Sovereign European Cloud API (SECA) · Schema
Role
Role represents a set of permissions that can be assigned to users.
CompanyCloudCloud InfrastructureSovereigntyEuropeOpen StandardsMulti-CloudInteroperabilityOpenAPI
JSON Schema
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"$id": "https://raw.githubusercontent.com/api-evangelist/eu-sovereign-cloud-api/main/json-schema/eu-sovereign-cloud-api-role-schema.json",
"title": "Role",
"description": "Role represents a set of permissions that can be assigned to users.\n",
"x-generated": "2026-10-09",
"x-method": "derived",
"x-generator": "derive-json-schema.py",
"x-source": "openapi/eu-sovereign-cloud-api-foundation-authorization-v1-openapi.yml#/components/schemas/Role",
"allOf": [
{
"$ref": "#/$defs/UserResourceMetadata"
},
{
"type": "object",
"required": [
"spec"
],
"properties": {
"metadata": {
"$ref": "#/$defs/GlobalTenantResourceMetadata"
},
"spec": {
"$ref": "#/$defs/RoleSpec"
},
"status": {
"$ref": "#/$defs/Status"
}
}
}
],
"$defs": {
"Annotations": {
"x-go-type-skip-optional-pointer": true,
"type": "object",
"description": "User-defined key/value pairs that are mutable and can be used to add annotations.\nThe number of annotations is eventually limited by the CSP.\n",
"additionalProperties": {
"type": "string",
"maxLength": 1024
}
},
"Extensions": {
"x-go-type-skip-optional-pointer": true,
"type": "object",
"description": "User-defined key/value pairs that are mutable and can be used to add extensions.\nExtensions are subject to validation by the CSP, and any value that is not accepted will be rejected during admission.\n",
"additionalProperties": {
"type": "string"
}
},
"GlobalTenantResourceMetadata": {
"description": "Metadata for global resources with name, permission, modification, type, and tenant information.\n",
"allOf": [
{
"$ref": "#/$defs/NameMetadata"
},
{
"$ref": "#/$defs/PermissionMetadata"
},
{
"$ref": "#/$defs/ModificationMetadata"
},
{
"$ref": "#/$defs/TypeMetadata"
},
{
"$ref": "#/$defs/TenantMetadata"
}
]
},
"Labels": {
"x-go-type-skip-optional-pointer": true,
"type": "object",
"description": "User-defined key/value pairs that are mutable and can be used to\norganize and categorize resources. They can be used to filter resources.\nThe number of labels is eventually limited by the CSP.\n",
"additionalProperties": {
"type": "string",
"maxLength": 63
}
},
"ModificationMetadata": {
"type": "object",
"readOnly": true,
"description": "Base metadata for all resources with optional region references",
"required": [
"createdAt",
"lastModifiedAt",
"resourceVersion"
],
"properties": {
"createdAt": {
"type": "string",
"format": "date-time",
"description": "Indicates the time when the resource was created. The field is set by the provider and should not be modified by the user."
},
"deletedAt": {
"type": "string",
"format": "date-time",
"description": "If set, indicates the time when the resource was marked for deletion. Resources with this field set are considered pending deletion."
},
"lastModifiedAt": {
"type": "string",
"format": "date-time",
"description": "Indicates the time when the resource was created or last modified. Field is used for \"If-Unmodified-Since\" logic for concurrency control. The provider guarantees that a modification on a single resource can happen only once every millisecond."
