Interface: Role

Defined in: shared/access/types.ts:60

A role: a FLAT permission set (tiers flattened at seed time — no runtime inheritance) plus assignment metadata. organizationId === null marks a global/system role.

ExtendsCopy Anchor Link

• RoleAssignmentMetadata

PropertiesCopy Anchor Link

allowedGrantScopesCopy Anchor Link

allowedGrantScopes: GrantScopeKind[];

Defined in: shared/access/types.ts:52

platform requires explicit opt-in here AND systemManaged.

Inherited fromCopy Anchor Link

RoleAssignmentMetadata.allowedGrantScopes

assignableByOrgAdminsCopy Anchor Link

assignableByOrgAdmins: boolean;

Defined in: shared/access/types.ts:48

May an org admin grant this role at all?

Inherited fromCopy Anchor Link

RoleAssignmentMetadata.assignableByOrgAdmins

idCopy Anchor Link

id: string;

Defined in: shared/access/types.ts:61

identifierCopy Anchor Link

identifier: string;

Defined in: shared/access/types.ts:63

kindCopy Anchor Link

kind: RoleKind;

Defined in: shared/access/types.ts:64

maxAssignableScopeCopy Anchor Link

maxAssignableScope: MaxAssignableScope;

Defined in: shared/access/types.ts:50

Caps how far an actor may grant it.

Inherited fromCopy Anchor Link

RoleAssignmentMetadata.maxAssignableScope

organizationIdCopy Anchor Link

organizationId: string | null;

Defined in: shared/access/types.ts:62

permissionsCopy Anchor Link

permissions: `${string}.${string}`[];

Defined in: shared/access/types.ts:65

systemManagedCopy Anchor Link

systemManaged: boolean;

Defined in: shared/access/types.ts:46

Not org-admin editable.

Inherited fromCopy Anchor Link

RoleAssignmentMetadata.systemManaged