Adds role assignments for the given Marking. For Organization markings, only the USE and DECLASSIFY roles are supported; the ADMINISTER role must be managed via the Organization Role Assignment endpoints.
Third-party applications using this endpoint via OAuth2 must request the following operation scope: api:admin-write.
objectlist<MarkingRoleUpdate>1
2
3
4
5
curl -X POST \
\t-H "Content-type: application/json" \
\t-H "Authorization: Bearer $TOKEN" \
"https://$HOSTNAME/api/v2/admin/markings/18212f9a-0e63-4b79-96a0-aae04df23336/roleAssignments/add" \
-d '{"roleAssignments":[{"role":"ADMINISTER","principalId":"f05f8da4-b84c-4fca-9c77-8af0b13d11de"}]}'| Error Name | ||
|---|---|---|
Principal | Error Code | NOT_FOUND |
| Status Code | 404 | |
| Description | A principal (User or Group) with the given PrincipalId could not be found | |
| Parameters | principalId | |
Get | Error Code | PERMISSION_DENIED |
| Status Code | 403 | |
| Description | The provided token does not have permission to view the marking. | |
| Parameters | markingId | |
Organization | Error Code | INVALID_ARGUMENT |
| Status Code | 400 | |
| Description | The ADMINISTER role on Organization markings cannot be managed through the Marking Role Assignments endpoints. To manage administrator roles for an Organization, use the Organization Role Assignment endpoints instead. | |
| Parameters | markingId, organizationRid | |
Add | Error Code | PERMISSION_DENIED |
| Status Code | 403 | |
| Description | Could not add the MarkingRoleAssignment. | |
| Parameters | markingId | |
Marking | Error Code | NOT_FOUND |
| Status Code | 404 | |
| Description | The given Marking could not be found. | |
| Parameters | markingId | |
See Errors for a general overview of errors in the platform.