49 lines
1.2 KiB
Plaintext
49 lines
1.2 KiB
Plaintext
---
|
|
layout: docs
|
|
page_title: Domain Model - Roles
|
|
description: |-
|
|
The anatomy of a Boundary role
|
|
---
|
|
|
|
# Roles
|
|
|
|
A role is a resource
|
|
that contains a collection of [permissions][]
|
|
which are granted to any principal assigned to the role.
|
|
[Users][], [groups][], and [managed groups][] are principals
|
|
which allows either to be assigned to a role.
|
|
A role can be defined within any [scope][].
|
|
A role can be assigned to principals from any scope.
|
|
|
|
## Attributes
|
|
|
|
A role has the following configurable attributes:
|
|
|
|
- `name` - (optional)
|
|
If set, the `name` must be unique within the role's [project][].
|
|
|
|
- `description` - (optional)
|
|
|
|
## Referenced By
|
|
|
|
- [Group][]
|
|
- [Managed Group][]
|
|
- [Project][]
|
|
- [User][]
|
|
|
|
[group]: /docs/concepts/domain-model/groups
|
|
[groups]: /docs/concepts/domain-model/groups
|
|
[managed group]: /docs/concepts/domain-model/managed-groups
|
|
[managed groups]: /docs/concepts/domain-model/managed-groups
|
|
[permissions]: /docs/concepts/security/permissions
|
|
[project]: /docs/concepts/domain-model/scopes#projects
|
|
[scope]: /docs/concepts/domain-model/scopes
|
|
[user]: /docs/concepts/domain-model/users
|
|
[users]: /docs/concepts/domain-model/users
|
|
|
|
## Service API Docs
|
|
|
|
The following services are relevant to this resource:
|
|
|
|
- [Role Service](/api-docs/role-service)
|