governance module route (requires governance:rbac:admin)

POST

/v1/m/governance/rbac/grants

curl --request POST \
  --url https://example.com/v1/m/governance/rbac/grants \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "created_by": "example", "id": "example", "note": "example", "role": "example", "role_custom": true, "scope_class": "example", "scope_ref": "example", "scope_tree": "tenant", "subject_kind": "user", "subject_ref": "example" }'

• this engine

Creates one scoped RBAC grant from the posted document.

Authorizations

• bearerAuth

Parameters

Header Parameters

X-Olivares-Tenant

string format: uuid

Target tenant id; required when the principal can act in more than one tenant.

Request Body ^required

Media type application/json

object

created_by

Any of:

string

Output field accepted by the DTO but ignored on create.

string

null

null

id

Any of:

string

Output field accepted by the DTO but ignored on create.

string

null

null

note

Any of:

string

Capped at 4096 bytes.

string

null

null

role

required

Must resolve to a built-in role unless role_custom is true, then to a custom role.

string

/.*\S.*/

role_custom

Any of:

boolean

boolean

null

null

scope_class

Any of:

string

When non-empty, must be a scopeable resource kind compatible with the selected tree.

string

null

null

scope_ref

Any of:

string

Must be empty for tenant and identify an existing anchor for every other scope tree.

string

null

null

scope_tree

required

string

Allowed values: tenant workspace agent_group folder

subject_kind

required

string

Allowed values: user role group

subject_ref

required

User/group identifier, or a built-in role name when subject_kind is role.

string

/.*\S.*/

Responses

200

OK

Media type application/json

object

Example ^generated

{}

400

Bad request

Media type application/json

object

Example ^generated

{}

401

Unauthenticated

Media type application/json

object

Example ^generated

{}

403

Forbidden

Media type application/json

object

Example ^generated

{}

404

Not found

Media type application/json

object

Example ^generated

{}

409

Conflict / setup required

Media type application/json

object

Example ^generated

{}

429

Rate limited

Media type application/json

object

Example ^generated

{}