational role doesn't impact their assigned environment role, and vice versa. Learn about roles.
Generally, organization owners or admins can retrieve, assign, update, or remove role assignments. However, only organization owners can assign or remove organization roles specifically.
Update group
Change a group’s name, add members, or add or replace its role assignments. Include at least one change in the request.
Any new members immediately gain the group's access level. You can’t give a group an organization role with permissions you don’t hold.
This request never removes a member or a role assignment.
cURL request example
Path Parameters
- organizationIdrequired, string
Identifies the Redox organization that you're operating in or on behalf of.
- groupIdrequired, string
Contains the unique identifier of the group.
Request Body Schema
- namestring
Contains the group's new human-readable name.
- roleAssignmentsArray of object
Contains the role assignments to add to the group.
- rolerequired, object
- idrequired, string
Contains the unique identifier of the role.
- environmentnullable, object
- idrequired, string
Identifies the environment the role applies to.
- membersArray of object
Contains the users to add to the group.
- userrequired, object
- idrequired, integer
Contains the unique identifier of the user.
Contains the updated group details. You must provide at least one change to the group name, members, or role assignments.
- metaobject
- versionstring
Lists the major and minor version number for the format of the returned payload. The payload format or shape may change between minor versions, like including additional or extended fields in later versions. We include the version data in each response so that you have the option to handle the signaled differences.
- payloadobject
- groupobject
- idstring
Contains the unique identifier of the group.
- organizationinteger
Identifies the organization the group belongs to.
- namestring
Contains the group's human-readable name.
- sourcestring
Indicates who manages the group's membership.
manualmeans your organization's administrators manage it in Redox.Value:manual - createdAtstring
Displays a timestamp of when the group was created.
Format: date-time - updatedAtstring
Displays a timestamp of when the group was last updated.
Format: date-time - membersArray of object
Lists all group members.
- userobject
- idinteger
Contains the unique identifier of the user.
- fullnamestring
Displays the full name of the user.
- lowcaseEmailstring
Contains the user's email address in lowercase format.
- roleAssignmentsArray of object
Contains the organization and environment roles the group grants.
- roleobject
- idstring
Displays the unique identifier of the role.
- namestring
Displays the name of the role.
- environmentnullable, object
Contains the environment that the environment role applies to. Otherwise, this is set to
nullfor an organization role assignment.- idstring
Identifies the environment.
- namestring
Displays the human-readable name of the environment.