Role Bindings

Update a role binding

Changed on

Update an existing role binding by changing its assigned role.

Payload Requirements

  • role_id is required and replaces the currently assigned role.
  • Only role_id is mutable. The binding identity, principal, resource, and timestamps stay the same.
  • System-managed fields (id, user_id, resource_type, resource_id, created_at, updated_at) are not accepted in the request body.

Valid example

{
  "role_id": "Um9sZToyOmRLMjQ="
}

Invalid example

{
  "role_id": "Um9sZToyOmRLMjQ=",
  "user_id": "VXNlcjoxOmxQZzI="
}

This fails because only role_id can be updated on an existing binding.

Authorization Requires both ROLE_BINDING_CREATE and ROLE_BINDING_DELETE permissions on the binding's resource. Together, these permissions grant administrator-level authority on the resource. If the binding does not exist, belongs to another account, or the caller lacks either permission, the endpoint returns 404.

patch/v2/role-bindings/{binding_id}

Request

  • Base URL
    https://api.arize.com
  • URL
    https://api.arize.com/v2/role-bindings/{binding_id}
  • Auth
    HTTP bearer

Path parameters

binding_idstring required

A universally unique identifier (base64-encoded opaque string).

Example:RW50aXR5OjEyMzQ1

The unique role binding identifier (base64)

Request body

role_idstring required

A universally unique identifier (base64-encoded opaque string).

Example request

{
  "role_id": "RW50aXR5OjEyMzQ1"
}

Response

A role binding object.

idstring required

Unique identifier for the role binding.

role_idstring required

A universally unique identifier (base64-encoded opaque string).

user_idstring required

A universally unique identifier (base64-encoded opaque string).

resource_type'SPACE' | 'PROJECT' required

Resource type for the binding. Only SPACE and PROJECT are supported for single-binding CRUD. resource_id must encode the same resource type.

resource_idstring required

A universally unique identifier (base64-encoded opaque string).

created_atstring date-time required

Timestamp when the binding was created.

updated_atstring date-time required

Timestamp when the binding was last updated.

Example response

{
  "role_id": "RW50aXR5OjEyMzQ1",
  "user_id": "RW50aXR5OjEyMzQ1",
  "resource_id": "RW50aXR5OjEyMzQ1"
}

Changes

  • cb3bd5cf08a2Revision changes
    • breaking

      the response's property type changed from string to no type for status

    • info

      added to the response property allOf list for the response status

  • 4f94eb2fd1abRevision changes
    • info

      api operation id role_bindings_update removed and replaced with update_role_binding

    • info

      added the non-success response with the status