openapi: 3.0.3 info: title: Snyk AccessRequests TenantRole API version: REST servers: - description: Snyk REST API url: https://api.snyk.io/rest security: - APIToken: [] - BearerAuth: [] tags: - name: TenantRole paths: /tenants/{tenant_id}/roles: get: description: 'List all available roles for a given tenant. #### Required permissions - `View Tenant Roles (tenant.roles.read)`' operationId: listTenantRoles parameters: - $ref: '#/components/parameters/Version' - description: Unique identifier of the tenant. in: path name: tenant_id required: true schema: example: 00000000-0000-0000-0000-000000000000 format: uuid type: string - description: Role name filter. in: query name: name schema: example: examplename type: string - $ref: '#/components/parameters/Custom' - $ref: '#/components/parameters/AssignableByMe' - $ref: '#/components/parameters/ExpandPermissions' - $ref: '#/components/parameters/StartingAfter' - $ref: '#/components/parameters/EndingBefore' - $ref: '#/components/parameters/Limit' responses: '200': content: application/vnd.api+json: schema: additionalProperties: false properties: data: items: $ref: '#/components/schemas/TenantRoleResponseData' type: array jsonapi: $ref: '#/components/schemas/JsonApi' links: $ref: '#/components/schemas/PaginatedLinks' meta: $ref: '#/components/schemas/TenantRolesExternalMeta' required: - data - jsonapi - links type: object description: Returns an array of roles that are the roles on a Tenant. headers: deprecation: $ref: '#/components/headers/DeprecationHeader' snyk-request-id: $ref: '#/components/headers/RequestIdResponseHeader' snyk-version-lifecycle-stage: $ref: '#/components/headers/VersionStageResponseHeader' snyk-version-requested: $ref: '#/components/headers/VersionRequestedResponseHeader' snyk-version-served: $ref: '#/components/headers/VersionServedResponseHeader' sunset: $ref: '#/components/headers/SunsetHeader' '400': $ref: '#/components/responses/400' '401': $ref: '#/components/responses/401' '403': $ref: '#/components/responses/403' '404': $ref: '#/components/responses/404' '409': $ref: '#/components/responses/409' '500': $ref: '#/components/responses/500' summary: List all available roles for a given tenant (Early Access) tags: - TenantRole x-snyk-api-lifecycle: released x-snyk-api-releases: - 2024-10-15~beta x-snyk-api-resource: tenant_roles x-snyk-api-stability: beta x-snyk-api-version: 2024-10-15~beta x-stability-level: beta post: description: 'Create a custom tenant role for a given tenant. #### Required permissions - `View Tenant Roles (tenant.roles.read)` - `Create Tenant Roles (tenant.roles.create)`' operationId: createTenantRole parameters: - $ref: '#/components/parameters/Version' - description: Unique identifier of the tenant. in: path name: tenant_id required: true schema: example: 00000000-0000-0000-0000-000000000000 format: uuid type: string requestBody: content: application/vnd.api+json: schema: properties: data: additionalProperties: false properties: attributes: $ref: '#/components/schemas/CreateTenantRoleRequestAttributes' type: $ref: '#/components/schemas/TenantRoleType20241015' required: - type - attributes type: object required: - data type: object responses: '201': content: application/vnd.api+json: schema: additionalProperties: false properties: data: $ref: '#/components/schemas/TenantRoleResponseData' jsonapi: $ref: '#/components/schemas/JsonApi' links: $ref: '#/components/schemas/SelfLink' required: - data - jsonapi - links type: object description: Tenant role successfully created. headers: deprecation: $ref: '#/components/headers/DeprecationHeader' location: schema: type: string snyk-request-id: $ref: '#/components/headers/RequestIdResponseHeader' snyk-version-lifecycle-stage: $ref: '#/components/headers/VersionStageResponseHeader' snyk-version-requested: $ref: '#/components/headers/VersionRequestedResponseHeader' snyk-version-served: $ref: '#/components/headers/VersionServedResponseHeader' sunset: $ref: '#/components/headers/SunsetHeader' '400': $ref: '#/components/responses/400' '401': $ref: '#/components/responses/401' '403': $ref: '#/components/responses/403' '404': $ref: '#/components/responses/404' '409': $ref: '#/components/responses/409' '500': $ref: '#/components/responses/500' summary: Create a custom tenant role for a given tenant (Early Access) tags: - TenantRole x-snyk-api-lifecycle: released x-snyk-api-releases: - 2024-10-15~beta x-snyk-api-resource: tenant_roles x-snyk-api-stability: beta x-snyk-api-version: 2024-10-15~beta x-stability-level: beta /tenants/{tenant_id}/roles/{role_id}: delete: description: 'Delete a custom tenant role in a given tenant #### Required permissions - `View Tenant Roles (tenant.roles.read)` - `Delete Tenant Roles (tenant.roles.delete)`' operationId: deleteTenantRole parameters: - $ref: '#/components/parameters/Version' - description: Unique identifier of the tenant. in: path name: tenant_id required: true schema: example: 00000000-0000-0000-0000-000000000000 format: uuid type: string - $ref: '#/components/parameters/RoleId' responses: '204': description: Tenant role successfully deleted. headers: deprecation: $ref: '#/components/headers/DeprecationHeader' snyk-request-id: $ref: '#/components/headers/RequestIdResponseHeader' snyk-version-lifecycle-stage: $ref: '#/components/headers/VersionStageResponseHeader' snyk-version-requested: $ref: '#/components/headers/VersionRequestedResponseHeader' snyk-version-served: $ref: '#/components/headers/VersionServedResponseHeader' sunset: $ref: '#/components/headers/SunsetHeader' '400': $ref: '#/components/responses/400' '401': $ref: '#/components/responses/401' '403': $ref: '#/components/responses/403' '404': $ref: '#/components/responses/404' '409': $ref: '#/components/responses/409' '500': $ref: '#/components/responses/500' summary: Delete a specific tenant role by its id and its tenant id. (Early Access) tags: - TenantRole x-snyk-api-lifecycle: released x-snyk-api-releases: - 2024-10-15~beta x-snyk-api-resource: tenant_roles x-snyk-api-stability: beta x-snyk-api-version: 2024-10-15~beta x-stability-level: beta get: description: 'Return a role from a tenant by the tenant and role id with its details and permissions. #### Required permissions - `View Tenant Roles (tenant.roles.read)`' operationId: getTenantRole parameters: - $ref: '#/components/parameters/Version' - description: Unique identifier of the tenant. in: path name: tenant_id required: true schema: example: 00000000-0000-0000-0000-000000000000 format: uuid type: string - $ref: '#/components/parameters/RoleId' - $ref: '#/components/parameters/HasUsersAssigned' responses: '200': content: application/vnd.api+json: schema: additionalProperties: false properties: data: $ref: '#/components/schemas/TenantRoleResponseData' jsonapi: $ref: '#/components/schemas/JsonApi' links: $ref: '#/components/schemas/SelfLink' type: object description: Returns the requested role. headers: deprecation: $ref: '#/components/headers/DeprecationHeader' snyk-request-id: $ref: '#/components/headers/RequestIdResponseHeader' snyk-version-lifecycle-stage: $ref: '#/components/headers/VersionStageResponseHeader' snyk-version-requested: $ref: '#/components/headers/VersionRequestedResponseHeader' snyk-version-served: $ref: '#/components/headers/VersionServedResponseHeader' sunset: $ref: '#/components/headers/SunsetHeader' '400': $ref: '#/components/responses/400' '401': $ref: '#/components/responses/401' '403': $ref: '#/components/responses/403' '404': $ref: '#/components/responses/404' '409': $ref: '#/components/responses/409' '500': $ref: '#/components/responses/500' summary: Return a specific role by its id and its tenant id. (Early Access) tags: - TenantRole x-snyk-api-lifecycle: released x-snyk-api-releases: - 2024-10-15~beta x-snyk-api-resource: tenant_roles x-snyk-api-stability: beta x-snyk-api-version: 2024-10-15~beta x-stability-level: beta patch: description: 'Update attributes of a custom tenant role in a given tenant #### Required permissions - `View Tenant Roles (tenant.roles.read)` - `Edit Tenant Roles (tenant.roles.edit)`' operationId: updateTenantRole parameters: - $ref: '#/components/parameters/Version' - description: Unique identifier