Reference
governance.role
domain: governance
A ROLE available within a tenant — the unit an admin assigns users to. Roles are REGISTERED into a tenant when an app that targets them is installed (the app declares its audience roles), so the admin always has a concrete list to assign. Assigning a user to a role is a governance.role_grant.
| Field | Type | Required | Description |
|---|---|---|---|
schema | — | ✓ | |
id | string | ✓ | ds:<tenant>:role/<role> |
tenant | string | ✓ | |
role | string | ✓ | role slug, e.g. disaster-officer |
label | string | ||
source_apps | array<string> | app ids that introduced/target this role |