---
title: "Add network group IAM roles"
method: POST
path: "/api/v2/network-group/{id}/iam"
tags: ["network-group"]
---

# Add network group IAM roles

`POST /api/v2/network-group/{id}/iam`

## Request

- Base URL: `https://central.zerotier.com`
- URL: `https://central.zerotier.com/api/v2/network-group/{id}/iam`
- Auth: HTTP bearer

Grant additional IAM roles to users on this network group without replacing existing roles.

## Path parameters

- `id` string, required

## Request body

- IamTupleRequest[]: List of principal–roles assignments. Semantics depend on the HTTP method: `POST` adds the specified roles, `DELETE` removes them, `PUT` replaces all existing assignments.
  - `principal` string, email, required: Email address of the user or service account to assign roles to
  - `roles` IamRole[], required: One or more roles to assign to the principal

## Response `200`

Network group IAM roles updated

- SuccessMessageResponse
  - `message` string, required: Human-readable confirmation message

## Other responses

- `400`: Invalid data provided
- `401`: Missing or invalid authentication token
- `403`: Insufficient permissions
- `413`: Request body exceeds the 1 MB size limit
- `500`: Internal server error

---

[API](https://skmtc.dev/zerotier/apis/zerotier-central-v2-api.md) - [All operations](https://skmtc.dev/zerotier/apis/zerotier-central-v2-api/llms.txt) - [OpenAPI document](https://skmtc.dev/zerotier/apis/zerotier-central-v2-api/revisions/b2e7468ad104?raw)