[Required on Create] The type of the owner of the resource.

[Required on Create] The ID of the owner of the resource.

[Required on Create] The name of the permission group. Name must be unique (case-insensitive) within an application. Application-level permission groups are prefixed with app:<app_domain_name>:, and tenant-level permission groups are prefixed with tnt:<tnt_domain_name>:.

[Required on Create] The display name of the permission group.

Optional description of the permission group.

Optional ID of the permission boundary that is assigned to this permission group.

[Required on Create] Enum representing the tenants that this permission boundary should be visible to.

• ALL: The permission group is visible to all tenants and can also be assigned to any tenant-level roles.
• NONE: The permission group is not visible to any tenants and cannot be assigned to any tenant-level roles.
• OWNER: Indicates that the permission group is only visible to the tenant that owns it.