post https://{applicationQualifiedDomain}.us.wristband.dev/api/v1/clients//assign-roles
Assigns the specified roles to the client. This API supports partial failures, so some assignments can succeed
and some can fail. If a partial failure occurs, then it will be added to the failures
field in the response.
Required Permissions
Below is the list of required permissions needed to interact with this API. For each permission the allowed permission boundaries are also specified.
Permission | Boundary | Description |
---|---|---|
role:manage-assignments | Application | The subject can perform this request if the client specified in the URL path belongs to the subject's associated application. |
Tenant | The subject can perform this request if the client specified in the URL path is owned by the subject's associated tenant. | |
Tenant Inclusion List | The subject can perform this request if the client specified in the URL path is owned by a tenant included in the tenant inclusion list. | |
Tenant Exclusion List | The subject can perform this request if the client specified in the URL path belongs to the subject's associated application and is not owned by a tenant in the tenant exclusion list. |