of the tenant. in: path name: tenant_id required: true schema: example: 00000000-0000-0000-0000-000000000000 format: uuid type: string - $ref: '#/components/parameters/RoleId' - $ref: '#/components/parameters/ForceUpdate' requestBody: content: application/vnd.api+json: schema: properties: data: additionalProperties: false properties: attributes: $ref: '#/components/schemas/UpdateTenantRoleRequestAttributes' id: $ref: '#/components/schemas/RoleId' type: $ref: '#/components/schemas/TenantRoleType20241015' required: - type - attributes type: object required: - data type: object responses: '200': content: application/vnd.api+json: schema: additionalProperties: false properties: data: $ref: '#/components/schemas/TenantRoleResponseData' jsonapi: $ref: '#/components/schemas/JsonApi' links: $ref: '#/components/schemas/SelfLink' type: object description: Returns the updated role. headers: deprecation: $ref: '#/components/headers/DeprecationHeader' snyk-request-id: $ref: '#/components/headers/RequestIdResponseHeader' snyk-version-lifecycle-stage: $ref: '#/components/headers/VersionStageResponseHeader' snyk-version-requested: $ref: '#/components/headers/VersionRequestedResponseHeader' snyk-version-served: $ref: '#/components/headers/VersionServedResponseHeader' sunset: $ref: '#/components/headers/SunsetHeader' '400': $ref: '#/components/responses/400' '401': $ref: '#/components/responses/401' '403': $ref: '#/components/responses/403' '404': $ref: '#/components/responses/404' '409': $ref: '#/components/responses/409' '500': $ref: '#/components/responses/500' summary: Update a specific tenant role by its id and its tenant id. (Early Access) tags: - TenantRole x-snyk-api-lifecycle: released x-snyk-api-releases: - 2024-10-15~beta x-snyk-api-resource: tenant_roles x-snyk-api-stability: beta x-snyk-api-version: 2024-10-15~beta x-stability-level: beta components: schemas: AssignableByMe: example: false type: boolean TenantRolesExternalMeta: properties: permissions: items: properties: description: example: Edit details of the Group type: string name: example: Edit Group Details type: string parent: example: group.read type: string value: type: string required: - value - description - name type: object type: array type: object TenantRoleType20241015: description: The type of the resource for tenant role operations enum: - tenant_role type: string ActualVersion: description: Resolved API version example: '2026-03-25' pattern: ^((([0-9]{4})-([0-1][0-9]))-((3[01])|(0[1-9])|([12][0-9]))(~(wip|work-in-progress|experimental|beta))?)$ type: string JsonApi: additionalProperties: false example: version: '1.0' properties: version: description: Version of the JSON API specification this server supports. example: '1.0' pattern: ^(0|[1-9]\d*)\.(0|[1-9]\d*)$ type: string required: - version type: object TenantRoleResponseData: properties: attributes: $ref: '#/components/schemas/TenantRoleResponseAttributes' id: example: d5b640e5-d88c-4c17-9bf0-93597b7a1ce2 format: uuid type: string meta: $ref: '#/components/schemas/TenantRoleMeta' relationships: properties: tenant: $ref: '#/components/schemas/Tenant' type: object type: $ref: '#/components/schemas/TenantRoleType20241015' required: - id - type - attributes type: object TenantRoleMeta: additionalProperties: false properties: app_count: type: integer service_account_count: type: integer user_count: type: integer type: object Custom: example: false type: boolean QueryVersion: description: Requested API version example: '2026-03-25' pattern: ^(wip|work-in-progress|experimental|beta|((([0-9]{4})-([0-1][0-9]))-((3[01])|(0[1-9])|([12][0-9]))(~(wip|work-in-progress|experimental|beta))?))