Replace one role's permissions

Set permissions for this role only; other roles remain untouched, and permissions never cross between roles or require ordering.

PUT/v1/apps/{appId}/roles/{roleId}/permissions

Request

curl --request PUT \
  --url 'https://studio.grid82.app/v1/apps/<appId>/roles/<roleId>/permissions' \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "tables": "<string>"
}'

import json
import requests

url = "https://studio.grid82.app/v1/apps/<appId>/roles/<roleId>/permissions"
headers = {
  "Authorization": "Bearer <token>",
  "Content-Type": "application/json"
}
payload = json.loads("{\"tables\":\"<string>\"}")

response = requests.request("PUT", url, headers=headers, json=payload)
print(response.json())

const response = await fetch("https://studio.grid82.app/v1/apps/<appId>/roles/<roleId>/permissions", {
  method: "PUT",
  headers: {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
    "tables": "<string>"
  }),
});

const data = await response.json();
console.log(data);

<?php
$client = curl_init();

curl_setopt($client, CURLOPT_URL, "https://studio.grid82.app/v1/apps/<appId>/roles/<roleId>/permissions");
curl_setopt($client, CURLOPT_CUSTOMREQUEST, "PUT");
curl_setopt($client, CURLOPT_HTTPHEADER, [
    "Authorization: Bearer <token>",
    "Content-Type: application/json",
]);
curl_setopt($client, CURLOPT_POSTFIELDS, "{\"tables\":\"<string>\"}");
curl_setopt($client, CURLOPT_RETURNTRANSFER, true);

$response = curl_exec($client);
curl_close($client);
echo $response;

package main

import (
  "bytes"
  "fmt"
  "io"
  "net/http"
)

func main() {
  req, _ := http.NewRequest("PUT", "https://studio.grid82.app/v1/apps/<appId>/roles/<roleId>/permissions", bytes.NewBuffer([]byte("{\"tables\":\"<string>\"}")))
  req.Header.Set("Authorization", "Bearer <token>")
  req.Header.Set("Content-Type", "application/json")
  res, _ := http.DefaultClient.Do(req)
  defer res.Body.Close()
  data, _ := io.ReadAll(res.Body)
  fmt.Println(string(data))
}

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

var request = HttpRequest.newBuilder(URI.create("https://studio.grid82.app/v1/apps/<appId>/roles/<roleId>/permissions"))
    .header("Authorization", "Bearer <token>")
    .header("Content-Type", "application/json")
    .method("PUT", HttpRequest.BodyPublishers.ofString("{\"tables\":\"<string>\"}"))
    .build();

var response = HttpClient.newHttpClient().send(
    request, HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

require 'net/http'
require 'json'

uri = URI("https://studio.grid82.app/v1/apps/<appId>/roles/<roleId>/permissions")
request = Net::HTTP::Put.new(uri)
request["Authorization"] = "Bearer <token>"
request["Content-Type"] = "application/json"
request.body = "{\"tables\":\"<string>\"}"

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == "https") do |http|
  http.request(request)
end

puts response.body

application/json

{
  "data": {
    "version": 123.45,
    "roles": [
      {
        "id": "<string>",
        "name": "<string>",
        "description": "<string>",
        "assistantMonthlyCredits": 123,
        "interface": "assigned",
        "automations": "none"
      }
    ],
    "permissions": [
      {
        "role": "<string>",
        "tables": "<string>"
      }
    ],
    "revision": "<string>"
  }
}

{
  "error": {
    "code": "not_found",
    "message": "<string>",
    "details": {}
  }
}

Include every table the role should access; omitted tables become inaccessible. tables is "*" (everything, future tables included) or a map of table id to grant. Example, read all rows, edit only stage, hide every other field: {"tables":{"tbl_deals":{"access":"granted","fields":{"mode":"selected","entries":{"fld_name":{"see":true},"fld_stage":{"see":true,"edit":true}}},"update":"all"}}}. A field absent from entries is hidden; fields: {"mode":"all","edit":"none"} shows every field, future ones included. rows, update and delete take a filter group as views do, to limit rows. Simulate first if unsure who is affected. Send the revision from roles.get as baseRevision; if someone changed this role after that revision, the save is refused with 409 instead of erasing their change.

Requires the schema:write scope. Operation roles.setPermissions. MCP tool roles_setPermissions. CLI: grid82 roles set-permissions (npx grid82).

Path parameters

Name	Type	Required	Description
`appId`	string	yes
`roleId`	string	yes

Headers

Name	Type	Required	Description
`Idempotency-Key`	string	no	Any unique string. Sending the same key with the same request again returns the first response (marked `Idempotency-Replayed: true`) instead of running it twice. Reusing it for a different request is refused with 409. Kept for 24 hours. Up to 255 characters.

Request body

Field	Type	Required	Description
`tables`	”*” or object	yes
`baseRevision`	string	no

Response

application/json

Success

dataobjectrequired

Show child attributes

data.versionnumberrequired

data.rolesobject[]requireditems: 1–100 items

Show child attributes

data.roles.idstringrequiredpattern: ^[a-z][a-z0-9_]{0,62}$

data.roles.namestringrequiredlength: 1–120 chars

data.roles.descriptionstringlength: ≤ 500 chars

data.roles.assistantMonthlyCreditsintegerrange: 0–10000000

data.roles.interfaceenum<string>one of: assigned, own

data.roles.automationsenum<string>one of: none, own

data.permissionsobject[]requireditems: ≤ 100 items

Show child attributes

data.permissions.rolestringrequiredpattern: ^[a-z][a-z0-9_]{0,62}$

data.permissions.tablesstring | Record<string, object>required

data.revisionstringrequired

curl --request PUT \ --url 'https://studio.grid82.app/v1/apps/<appId>/roles/<roleId>/permissions' \ --header 'Authorization: Bearer <token>' \ --header 'Content-Type: application/json' \ --data '{ "tables": "<string>" }'

{ "data": { "version": 123.45, "roles": [ { "id": "<string>", "name": "<string>", "description": "<string>", "assistantMonthlyCredits": 123, "interface": "assigned", "automations": "none" } ], "permissions": [ { "role": "<string>", "tables": "<string>" } ], "revision": "<string>" } }

Replace one role's permissions

Path parameters

Headers

Request body

Response

Use these docs with your AI tools

Query these docs via MCP

Query these docs over HTTP

Read these docs as Markdown