concierge.v1.GovernanceService
Propose granting Role::Admin (Owner only). UserDirectory.SetRole refuses that role in the granting direction and names this, for the same reason it already refuses `owner`: an operator who can appoint operators can appoint accomplices, and the admin seat carries every identity mutation except role granting.
Taking the role away is NOT here and stays one act on purpose — containing a rogue operator must never be the slower path.
post/concierge.v1.GovernanceService/OpenAdminAdmission
Request
- The document declares no server URL.
- Auth: none required
Headers
Connect-Protocol-Version1 required
Define the version of the Connect protocol
Connect-Timeout-Msnumber
Define the timeout, in ms
Request body
Response
Success
Changes
No recorded changes to this operation across all 1 revision of this API.