{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/posit/main/json-schema/posit-group-schema.json",
  "title": "Group",
  "description": "A group object.",
  "x-generated": "2026-10-03",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/posit-groups-api-openapi.yml#/components/schemas/Group",
  "allOf": [
    {
      "$ref": "#/$defs/TrustedPublisher"
    },
    {
      "properties": {
        "guid": {
          "description": "The unique identifier",
          "format": "uuid",
          "type": "string"
        },
        "member_count": {
          "description": "The number of members in the group.",
          "format": "int64",
          "type": "integer"
        }
      },
      "type": "object"
    }
  ],
  "$defs": {
    "TrustedPublisher": {
      "description": "A binding that allows a service principal (a machine identity such as a\nGitHub Actions workflow) to publish to a single content item. A workload\nthat authenticates as the service principal can upload bundles and deploy\nthis content, but cannot act on any other content.",
      "properties": {
        "service_principal_guid": {
          "description": "The GUID of the service principal bound to this content item.",
          "format": "uuid",
          "type": "string"
        },
        "name": {
          "description": "The descriptive name of the service principal.",
          "type": "string"
        },
        "role": {
          "description": "The auth role workloads authenticating as the service principal carry.\nTrusted publishers carry only the viewer role; their ability to publish\ncomes from the per-content grant, not this role.",
          "type": "string"
        },
        "app_role": {
          "description": "The content access level granted to the service principal on this item.",
          "type": "string"
        }
      },
      "type": "object"
    }
  }
}