643 matches
28 actions
Conjur
28 actions
Security/Conjur
Updates or modifies an existing role membership.
If a role A is granted to a role B, then role A is said to have role B as a member. These relationships are described in the “members” portion of the returned JSON.
When the members query parameter is provided, you will get the members of a role.
When the members and member query parameters are provided, the role specfified by
member will be added as a member of the role specified in the endpoint URI.
{
"type": "object",
"properties": {
"account": {
"type": "string",
"description": "Conjur account name"
},
"identifier": {
"type": "string",
"description": "Resource identifier. Requires to be encoded when in path.\n\n##### Examples:\n\n- `myapp-01` -> `myapp-01` (unchanged)\n- `alice@devops` -> `alice%40devops`\n- `prod/aws/db-password` -> `prod%2Faws%2Fdb-password`\n- `research+development` -> `research%2Bdevelopment`\n- `sales&marketing` -> `sales%26marketing`\n"
},
"kind": {
"type": "string"
},
"member": {
"type": "string",
"description": "##### Kinds of roles:\n\n- User: one unique wonderful human\n- Host: a single logical machine (in the broad sense, not just physical)\n- Layer: a collection of hosts that have the same privileges\n- Group: a collection of users and groups that have the same privileges\n- Policy: a role which owns of a set of related object\n\nAny identifier included in the URL must be URL-encoded to be recognized by the Conjur API.\n\n##### Resource Identifiers:\n\n- `myapp-01` -> `myapp-01` (unchanged)\n- `alice@devops` -> `alice%40devops`\n- `prod/aws/db-password` -> `prod%2Faws%2Fdb-password`\n- `research+development` -> `research%2Bdevelopment`\n- `sales&marketing` -> `sales%26marketing`\n"
},
"members": {
"type": "string"
}
},
"required": [
"account",
"identifier",
"kind",
"member",
"members"
],
"additionalProperties": false
}{
"type": "object",
"additionalProperties": true
}