rbac_assign_role
Assign a role (reader, writer, admin, owner) to an agent, optionally restricting to a resource type, name prefix, or expiration date.
Instructions
η.6.1 — Grant a role to an agent. Roles: reader (read), writer (read+write), admin (read+write+delete), owner (all four). Optional resourceType narrows to one type; optional scope narrows to a name prefix; optional validUntil expires the grant.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| role | Yes | Role name (reader, writer, admin, owner, or custom) | |
| notes | No | Free-form notes (e.g. ticket reference) | |
| scope | No | Optional name prefix (e.g. "project-x:") | |
| agentId | Yes | Agent identifier | |
| validFrom | No | ISO 8601 — assignment becomes active | |
| validUntil | No | ISO 8601 — assignment expires | |
| resourceType | No | Optional resource-type narrow |