PUT /api/authorization/tenants/{tenantId}/principals/{principalId}/scopes/{scopeId}/roles/{scopeRoleId} assigns a user to a role.


Use the supported input parameters to control the command output.






Specifies the appliance name and fully qualified domain name, or IP address of the vRealize Automation server.


Specifies a valid HTTP bearer token with necessary credentials.


Specifies the ID of the tenant.


Specifies the ID of the user in name@domain format.


Specifies the ID of the user role.

curl Command to Assign a User to a Role

The following example command string submits a request to assign the user tony in the domain example.mycompany.com to the tenant administrator role. It provides empty braces for the required JSON payload. For more information about getting the user name and domain values, see Syntax for Searching LDAP or Active Directory for a User .

curl --insecure -H "Content-Type: application/json" -H "Authorization: Bearer $token" "https://$vRA/identity/api/authorization/tenants/development/principals/susan@example.mycompany.com/roles/CSP_TENANT_ADMIN/" --data "{}"

If the command is successful, the HTTP response body is empty except for a 204 No Content status statement.