POST
/
v1
/
public
/
accounts
/
{account_id}
/
auth
/
role-assignments
Create Account Role Assignment
curl --request POST \
  --url https://api.hybridbox.io/v1/public/accounts/{account_id}/auth/role-assignments \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "resource_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "subject_id": "<string>"
}
'
{
  "expanded_capability_keys": [
    "<string>"
  ],
  "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "resource_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "resource_type": "<string>",
  "role_key": "<string>",
  "subject_id": "<string>",
  "subject_type": "<string>",
  "created_at": "2023-11-07T05:31:56Z",
  "revoked_at": "2023-11-07T05:31:56Z"
}

Authorizations

​
Authorization
string
header
required

Public API bearer credential sent as Authorization: Bearer <token>. Use either an OAuth access token or a Hybridbox Service account token.

Path Parameters

​
account_id
string<uuid>
required

Body

application/json

Request schema for creating a new role assignment.

​
resource_id
string<uuid>
required

Assignment scope resource identifier

​
resource_type
enum<string>
required

Assignment scope resource type

Available options:
client,
account,
workspace,
domain,
dns_record,
mailbox,
redirect,
forwarding,
credential,
tenant,
route,
proxy
​
role_key
enum<string>
required

Code-defined role key

Available options:
viewer,
editor,
domain_manager,
manager,
dns_manager,
ip_manager,
billing_viewer,
billing_admin,
credential_manager
​
subject_id
string
required

User, group, or service account identifier

Minimum string length: 1
​
subject_type
enum<string>
required

Role assignment subject type: user, group, or service_account

Available options:
user,
group,
service_account

Response

​
expanded_capability_keys
string[]
required
​
id
string<uuid>
required
​
resource_id
string<uuid>
required
​
resource_type
string
required
​
role_key
string
required
​
subject_id
string
required
​
subject_type
string
required
​
created_at
string<date-time> | null
​
revoked_at
string<date-time> | null