},
"resourceVersion": {
"type": "integer",
"description": "Incremented on every modification of the resource. Used for optimistic concurrency control.",
"minimum": 1,
"format": "int64"
}
}
},
"NameMetadata": {
"type": "object",
"readOnly": true,
"required": [
"name"
],
"description": "Metadata for resource names",
"properties": {
"name": {
"type": "string",
"description": "Resource identifier in dash-case (kebab-case) format. Must start and end with an alphanumeric character.\nCan contain lowercase letters, numbers, and hyphens. Multiple segments can be joined with dots.\nEach segment follows the same rules.\n",
"minLength": 1,
"maxLength": 128,
"pattern": "^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$"
}
}
},
"Permission": {
"type": "object",
"description": "Permission specification, including providers, resources, and verbs.\nPermissions are used to define access control policies for user accounts.\n",
"required": [
"provider",
"resources",
"verb"
],
"properties": {
"provider": {
"type": "string",
"description": "The provider for which the resource and verbs are defined.\n",
"minLength": 1,
"maxLength": 64,
"x-oapi-codegen-extra-tags": {
"x-kubebuilder-validation-min-length": "1",
"x-kubebuilder-validation-max-length": "64"
}
},
"resources": {
"type": "array",
"minItems": 1,
"items": {
"type": "string",
"minLength": 1,
"maxLength": 256,
"x-oapi-codegen-extra-tags": {
"x-kubebuilder-validation-max-length": "256"
}
},
"description": "The resources are the specific resources that the permission applies to.\nThe resource can be a wildcard `*` to represent all resources or a\nspecific resource type. For example, `images/my-image` or\n`images/*`.\n",
"maxItems": 256,
"x-oapi-codegen-extra-tags": {
"x-kubebuilder-validation-items-min-length": "1",
"x-kubebuilder-validation-items-max-length": "256",
"x-kubebuilder-validation-min-items": "1",
"x-kubebuilder-validation-max-items": "256"
}
},
"verb": {
"type": "array",
"minItems": 1,
"items": {
"type": "string",
"minLength": 1,
"maxLength": 7,
"x-oapi-codegen-extra-tags": {
"x-kubebuilder-validation-max-length": "7"
}
},
"description": "The verb is a string that represents the action to be performed on a resource.\nThe standard operations are defined as `get`, `put`, `list`, `delete`. If the\nresource has additional actions they can to be permitted individually as\nverb and action in the form `<verb>:<action>`. For example, `post.start`,\n`post.stop`, `post.restart` or with a wildcard for all actions `post`.\n",
"maxItems": 16,
"x-oapi-codegen-extra-tags": {
"x-kubebuilder-validation-items-min-length": "1",
"x-kubebuilder-validation-items-max-length": "7",
"x-kubebuilder-validation-min-items": "1",
"x-kubebuilder-validation-max-items": "16"
}
}
}
},
"PermissionMetadata": {
"type": "object",
"readOnly": true,
"description": "Metadata for permission management",
"required": [
"provider",
"resource",
"verb"
],
"properties": {
"provider": {
"type": "string",
"minLength": 1,
"maxLength": 64
},
"resource": {
"type": "string",
"minLength": 1,
"maxLength": 256
},
"verb": {
"type": "string",
"minLength": 1,
"maxLength": 7
}
}
},
"ReferenceURN": {
"type": "string",
"minLength": 1,
"description": "A unique resource name (URN) used to identify and reference this resource.\n\nThe URN is NOT a URL — it does not contain a protocol scheme (http/https), a host,\nor any endpoint-specific prefix. It is a portable, transport-agnostic identifier.\nA configured SDK client — which knows the provider's base URL and endpoint mapping —\ncan derive a URL from a URN, but the URN alone cannot be turned into a URL without\nthat SDK configuration context. This separation keeps the URN portable across\nenvironments and CSP deployments.\n\nThe full URN format is:\n `{provider}/{version}/tenants/{tenant}/workspaces/{workspace}/{type}/{name}`\n\nFor hierarchical (nested) resources, additional parent path segments are included:\n `seca.network/v1/tenants/tn-1/workspaces/ws-1/networks/my-net/route-tables/my-rt`\n\n### Automatic Prefix Inference\n\nIn most cases, the prefix of the URN can be automatically derived in the given context.\nTo simplify usage, only the resource type and name might be specified as a reference\nusing the `<type>/<name>` notation. The suffix can be made more specific by adding\nadditional segments separated by slashes.\n\nThe prefix is automatically inferred from the context. For example, if the resource is a\nblock storage in the same workspace the reference can be specified as\n`block-storages/my-block-storage`. If the resource is a block storage in a different workspace, the\nreference can be specified as `workspaces/ws-1/block-storages/my-block-storage`.\n\nFor automatic prefix inference, the following rules apply:\n- the version is inferred from the current resource version\n- the workspace is inferred from the current workspace\n- the region is inferred from the current region\n- the provider is inferred from the type and context of the usage\n\nThe prefix inference is resolved on admission into the full URN format, which makes it\nmostly suitable for human use.\n",
"maxLength": 255
},
"ResourceState": {
"type": "string",
"description": "Current phase of the resource:\n- pending: not available, waiting for other resources\n- creating: not available, creation started\n- active: available for data layer usage\n- updating: available for data layer usage\n- deleting: maybe still available for data layer user, can fail any moment\n- error: failed to fulfill the request; would be related to provider issue or customer related input.\n",
