{"templateId":"openapi_docs","sharedDataIds":{"openAPIDocsStore":"oas-openapi/content-intelligence.yaml","sidebar":"sidebar-sidebars.yaml"},"props":{"definitionId":"openapi/content-intelligence.yaml","dynamicMarkdocComponents":[],"baseSlug":"/openapi/content-intelligence","seo":{"title":"Roles","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]},"description":"Roles are named collections of [Permissions](#tag/Permissions) that define what actions\na user can perform across the platform. The platform uses a hierarchical RBAC model where\nusers are assigned roles (directly or via [User Groups](#tag/User-Groups)), and those roles\ncarry the permissions that gate access to API operations and content resources.\n\nRole operations:\n- **Create / Update** — define a role and specify which permissions it grants\n- **Retrieve / List** — inspect role definitions across the organization\n- **Activate / Disable** — toggle a role without deleting it; disabling a role\n  immediately removes its permissions from all assigned users\n- **Purge** — permanently delete a role\n\nRoles are evaluated alongside fine-grained resource policies managed by\n[Access Control](#tag/Access-Control) to produce the final authorization decision\nfor any given user and resource combination.\n"},"itemId":"roles","disableAutoScroll":true,"metadata":{"subType":"openapi-operation"},"compilationErrors":[],"markdown":{"partials":{},"variables":{"rbac":{"teams":["anonymous"]},"user":{},"remoteAddr":{"hostname":"api.tenovos.com","port":4000,"ipAddress":"216.73.217.51"},"lang":"default_locale","env":{"PUBLIC_REDOCLY_BRANCH_NAME":"main"}}},"pagePropGetterError":{"message":"","name":""}},"slug":"/openapi/content-intelligence/roles","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}