Set roles for a system user.

Overwrites the system user's current roles with the provided roles. Roles are a collection of access rights and determine what resources (API endpoints) the system user is able to access.

Path Parameters

• id uuid required

  Identifies the domain in Keycloak.

• systemUserId uuid required

  Identifies the system user.

application/json

Request Body required

List of roles to assign to the system user.

• roles object[] required

  id uuid required

  Identifies the role.

Responses

• 204
• 400
• 401
• 403
• 404

---

The system user's roles have been updated.

Response Headers

• Content-Location string

  URL to the resource that got impacted by the request.

Bad request. The server cannot process the request.

application/json

• Schema
• Example (from schema)

---

Schema

• description string

  Human readable description of the error

• errorCode string

  Following errors are defined for this service:

  400 Bad Request Errors

  INVALID_REQUEST_BODY

  Request body is invalid. Must contain valid JSON.

  INVALID_EMAIL

  Invalid value for the property email. Must be a valid email.

  INVALID_CLIENT_ID_PREFIX

  Invalid value for the property clientIdPrefix. Allowed characters are A-Z, a-z, 0-9, as well as underscore (_) and hyphen (-). Client id must not be longer than 128 characters.

  NOT_ALLOWED_TO_MANAGE_SELF

  Not allowed to manage your own user.

  INVALID_USER_STATUS

  Invalid value for the property enabled. Boolean values are allowed.

  INVALID_SEARCH_VALUE

  Invalid value for the query parameter search. Most Unicode characters are allowed..

  INVALID_OFFSET_VALUE

  Invalid value for the query parameter offset. Number between 0 and 1000000 is allowed.

  INVALID_LIMIT_VALUE

  Invalid value for the query parameter limit. Number between 0 and 100 is allowed.

  INVALID_ROLES_ARRAY

  Invalid value for the property roles. Must be of type array ([]) containing between 0 and 100 roles.

  INVALID_SOLUTIONS_ARRAY

  Invalid value for the property solutions. Must be of type array ([]) containing between 0 and 100 solutions.

  INVALID_SOLUTION

  Invalid value for one or more entries in the solutions array. Alphabetic characters, numbers, and some special characters are allowed.

  INVALID_USER_ROLES

  Invalid content in property roles. Each role must contain property id with UUID formatting and property type specifying whether the role is global or custom.

  INVALID_SYSTEM_USER_ROLES

  Invalid content in property roles. Each role must contain property id with UUID formatting and property type with value global.

  INVALID_GLOBAL_ROLE

  At least one of the requested global roles is invalid.

  INVALID_NAME

  Invalid value for the property name. Alphabetic characters, numbers, and some special characters are allowed.

  INVALID_PHONE_NUMBER

  Invalid value for the property phoneNumber. Must be of type string containing between 4 and 20 numbers.

  INVALID_PARENT_DOMAIN_ID

  Invalid value for the property parentId. Must contain a string with UUID formatting.

  INVALID_DOMAIN_ID

  Invalid value for the property 'domainId'. Must contain a string.

  PARENT_DOMAIN_NOT_FOUND

  The domain specified in the property parentId could not be found.

  401 Unauthorized Errors

  INVALID_TOKEN

  Access token is not valid.

  403 Forbidden Errors

  FORBIDDEN_ERROR

  Not authorized to access this resource.

  FORBIDDEN_ROLE_UPDATE

  Forbidden operation since it would result in the addition or removal of a role the requesting user does not have themselves.

  FORBIDDEN_IDENTICAL_DOMAIN_UPDATE

  User already belongs to the specified domain.

  FORBIDDEN_SOLUTION

  Forbidden operation since it would result in the addition or removal of a solution the requesting user does not have themselves.

  FORBIDDEN_ROOT_DOMAIN_SOLUTIONS_UPDATE

  Not allowed to change solutions for root domain.

  404 Not Found Errors

  RESOURCE_NOT_FOUND

  Requested resource does not exist.

  409 Conflict Errors

  CONFLICT_ERROR

  Resource already exists.

  500 Internal Server Errors

  SERVICE_ERROR

  Error occurred when communicating with another service. Please try again or contact your system administrator if this problem persists.

  ACCESS_TOKEN_ERROR

  Unexpected error with access token. Please try logging out and in again or contact your system administrator if this problem persists.

  CREATE_DOMAIN_ERROR

  Domain could not be created due to an unexpected internal error. Please try again or contact your system administrator if this problem persists.

  503 Service Unavailable Errors

  CRITICAL_SERVICE_ERROR

  Unable to communicate with another service. Please try again or contact your system administrator if this problem persists.

