Skip to main content
PUT
Set a member's workspace roles

Authorizations

Authorization
string
header
required

The access token received from the authorization server in the OAuth 2.0 flow.

Path Parameters

workspace
string
required

Workspace slug.

Maximum string length: 64
Pattern: ^[a-z0-9][a-z0-9-]{0,63}$
subject
string
required

Keycloak username to grant roles to.

Body

application/json
roles
enum<string>[]
required

Complete set of roles for this subject in this workspace. Replaces any existing grants — send an empty list to revoke.

Per-workspace role grants.

workspace_admin deliberately cannot approve: separation of duties is the point of the matrix, and approval requires a distinct approver identity.

Available options:
workspace_admin,
author,
approver,
simulator,
viewer

Response

Successful Response

workspace
string
required
members
MemberResponse · object[]
required