---
url: /apidocs/rbac.md
---
## Rbac API

| Endpoint | Method | Description |
|-----|-----|-----|
| [rbac:assignPermissions](#assign-permissions) | websocket | Assign permissions |
| [rbac:removePermissions](#remove-permissions) | websocket | Remove permissions |
| [rbac:listPermissionsForTarget](#list-permissions-for-target) | websocket | List permissions for target |
| [rbac:createAuthClient](#create-auth-client) | websocket | Create auth client |
| [rbac:listAuthClients](#list-auth-clients) | websocket | List auth clients |
| [rbac:updateAuthClientScope](#update-auth-client-scope) | websocket | Update auth client scope |

### Assign permissions

**Method:** websocket

**Endpoint:** rbac:assignPermissions

**Request:**

**Response:**

### Remove permissions

**Method:** websocket

**Endpoint:** rbac:removePermissions

**Request:**

**Response:**

### List permissions for target

**Method:** websocket

**Endpoint:** rbac:listPermissionsForTarget

**Request:**

**Response:**

### Create auth client

**Method:** websocket

**Endpoint:** rbac:createAuthClient

**Description:** Creates a new auth client. If clientId is provided it must be unique; otherwise a random one is generated. Requires superadmin (all) permission.

**Request:**

**Response:**

### List auth clients

**Method:** websocket

**Endpoint:** rbac:listAuthClients

**Description:** Returns all registered auth clients. Client secrets are hidden. Requires superadmin (all) permission.

**Request:**

**Response:**

### Update auth client scope

**Method:** websocket

**Endpoint:** rbac:updateAuthClientScope

**Description:** Updates the scope of an auth client. Requires superadmin (all) permission.

**Request:**

**Response:**