• timestamp integer

  Epoch timestamp specifying when error occurred

{
  "description": true,
  "errorCode": true,
  "timestamp": 1560954657369
}

Invalid or missing access token (JWT).

Not authorized to access this resource.

Entity not found.

application/json

• Schema
• Example (from schema)

---

Schema

• description string

  Human readable description of the error

• errorCode string

  Following errors are defined for this service:

  400 Bad Request Errors

  INVALID_REQUEST_BODY

  Request body is invalid. Must contain valid JSON.

  INVALID_EMAIL

  Invalid value for the property email. Must be a valid email.

  INVALID_CLIENT_ID_PREFIX

  Invalid value for the property clientIdPrefix. Allowed characters are A-Z, a-z, 0-9, as well as underscore (_) and hyphen (-). Client id must not be longer than 128 characters.

  NOT_ALLOWED_TO_MANAGE_SELF

  Not allowed to manage your own user.

  INVALID_USER_STATUS

  Invalid value for the property enabled. Boolean values are allowed.

  INVALID_SEARCH_VALUE

  Invalid value for the query parameter search. Most Unicode characters are allowed..

  INVALID_OFFSET_VALUE

  Invalid value for the query parameter offset. Number between 0 and 1000000 is allowed.

  INVALID_LIMIT_VALUE

  Invalid value for the query parameter limit. Number between 0 and 100 is allowed.

  INVALID_ROLES_ARRAY

  Invalid value for the property roles. Must be of type array ([]) containing between 0 and 100 roles.

  INVALID_SOLUTIONS_ARRAY

  Invalid value for the property solutions. Must be of type array ([]) containing between 0 and 100 solutions.

  INVALID_SOLUTION

  Invalid value for one or more entries in the solutions array. Alphabetic characters, numbers, and some special characters are allowed.

  INVALID_USER_ROLES

  Invalid content in property roles. Each role must contain property id with UUID formatting and property type specifying whether the role is global or custom.

  INVALID_SYSTEM_USER_ROLES

  Invalid content in property roles. Each role must contain property id with UUID formatting and property type with value global.

  INVALID_GLOBAL_ROLE

  At least one of the requested global roles is invalid.

  INVALID_NAME

  Invalid value for the property name. Alphabetic characters, numbers, and some special characters are allowed.

  INVALID_PHONE_NUMBER

  Invalid value for the property phoneNumber. Must be of type string containing between 4 and 20 numbers.

  INVALID_PARENT_DOMAIN_ID

  Invalid value for the property parentId. Must contain a string with UUID formatting.

  INVALID_DOMAIN_ID

  Invalid value for the property 'domainId'. Must contain a string.

  PARENT_DOMAIN_NOT_FOUND

  The domain specified in the property parentId could not be found.

  401 Unauthorized Errors

  INVALID_TOKEN

  Access token is not valid.

  403 Forbidden Errors

  FORBIDDEN_ERROR

  Not authorized to access this resource.

  FORBIDDEN_ROLE_UPDATE

  Forbidden operation since it would result in the addition or removal of a role the requesting user does not have themselves.

  FORBIDDEN_IDENTICAL_DOMAIN_UPDATE

  User already belongs to the specified domain.

  FORBIDDEN_SOLUTION

  Forbidden operation since it would result in the addition or removal of a solution the requesting user does not have themselves.

  FORBIDDEN_ROOT_DOMAIN_SOLUTIONS_UPDATE

  Not allowed to change solutions for root domain.

  404 Not Found Errors

  RESOURCE_NOT_FOUND

  Requested resource does not exist.

  409 Conflict Errors

  CONFLICT_ERROR

  Resource already exists.

  500 Internal Server Errors

  SERVICE_ERROR

  Error occurred when communicating with another service. Please try again or contact your system administrator if this problem persists.

  ACCESS_TOKEN_ERROR

  Unexpected error with access token. Please try logging out and in again or contact your system administrator if this problem persists.

  CREATE_DOMAIN_ERROR

  Domain could not be created due to an unexpected internal error. Please try again or contact your system administrator if this problem persists.

  503 Service Unavailable Errors

  CRITICAL_SERVICE_ERROR

  Unable to communicate with another service. Please try again or contact your system administrator if this problem persists.

• timestamp integer

  Epoch timestamp specifying when error occurred

{
  "description": "Requested resource does not exist.",
  "errorCode": "RESOURCE_NOT_FOUND",
  "timestamp": 1560954657369
}

Loading...