# Roles

Manage user roles and permissions


## Servers

Sandbox environment
```
https://api.sbx.transmitsecurity.io/cis
```

US production environment
```
https://api.transmitsecurity.io/cis
```

EU production environment
```
https://api.eu.transmitsecurity.io/cis
```

CA production environment
```
https://api.ca.transmitsecurity.io/cis
```

AU production environment
```
https://api.au.transmitsecurity.io/cis
```

JP production environment
```
https://api.gasne1-ts01.transmitsecurity.io/cis
```

## Security

### bearer

Type: http
Scheme: bearer
Bearer Format: JWT

### UserAccessToken

A token returned upon end-user authentication, which provides access to resources and data for the user and app for which it was generated

Type: http
Scheme: bearer
Bearer Format: JWT

### AdminAccessToken

[object Object]

Type: oauth2
Token URL: /oidc/token
Scopes:

### ClientAccessToken

[object Object]

Type: oauth2
Token URL: /oidc/token
Scopes:

### OrgAdminAccessToken

A token returned upon B2B authentication for a user that has the organizationAdmin or organizationCreator role.

Type: oauth2
Token URL: /oidc/token
Scopes:

## Download OpenAPI description

 - [Roles](https://developer.transmitsecurity.com/_bundle/openapi/user/roles.openapi.yaml)

 - [POST /v1/applications/{app_id}/roles/{role_id}/assignments](https://developer.transmitsecurity.com/openapi/user/roles.openapi/other/assignroletoentity.md): Assign a role to users or groups
 - [DELETE /v1/applications/{app_id}/roles/{role_id}/assignments/{entity_id}](https://developer.transmitsecurity.com/openapi/user/roles.openapi/other/removeassignedrolefromentity.md): Delete user or group assignment from a role
 - [POST /v1/applications/{app_id}/roles](https://developer.transmitsecurity.com/openapi/user/roles.openapi/other/createroleinapp.md): Create a new role for this application. <br><br>**Required permissions**: `organizations:create`, `roles:create`, `apps:create`, `[appId]:create`.
 - [GET /v1/applications/{app_id}/roles](https://developer.transmitsecurity.com/openapi/user/roles.openapi/other/getapproles.md): Retrieve a list of all roles created for this application. <br><br>**Required permissions**: `organizations:read`, `roles:read`, `organizations:list`, `roles:list`, `apps:read`, `[appId]:read`, `apps:
 - [GET /v1/applications/{app_id}/roles/{role_id}](https://developer.transmitsecurity.com/openapi/user/roles.openapi/other/getapprolebyid.md): Retrieve a role by ID. <br><br>**Required permissions**: `organizations:read`, `roles:read`, `apps:read`, `[appId]:read`.
 - [PUT /v1/applications/{app_id}/roles/{role_id}](https://developer.transmitsecurity.com/openapi/user/roles.openapi/other/updateroleinapp.md): Update an existing role for this application. <br><br>**Required permissions**: `organizations:edit`, `roles:edit`, `apps:edit`, `[appId]:edit`.
 - [DELETE /v1/applications/{app_id}/roles/{role_id}](https://developer.transmitsecurity.com/openapi/user/roles.openapi/other/deleterolefromapp.md): Delete role from this application. <br><br>**Required permissions**: `organizations:delete`, `roles:delete`, `apps:delete`, `[appId]:delete`.