documents.read, admin.users.delete, or billing.invoices.create for clear organization.
Important: Permission names must be unique within the workspace. Once created, permissions are immediately available for assignment.
Required permissions:
rbac.*.create_permission
See the API reference for the full HTTP endpoint documentation.
Usage
Flags
string
required
Human-readable name describing the permission’s purpose. Names must be unique within your workspace to prevent conflicts during assignment. Use clear, semantic names that developers can easily understand when building authorization logic. Consider using hierarchical naming conventions like
resource.action for better organization. Must be 1-512 characters.string
required
URL-safe identifier for use in APIs and integrations. Must start with a letter and contain only letters, numbers, periods, underscores, and hyphens. Slugs are often used in REST endpoints, configuration files, and external integrations. Must be unique within your workspace. Must be 1-128 characters.
string
Detailed documentation of what this permission grants access to. Include information about affected resources, allowed actions, and any important limitations. This internal documentation helps team members understand permission scope and security implications. Not visible to end users. Max 512 characters.
Global Flags
Examples
Output
Default output shows the request ID, followed by the created permission:--output=json, the full response envelope is returned: