POST /update-role

Allow this role to view analytics. Currently only 'none', 'own', 'all' values are supported, allowing associated auth methods to view reports produced by the same auth methods.

Allow this role to approve Access Requests for items. Currently only 'none', 'scoped' and 'all' values are supported. The tier controls how broadly the approver may list Auth Methods; neither tier lets them grant permissions they do not already hold on the requested item or target.

Allow this role to view Agentic Runtime Authority Dashboard. Currently only 'none', 'scoped', 'all' values are supported.

Allow this role to view audit logs. Currently only 'none', 'own', 'scoped' and 'all' values are supported, allowing associated auth methods to view audit logs produced by the same auth methods.

Protection from accidental deletion of this object [true/false]

Description of the object

Allow this role to view Event Center. Currently only 'none', 'scoped' and 'all' values are supported

Allow this role to manage Event Forwarders. Currently only 'none' and 'all' values are supported.

Allow this role to view gw analytics. Currently only 'none', 'scoped', 'all' values are supported, allowing associated auth methods to view reports produced by the same auth methods.

Allow this role to access Identity & Secrets Intelligence. Currently only 'none', 'scoped' and 'all' values are supported.

Set output format to JSON

Role name

Deprecated - use description

New Role name

Allow this role to view Reverse RBAC. Supported values: 'scoped', 'all'.

Allow this role to view SRA Clusters. Currently only 'none', 'scoped', 'all' values are supported.

Authentication token (see /auth and /configure)

The universal identity token, Required only for universal_identity authentication

Allow this role to force-unlock locked secrets. Currently only 'none', 'scoped' and 'all' values are supported.

Allow this role to view Usage Report. Currently only 'none' and 'all' values are supported.