Skip to content
Authrim

Assign an admin role.

POST
/api/admin/admin-roles/{id}/assignments
Code sample: Shell / cURL 
curl --request POST \
  --url https://auth.example.com/api/admin/admin-roles/example/assignments \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "role_id": "role_ar_tenant_admin", "admin_user_id": "admin_123", "scope_type": "tenant", "scope_id": "default" }'

Assigns the role to an Admin user with a normalized scope binding. Duplicate assignments, invalid scopes, hierarchy violations, and unauthorized global scope assignments are rejected.

Authorizations

Section titled “Authorizations ”

Parameters

Section titled “ Parameters ”

Path Parameters

Section titled “Path Parameters ”
id
required
string

Admin role id.

Request Body required

Section titled “Request Body required ”
Media type application/json
object
role_id

Required when assigning a role through /api/admin/admins/{id}/roles.

string
admin_user_id

Required when assigning through /api/admin/admin-roles/{id}/assignments.

string
scope_type
string
Allowed values: global tenant org
scope_id
string
expires_at
integer format: int64
key
additional properties
Example 
{
  "role_id": "role_ar_tenant_admin",
  "admin_user_id": "admin_123",
  "scope_type": "tenant",
  "scope_id": "default"
}

Responses

Section titled “ Responses ”

201

Section titled “201 ”

Admin role assignment response.

Media type application/json
object
id
required
string
tenant_id
required
string
admin_user_id
required
string
admin_role_id
required
string
scope_type
required
string
Allowed values: global tenant org
scope_id
required
string | null
expires_at
integer | null format: int64
assigned_by
string | null
created_at
required
integer format: int64
key
additional properties
Example 
{
  "scope_type": "global"
}

Headers

Section titled “Headers ”
X-Authrim-Log-Consistency
string
Allowed values: snapshot eventual local_hot_only

Snapshot for the remote scheduled view; eventual when Pipeline visibility can lag ingestion; local_hot_only for local scheduled staging without a remote Catalog.

X-Authrim-Log-Pending-Deliveries
integer

Tenant deliveries not yet confirmed visible. Omitted for self-service subjects. Zero does not guarantee immediate Pipeline visibility.

X-Authrim-Log-Complete
boolean

True only for a complete bounded snapshot query. Pipeline responses remain false; incomplete reads return 503.

400

Section titled “400 ”

Error response.

Media type application/json
object
error
string
message
string
error_description
string
key
additional properties
Example generated
{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

401

Section titled “401 ”

Error response.

Media type application/json
object
error
string
message
string
error_description
string
key
additional properties
Example generated
{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

403

Section titled “403 ”

Error response.

Media type application/json
object
error
string
message
string
error_description
string
key
additional properties
Example generated
{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

404

Section titled “404 ”

Error response.

Media type application/json
object
error
string
message
string
error_description
string
key
additional properties
Example generated
{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

409

Section titled “409 ”

Error response.

Media type application/json
object
error
string
message
string
error_description
string
key
additional properties
Example generated
{
  "error": "example",
  "message": "example",
  "error_description": "example"
}