Domain name for API request: organization.tencentcloudapi.com.
This API is used to grant authorizations on member accounts.
A maximum of 20 requests can be initiated per second for this API.
The following request parameter list only provides API request parameters and some common parameters. For the complete common parameter list, see Common Request Parameters.
Parameter Name | Required | Type | Description |
---|---|---|---|
Action | Yes | String | Common Params. The value used for this API: CreateRoleAssignment. |
Version | Yes | String | Common Params. The value used for this API: 2021-03-31. |
Region | No | String | Common Params. This parameter is not required. |
ZoneId | Yes | String | Space ID. |
RoleAssignmentInfo.N | No | Array of RoleAssignmentInfo | Authorized member account information, up to 50 entries. |
Parameter Name | Type | Description |
---|---|---|
Tasks | Array of TaskInfo | Task details. |
RequestId | String | The unique request ID, generated by the server, will be returned for every request (if the request fails to reach the server for other reasons, the request will not obtain a RequestId). RequestId is required for locating a problem. |
This example shows you how to grant authorizations on member accounts.
POST / HTTP/1.1
Host: organization.tencentcloudapi.com
Content-Type: application/json
X-TC-Action: CreateRoleAssignment
<Common request parameters>
{
"ZoneId": "z-djw83n***",
"RoleAssignmentInfo": [
{
"RoleConfigurationId": "rc-sjsiw2***",
"TargetType": "MemberUin",
"TargetUin": 1000023222,
"PrincipalType": "User",
"PrincipalId": "u-0829jd8d***"
}
]
}
{
"Response": {
"Tasks": [
{
"TaskId": "t-sowmiwm",
"RoleConfigurationId": "r-sjsosmsss",
"RoleConfigurationName": "test",
"TargetUin": 10000323432,
"TargetType": "MemberUin",
"PrincipalId": "u-djiem3o***",
"PrincipalType": "User",
"TaskType": "CreateRoleAssignment",
"Status": "InProgress"
}
],
"RequestId": "10accfa5-15ed-41fa-9e09-7efffd8e9345"
}
}
TencentCloud API 3.0 integrates SDKs that support various programming languages to make it easier for you to call APIs.
The following only lists the error codes related to the API business logic. For other error codes, see Common Error Codes.
Error Code | Description |
---|---|
FailedOperation.IdentityCenterNotOpen | The CIC service is not enabled. |
FailedOperation.OrganizationMemberNotExist | The member account does not exist. |
FailedOperation.RoleConfigurationAuthorizationAlreadyExist | The permission authorization already exists. |
FailedOperation.RoleConfigurationAuthorizationOverLimit | The number of permission configuration authorizations exceeds the limit. |
FailedOperation.ZoneIdNotExist | The user zoneId of the CIC service does not exist. |
InvalidParameter.GroupNotExist | The user group does not exist. |
InvalidParameter.RoleConfigurationNotExist | The permission configuration does not exist. |
LimitExceeded.CreateRoleAssignmentLimitExceeded | Requests for creating permission configurations exceed the limit. |
ResourceNotFound.UserNotExist | The user does not exist. |
Was this page helpful?