"enum": [
"pending",
"creating",
"active",
"updating",
"deleting",
"error"
],
"x-enumNames": [
"ResourceStatePending",
"ResourceStateCreating",
"ResourceStateActive",
"ResourceStateUpdating",
"ResourceStateDeleting",
"ResourceStateError"
]
},
"RoleSpec": {
"type": "object",
"description": "Role specification defined as a list of permissions.\nRoles are used to define access control policies for\na user account using a role assignment.\n",
"required": [
"permissions"
],
"properties": {
"permissions": {
"type": "array",
"minItems": 1,
"maxItems": 256,
"items": {
"$ref": "#/$defs/Permission"
},
"description": "List of permissions granted by this role",
"x-oapi-codegen-extra-tags": {
"x-kubebuilder-validation-min-items": "1",
"x-kubebuilder-validation-max-items": "256"
}
}
}
},
"Status": {
"type": "object",
"readOnly": true,
"description": "Current status of the resource",
"required": [
"conditions"
],
"properties": {
"state": {
"x-go-type-skip-optional-pointer": true,
"allOf": [
{
"$ref": "#/$defs/ResourceState"
}
]
},
"conditions": {
"type": "array",
"description": "History of state transitions, ordered newest-first, complementing the\ncurrent snapshot in `state`.\n",
"maxItems": 32,
"items": {
"$ref": "#/$defs/StatusCondition"
},
"x-oapi-codegen-extra-tags": {
"x-kubebuilder-validation-max-items": "32"
}
}
}
},
"StatusCondition": {
"type": "object",
"description": "StatusCondition describes the state of a resource at a certain point.\nConditions are provider-specific and can represent different states depending on the\nresource type and provider implementation.\n",
"required": [
"state",
"lastTransitionAt"
],
"properties": {
"state": {
"$ref": "#/$defs/ResourceState"
},
"lastTransitionAt": {
"type": "string",
"format": "date-time",
"description": "LastTransitionAt is the last time the condition transitioned from one\nstatus to another. This should be when the underlying condition changed.\nIf that is not known, then using the time when the API field changed is\nacceptable.\n"
},
"type": {
"type": "string",
"x-go-type-skip-optional-pointer": true,
"description": "Type of condition. The condition type is provider-specific and should\nreflect the specific states relevant to your resource.\n"
},
"reason": {
"type": "string",
"x-go-type-skip-optional-pointer": true,
"description": "The reason for the condition's last transition in CamelCase.\nThe specific set of reason values is provider-specific and should be\ndocumented by the provider.\n",
"maxLength": 1024,
"pattern": "^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$",
"x-oapi-codegen-extra-tags": {
"x-kubebuilder-validation-max-length": "1024",
"x-kubebuilder-validation-pattern": "^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$"
}
},
"message": {
"type": "string",
"x-go-type-skip-optional-pointer": true,
"description": "A human-readable message indicating details about the transition.\n",
"maxLength": 32768,
"x-oapi-codegen-extra-tags": {
"x-kubebuilder-validation-max-length": "32768"
}
}
}
},
"TenantMetadata": {
"type": "object",
"description": "Metadata for resources with tenant constraints",
"readOnly": true,
"required": [
"tenant"
],
"properties": {
"tenant": {
"type": "string",
"description": "Tenant identifier",
"minLength": 1,
"maxLength": 64
}
}
},
"TypeMetadata": {
"type": "object",
"readOnly": true,
"required": [
"apiVersion",
"kind",
"ref"
],
"description": "Metadata for all resources with type information.\n",
"properties": {
"apiVersion": {
"type": "string",
"description": "API version of the resource",
"minLength": 1,
"maxLength": 16,
"default": "v1"
},
"kind": {
"type": "string",
"description": "Type of the resource",
"enum": [
"activity-log",
"block-storage",
"image",
"instance",
"instance-sku",
"internet-gateway",
"network",
"network-load-balancer",
"network-sku",
"nic",
"object-storage-account",
"public-ip",
"region",
"role",
"role-assignment",
"routing-table",
"security-group",
"security-group-rule",
"storage-sku",
"subnet",
"workspace"
],
"x-enumNames": [
"ResourceKindActivityLog",
"ResourceKindBlockStorage",
"ResourceKindImage",
"ResourceKindInstance",
"ResourceKindInstanceSku",
"ResourceKindInternetGateway",
"ResourceKindNetwork",
"ResourceKindNetworkLoadBalancer",
"ResourceKindNetworkSku",
"ResourceKindNic",
"ResourceKindObjectStorageAccount",
"ResourceKindPublicIP",
"ResourceKindRegion",
"ResourceKindRole",
"ResourceKindRoleAssignment",
"ResourceKindRoutingTable",
"ResourceKindSecurityGroup",
"ResourceKindSecurityGroupRule",
"ResourceKindStorageSku",
"ResourceKindSubnet",
"ResourceKindWorkspace"
]
},
"ref": {
"$ref": "#/$defs/ReferenceURN"
}
}
},
"UserResourceMetadata": {
"type": "object",
"description": "Metadata for user-defined resource properties",
"properties": {
"labels": {
"$ref": "#/$defs/Labels"
},
"annotations": {
"$ref": "#/$defs/Annotations"
},
"extensions": {
"$ref": "#/$defs/Extensions"
}
}
}
}
}Work with this as data
Every JSON Schema here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for schemas
4 MCP tools reach this
find_json_schemasBrowse and filter every JSON Schema in the catalog.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This JSON Schema
curl "https://apis.io/api/v1/json-schemas/eu-sovereign-cloud-api-role"
All schemas
curl "https://apis.io/api/v1/json-schemas?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.