Harness

Harness Role Assignments API

This contains APIs for CRUD on role assignments

Documentation GitHub OpenAPI

Operations 10

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

POST /authz/api/roleassignments/delete/batch Delete several role assignments at once · Bulk Delete Role Assignment #

Ask an LLM

“Can I revoke a batch of role assignments in one request?”

“Is there a bulk way to remove role assignments by their identifiers?”

Tell an agent destructive · confirm first

Bulk delete role assignments in account {account}.

Remove a batch of role assignments from project {project}.

POST /authz/api/roleassignments/multi Create multiple role assignments in a scope · Create Role Assignments #

Ask an LLM

“How do I grant roles to many users or groups in one call?”

“What happens to duplicates when I create several role assignments together?”

Tell an agent

Create these role assignments in project {project}: {assignments}.

Grant multiple roles at once in account {account}: {assignments}.

GET /authz/api/roleassignments List role assignments in a scope · List Role Assignments #

Ask an LLM

“Who has which roles in my account?”

“Can I page through every role assignment in a project?”

Tell an agent

List role assignments in account {account}.

Show all role assignments in org {org}, project {project}.

POST /authz/api/roleassignments Assign a role to a principal · Create Role Assignment #

Ask an LLM

“How do I give a user a role on a resource group?”

“Can I create a role assignment that starts out disabled?”

Tell an agent

Assign role {role} on resource group {resource_group} to {principal}.

Grant {principal} the {role} role over {resource_group} in project {project}.

GET /authz/api/roleassignments/{identifier} Get one role assignment · Get Role Assignment #

Ask an LLM

“What role and resource group does a particular role assignment grant?”

“Can I look up a role assignment by its identifier?”

Tell an agent

Get role assignment {assignment}.

Show details of role assignment {assignment} in account {account}.

DELETE /authz/api/roleassignments/{identifier} Delete a role assignment · Delete Role Assignment #

Ask an LLM

“How do I revoke a single role assignment from a user?”

“Does deleting a role assignment remove access immediately?”

Tell an agent destructive · confirm first

Delete role assignment {assignment}.

Revoke role assignment {assignment} in project {project}.

POST /authz/api/roleassignments/filter Filter role assignments by role, principal or group · List Role Assignments by filter #

Ask an LLM

“Which users hold a specific role in this scope?”

“Can I list only disabled or Harness-managed role assignments?”

Tell an agent

List role assignments filtered to roles {roles} in account {account}.

Find role assignments for principals {principals}.

POST /authz/api/roleassignments/aggregate List role assignments with role and group metadata · List Aggregated Role Assignments by filter #

Ask an LLM

“Can I get role assignments together with the role and resource group details in one response?”

“What aggregated view of role assignments includes extra metadata?”

Tell an agent

Get aggregated role assignments with metadata for account {account}.

Show aggregate role assignments for resource groups {groups} with their role details.

POST /authz/api/roleassignments/v2/filter Filter role assignments across scopes · List Role Assignments by scope filter #

Ask an LLM

“Can I filter role assignments across several orgs or projects at once?”

“Which role assignments exist in a set of child scopes?”

Tell an agent

List role assignments across scopes {scopes}.

Filter role assignments by scopes {scopes} and principals {principals} in account {account}.

POST /authz/api/roleassignments/validate Check whether a proposed role assignment is valid · Validate Role Assignment #

Ask an LLM

“Will this role assignment be accepted before I actually create it?”

“Can I check that the principal, role and resource group in an assignment exist?”

Tell an agent

Validate role assignment {assignment} in account {account}.

Dry-run check {assignment}, validating the principal and role.

Harness Role Assignments API

Operations 10

Documentation

Specifications

Other Resources

Work with this as data

MCP server

Tools for apis

Call it yourself

Get an API key

OpenAPI Specification