$ type: string RoleId: example: 00000000-0000-0000-0000-000000000000 format: uuid type: string UpdateTenantRoleRequestAttributes: additionalProperties: false minProperties: 1 properties: description: description: The description of the tenant role. maxLength: 160 minLength: 1 type: string name: description: The name of the tenant role. maxLength: 60 minLength: 1 type: string permissions: description: Requested permissions of the tenant role. Must be the entire set of permissions. items: type: string type: array type: object CreateTenantRoleRequestAttributes: additionalProperties: false properties: description: description: The description of the tenant role. maxLength: 160 minLength: 1 type: string name: description: The name of the tenant role. maxLength: 60 minLength: 1 type: string permissions: description: Requested permissions of the tenant role. Must be the entire set of permissions. items: type: string type: array required: - name - description - permissions type: object ErrorDocument: additionalProperties: false example: errors: - detail: Permission denied for this resource status: '403' jsonapi: version: '1.0' properties: errors: example: - detail: Permission denied for this resource status: '403' items: additionalProperties: false example: detail: Not Found status: '404' properties: code: description: An application-specific error code, expressed as a string value. example: entity-not-found type: string detail: description: A human-readable explanation specific to this occurrence of the problem. example: 'The request was missing these required fields: ...' type: string id: description: A unique identifier for this particular occurrence of the problem. example: f16c31b5-6129-4571-add8-d589da9be524 format: uuid type: string links: additionalProperties: false description: A link that leads to further details about this particular occurrance of the problem. example: about: https://example.com/about_this_error properties: about: example: https://example.com/api/resource oneOf: - description: A string containing the link’s URL. example: https://example.com/api/resource type: string - additionalProperties: false example: href: https://example.com/api/resource properties: href: description: A string containing the link’s URL. example: https://example.com/api/resource type: string meta: additionalProperties: true description: Free-form object that may contain non-standard information. example: key1: value1 key2: sub_key: sub_value key3: - array_value1 - array_value2 type: object required: - href type: object type: object meta: additionalProperties: true example: key: value type: object source: additionalProperties: false example: pointer: /data/attributes properties: parameter: description: A string indicating which URI query parameter caused the error. example: param1 type: string pointer: description: A JSON Pointer [RFC6901] to the associated entity in the request document. example: /data/attributes type: string type: object status: description: The HTTP status code applicable to this problem, expressed as a string value. example: '400' pattern: ^[45]\d\d$ type: string title: description: A short, human-readable summary of the problem that SHOULD NOT change from occurrence to occurrence of the problem, except for purposes of localization. example: Bad request type: string required: - status - detail type: object minItems: 1 type: array jsonapi: additionalProperties: false example: version: '1.0' properties: version: description: Version of the JSON API specification this server supports. example: '1.0' pattern: ^(0|[1-9]\d*)\.(0|[1-9]\d*)$ type: string required: - version type: object required: - jsonapi - errors type: object ForceUpdate: example: false type: boolean SelfLink: additionalProperties: false example: self: https://example.com/api/this_resource properties: self: $ref: '#/components/schemas/LinkProperty' type: object TenantRoleResponseAttributes: additionalProperties: false properties: custom: default: false type: boolean description: type: string name: type: string normalized_name: type: string permissions: items: type: string type: array required: - name - description - permissions - custom type: object PaginatedLinks: additionalProperties: false example: first: https://example.com/api/resource?ending_before=v1.eyJpZCI6IjExIn0K last: https://example.com/api/resource?starting_after=v1.eyJpZCI6IjMwIn0K next: https://example.com/api/resource?starting_after=v1.eyJpZCI6IjEwIn0K properties: first: $ref: '#/components/schemas/LinkProperty' last: $ref: '#/components/schemas/LinkProperty' next: $ref: '#/components/schemas/LinkProperty' prev: $ref: '#/components/schemas/LinkProperty' self: $ref: '#/components/schemas/LinkProperty' type: object Tenant: properties: data: properties: id: example: d5b640e5-d88c-4c17-9bf0-93597b7a1ce2 format: uuid type: string type: enum: - tenant type: string required: - id - type type: object type: object LinkProperty: example: https://example.com/api/resource oneOf: - description: A string containing the link’s URL. example: https://example.com/api/resource type: string - additionalProperties: false example: href: https://example.com/api/resource properties: href: description: A string containing the link’s URL. example: https://example.com/api/resource type: string meta: additionalProperties: true description: Free-form object that may contain non-standard information. example: key1: value1 key2: sub_key: sub_value key3: - array_value1 - array_value2 type: object required: - href type: object parameters: EndingBefore: description: Return the page of results immediately before this cursor example: v1.eyJpZCI6IjExMDAifQo= in: query name: ending_before schema: type: string HasUsersAssigned: description: returns current memberships of the role in the meta relationships section in: query name: has_users_assigned schema: default: false type: boolean StartingAfter: description: Return the page of results immediately after this cursor example: v1.eyJpZCI6IjEwMDAifQo= in: query name: starting_after schema: type: string Custom: description: Whether role is custom or not. in: query name: custom schema: $ref: '#/components/schemas/Custom' Version: description: The requested version of the endpoint to process the request example: '2026-03-25' in: query name: version required: true schema: $ref: '#/components/schemas/QueryVersion' AssignableByMe: description: When true, only return roles that the current user can assign to others in the tenant. in: query name: assignable_by_me schema: $ref: '#/components/schemas/AssignableByMe' Limit: description: Number of results to return per page example: 10 in: query name: limit schema: default: 10 format: int32 maximum: 100 minimum: 10 multipleOf: 10 type: integer ForceUpdate: description: flag to force the update of a role, required if users are assigned to the role in: query name: force schema: $ref: '#/components/schemas/ForceUpdate' ExpandPermissions: description: option to show all permission types in: query name: expand_permissions schema: default: false type: boolean RoleId: description: Unique identifier of the role. in: path name: role_id required: true schema: $ref: '#/components/schemas/RoleId' headers: SunsetHeader: description: 'A header containing the date of when the underlying endpoint will be removed. This header is only present if the endpoint has been deprecated. For information purposes only. Returned as a date in the format: YYYY-MM-DD' example: '2021-08-02' schema: format: date type: string VersionRequestedResponseHeader: description: A header containing the version of the endpoint requested by the caller. example: '2026-03-25' schema: $ref: '#/components/schemas/QueryVersion' VersionServedResponseHeader: description: A header containing the version of the endpoint that was served by the API. example: '2026-03-25' schema: $ref: '#/components/schemas/ActualVersion' VersionStageResponseHeader: description: 'A header containing the version stage of the endpoint. This stage describes the guarantees snyk provides surrounding stability of the endpoint. ' schema: enum: - wip - experimental - beta - ga - deprecated - sunset example: ga type: string RequestIdResponseHeader: description: 'A header containing a unique id used for tracking this request. If you are reporting an issue to Snyk it''s very helpful to provide this ID. ' example: 4b58e274-ec62-4fab-917b-1d2c48d6bdef schema: format: uuid type: string DeprecationHeader: description: 'A header containing the deprecation date of the underlying endpoint. For more information, please refer to the deprecation header RFC: