Create a role
Requires roles:manage. Custom roles are never is_system, so they stay renamable and deletable. An unknown permission is refused rather than silently ignored.
Autorizações
A staff session token, uk_st_…. Minted by sign-up, sign-in or the two-factor exchange.
Cabeçalhos
The organization the caller is acting on — the org_… code that appears in the panel URL. It identifies; the membership JOIN is what authorizes, so a forged code reads nothing. Absent, the session's default organization answers.
Corpo
The complete set. Duplicates are collapsed; an unknown value is refused.
A fine-grained capability. The catalogue lives in Go; which role holds which lives in the database.
organization:update, organization:delete, members:read, members:write, roles:read, roles:manage, api_keys:read, api_keys:write, customers:read, customers:write Resposta
Created.