governance module route (requires governance:rbac:admin)

PUT

/v1/m/governance/rbac/roles/{name}

curl --request PUT \
  --url https://example.com/v1/m/governance/rbac/roles/example \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "base_role": "", "created_by": "example", "description": "example", "display_name": "example", "excludes": [ "example" ], "groups": [ "example" ], "name": "example", "permissions": [ "example" ] }'

• this engine

Replaces one custom role; the caller must be a tenant admin, and the base role and its exclusions are validated together.

Authorizations

• bearerAuth

Parameters

Path Parameters

name

required

string

Path parameter name.

Header Parameters

X-Olivares-Tenant

string format: uuid

Target tenant id; required when the principal can act in more than one tenant.

Request Body ^required

Media type application/json

Any of:

object

object

base_role

Any of:

string

string

Allowed values: "" viewer editor admin owner

null

null

created_by

Any of:

string

Output field accepted by the DTO but ignored on input.

string

null

null

description

Any of:

string

Capped at 4096 bytes.

string

null

null

display_name

Any of:

string

Capped at 4096 bytes.

string

null

null

excludes

Any of:

Array

Catalog permissions subtracted after base, direct permissions, and groups.

Array

null

null

groups

Any of:

Array<string>

Every name must identify an existing permission-group.

Array<string>

null

null

name

Any of:

string

On update this DTO field is accepted but ignored; the path names the role.

string

null

null

permissions

Any of:

Array

Catalog permissions are trimmed, empty entries skipped, deduplicated, and sorted.

Array

null

null

null

null

Responses

200

OK

Media type application/json

object

Example ^generated

{}

400

Bad request

Media type application/json

object

Example ^generated

{}

401

Unauthenticated

Media type application/json

object

Example ^generated

{}

403

Forbidden

Media type application/json

object

Example ^generated

{}

404

Not found

Media type application/json

object

Example ^generated

{}

409

Conflict / setup required

Media type application/json

object

Example ^generated

{}

429

Rate limited

Media type application/json

object

Example ^generated

{}