Skip to main content
POST
Create a default role grant

Authorizations

Authorization
string
header
required

Organization API key (sl_…).

Headers

x-tenant-id
string
required

The organization ID the request is scoped to.

Body

application/json
role
enum<string>
required

The role every organization member holds.

Available options:
admin,
editor,
monitor_editor,
viewer,
team_creator
scope
RoleGrantScope · object | null

The resource the role applies to. Omit to grant it across the whole organization.

Response

Successful Response

A role every member of your organization holds by default, with the scope it applies to.

id
string
required
read-only

The unique identifier of this role grant.

role
enum<string>
required

The role every organization member holds.

Available options:
admin,
editor,
monitor_editor,
viewer,
team_creator
entity
PermissionEntityWithDisplayName · object
required
read-only

The resolved scope this grant applies to — its type, id and human readable display name. Falls back to the organization when the grant carries no narrower scope.

create_time
string
required
read-only

When the grant was created — RFC 3339 UTC, e.g. 2026-06-05T10:30:00Z.

update_time
string
required
read-only

When the grant was last updated — RFC 3339 UTC.

etag
string
required
read-only

Opaque strong ETag for optimistic concurrency.

snowflake_organization_name
string | null

Snowflake organization this grant is scoped to, if any.

snowflake_account_uuid
string | null

Snowflake account this grant is scoped to, if any.

usage_group_id
string | null

Usage group this grant is scoped to, if any.