PlatformRoleAssignment

A role assignment — a role granted to a principal at a scope.

Properties

Property	Type	Description
createdBy	string	GUID of the user who created the assignment.
createdTime	string	When the assignment was created.
id	string	GUID of the assignment.
inherited	boolean	Whether the assignment is inherited from a wider scope.
mutable	boolean	Whether the assignment can be removed.
roleId	string	GUID of the granted role.
roleName	string	Name of the granted role.
roleType	PlatformRoleType	Who defines the granted role.
scope	string	The scope the role is granted at (/ = whole organization).
securityPrincipalId	string	GUID of the principal (user, group, external app, or robot).
securityPrincipalType	PlatformPrincipalType	The kind of principal.
type	PlatformRoleType	Who created the assignment: the platform (built-in) or an administrator (custom). Independent of roleType, which describes the granted role — an administrator can assign a built-in role, giving a custom assignment of a built-in role.