Skip to main content
Create IAM role
Authentication · API availability · Download OpenAPI
This operation can change resources or access. After signing in, open API request settings and select Enable modifying requests, then Apply settings, to use its playground. Check the request body and destination before selecting Send. Your existing API permissions still apply.

Authorizations

Authorization
string
header
required

Bearer token for user session

Headers

X-Request-Id
string

User-Agent specified id to track a request

Body

application/json

Role meta data

name
string
required

User defined name of the role. Name cannot be changed once created

Required string length: 3 - 256
Pattern: [a-zA-Z0-9][a-zA-Z0-9_.-]+
title
string
required

User defined title of the role. Title can be changed anytime

Required string length: 3 - 256
Pattern: [a-zA-Z0-9]+[a-zA-Z0-9!-~ ]+
type
enum<string>
default:USER_ROLE_UNSPECIFIED
required

Type of the role

Available options:
USER_ROLE_UNSPECIFIED,
USER_ROLE_SYSTEM_DEFINED,
USER_ROLE_USER_DEFINED,
USER_ROLE_CLUSTER
scopes
object[]
required

Scopes/Permissions associated with the role

description
string

Detailed description of the role

Maximum string length: 256
state
enum<string>
default:ROLE_STATE_UNSPECIFIED

State of the role

Available options:
ROLE_STATE_UNSPECIFIED,
ROLE_STATE_CREATED,
ROLE_STATE_ACTIVE,
ROLE_STATE_INACTIVE,
ROLE_STATE_ARCHIVED
projectTags
string

Map of project tags filter

Response

A successful response.

token
Base64 encoded opaque token · object
action
enum<string>
default:CrudAction__INVALID__
Available options:
CrudAction__INVALID__,
CrudActionNotApplicable,
CrudActionCreate,
CrudActionRead,
CrudActionUpdate,
CrudActionDelete,
CrudActionQuery,
CrudActionQueryNext,
CrudActionReadSelf,
CrudActionUpdateSelf
result
object
read
object
query
object