Skip to main content
Each scope grants a role on a specific resource: 
{
  "resource_type": "agent",
  "resource_id": "agt_xxx",
  "role": "editor"
}

​
Valid Roles by Resource Type

Resource TypeValid Roles
orgadmin, member
namespaceadmin
projectdiscoverer, viewer, editor, owner
agentdiscoverer, viewer, editor, owner, executor
The executor role is legacy and is normalized to viewer internally, but still grants run permission.