Assign a Role to a User

Number of APIs: 3

Roles determine what actions a user can perform. For example, to generate a client secret, a user must be assigned the Environment Admin role.

The PingOne roles are:

For permissions associated with each role, see PingOne Role Permissions.

Prerequisites

• Get an access token from the worker application that you created in Getting Started with the PingOne APIs. To get a token from a different worker application in an alternate sandbox environment, run the token request endpoint using the client ID and client secret of your chosen worker app to authenticate the request. For more information, see GET a Worker Application Access Token.

• An existing user to assign the role to.

Workflow order of operations

To assign a role to a user, complete the following tasks:

1. Make a GET request to {{apiPath}}/environments/{{envID}}/users to get the ID of the user.

2. Make a GET request to {{apiPath}}/roles to get the ID of the role to assign.

3. Make a POST request to {{apiPath}}/environments/{{envID}}/users/{{userID}}/roleAssignments to create the user role assignment.

1. Step 1: Get the user ID GET {{apiPath}}/environments/{{envID}}/users

2. Step 2: Get the role ID GET {{apiPath}}/roles

3. Step 3: Create the user role assignment POST {{apiPath}}/environments/{{envID}}/users/{{userID}}/roleAssignments