Update an admin role assignment.

PATCH

/api/admin/admin-roles/{id}/assignments/{assignmentId}

Code sample: Shell / cURL

curl --request PATCH \
  --url https://auth.example.com/api/admin/admin-roles/example/assignments/example \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "scope_type": "tenant", "scope_id": "default", "expires_at": 1770007200000 }'

Updates an assignment scope binding or expiration after validating tenant ownership, duplicate assignment conflicts, and global-scope authorization.

Authorizations

• adminBearer
• adminSessionCookie

Parameters

Path Parameters

id

required

string

Admin role id.

assignmentId

required

string

Admin role assignment id.

Request Body ^required

Media type application/json

object

>= 1 properties

scope_type

string

Allowed values: global tenant org

scope_id

string

expires_at

integer | null format: int64

key

additional properties

Example

{
  "scope_type": "tenant",
  "scope_id": "default",
  "expires_at": 1770007200000
}

Responses

200

Admin role assignment response.

Media type application/json

object

id

required

string

tenant_id

required

string

admin_user_id

required

string

admin_role_id

required

string

scope_type

required

string

Allowed values: global tenant org

scope_id

required

string | null

expires_at

integer | null format: int64

assigned_by

string | null

created_at

required

integer format: int64

key

additional properties

Example

{
  "scope_type": "global"
}

Headers

X-Authrim-Log-Consistency

string

Allowed values: snapshot eventual local_hot_only

Snapshot for the remote scheduled view; eventual when Pipeline visibility can lag ingestion; local_hot_only for local scheduled staging without a remote Catalog.

X-Authrim-Log-Pending-Deliveries

integer

Tenant deliveries not yet confirmed visible. Omitted for self-service subjects. Zero does not guarantee immediate Pipeline visibility.

X-Authrim-Log-Complete

boolean

True only for a complete bounded snapshot query. Pipeline responses remain false; incomplete reads return 503.

400

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

401

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

403

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

404

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

409

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}