Assigning Roles to User Groups

Prerequisites

• Permission: data:user_group:manage for the target group

• Roles must exist in the system

API Endpoint

POST /groups/roles?identifier={group_identifier}

Request Body

{
  "roles": [
    "role-uuid-1",
    "role-uuid-2"
  ]
}

Fields:

• roles (required): Array of role UUIDs to assign

Response

{
  "ok": true
}

Example:

curl -X POST "https://api.example.com/groups/roles?identifier=550e8400-e29b-41d4-a716-446655440000" \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "roles": [
      "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
      "b2c3d4e5-f6a7-8901-bcde-f12345678901"
    ]
  }'

Viewing Roles Assigned to a Group

GET /groups/roles?identifier={group_identifier}

Response:

{
  "roles": [
    {
      "identifier": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
      "name": "Data Writer",
      "description": "Can write data to storage"
    }
  ]
}

Notes

• All group members immediately inherit the new roles

• Roles are cumulative: users get permissions from all roles assigned to all their groups

• Removing a role from a group removes it from all members