https://tools.ietf.org/id/draft-dalal-deprecation-header-01.html ' example: '2021-07-01T00:00:00Z' schema: format: date-time type: string responses: '400': content: application/vnd.api+json: schema: $ref: '#/components/schemas/ErrorDocument' description: 'Bad Request: A parameter provided as a part of the request was invalid.' headers: deprecation: $ref: '#/components/headers/DeprecationHeader' snyk-request-id: $ref: '#/components/headers/RequestIdResponseHeader' snyk-version-lifecycle-stage: $ref: '#/components/headers/VersionStageResponseHeader' snyk-version-requested: $ref: '#/components/headers/VersionRequestedResponseHeader' snyk-version-served: $ref: '#/components/headers/VersionServedResponseHeader' sunset: $ref: '#/components/headers/SunsetHeader' '500': content: application/vnd.api+json: schema: $ref: '#/components/schemas/ErrorDocument' description: 'Internal Server Error: An error was encountered while attempting to process the request.' headers: deprecation: $ref: '#/components/headers/DeprecationHeader' snyk-request-id: $ref: '#/components/headers/RequestIdResponseHeader' snyk-version-lifecycle-stage: $ref: '#/components/headers/VersionStageResponseHeader' snyk-version-requested: $ref: '#/components/headers/VersionRequestedResponseHeader' snyk-version-served: $ref: '#/components/headers/VersionServedResponseHeader' sunset: $ref: '#/components/headers/SunsetHeader' '409': content: application/vnd.api+json: schema: $ref: '#/components/schemas/ErrorDocument' description: 'Conflict: The requested operation conflicts with the current state of the resource in some way.' headers: deprecation: $ref: '#/components/headers/DeprecationHeader' snyk-request-id: $ref: '#/components/headers/RequestIdResponseHeader' snyk-version-lifecycle-stage: $ref: '#/components/headers/VersionStageResponseHeader' snyk-version-requested: $ref: '#/components/headers/VersionRequestedResponseHeader' snyk-version-served: $ref: '#/components/headers/VersionServedResponseHeader' sunset: $ref: '#/components/headers/SunsetHeader' '403': content: application/vnd.api+json: schema: $ref: '#/components/schemas/ErrorDocument' description: 'Forbidden: the request requires an authentication token with more or different permissions.' headers: deprecation: $ref: '#/components/headers/DeprecationHeader' snyk-request-id: $ref: '#/components/headers/RequestIdResponseHeader' snyk-version-lifecycle-stage: $ref: '#/components/headers/VersionStageResponseHeader' snyk-version-requested: $ref: '#/components/headers/VersionRequestedResponseHeader' snyk-version-served: $ref: '#/components/headers/VersionServedResponseHeader' sunset: $ref: '#/components/headers/SunsetHeader' '404': content: application/vnd.api+json: schema: $ref: '#/components/schemas/ErrorDocument' description: 'Not Found: The resource being operated on could not be found.' headers: deprecation: $ref: '#/components/headers/DeprecationHeader' snyk-request-id: $ref: '#/components/headers/RequestIdResponseHeader' snyk-version-lifecycle-stage: $ref: '#/components/headers/VersionStageResponseHeader' snyk-version-requested: $ref: '#/components/headers/VersionRequestedResponseHeader' snyk-version-served: $ref: '#/components/headers/VersionServedResponseHeader' sunset: $ref: '#/components/headers/SunsetHeader' '401': content: application/vnd.api+json: schema: $ref: '#/components/schemas/ErrorDocument' description: 'Unauthorized: the request requires an authentication token.' headers: deprecation: $ref: '#/components/headers/DeprecationHeader' snyk-request-id: $ref: '#/components/headers/RequestIdResponseHeader' snyk-version-lifecycle-stage: $ref: '#/components/headers/VersionStageResponseHeader' snyk-version-requested: $ref: '#/components/headers/VersionRequestedResponseHeader' snyk-version-served: $ref: '#/components/headers/VersionServedResponseHeader' sunset: $ref: '#/components/headers/SunsetHeader' securitySchemes: APIToken: description: API key value must be prefixed with \"Token \". in: header name: Authorization type: apiKey BearerAuth: scheme: bearer type: http x-snyk-api-version: '2024-10-15'