fossa_manage_role
Create, update, or delete a custom FOSSA role, setting its scope, name, description, and permissions.
Instructions
Create, update, or delete a custom FOSSA role.
WRITES TO FOSSA. Requires FOSSA_ALLOW_WRITES=true and FOSSA_ALLOW_ADMIN=true. action="delete" additionally requires FOSSA_ALLOW_DESTRUCTIVE=true.
A role is a scope plus a permission list, so the three actions share one
shape and one tool. "create" needs scope ("organization" or "team"),
name, and description; "update" needs role_id and at least one of
name, description, or permissions; "delete" needs only role_id.
Each entry in permissions is an object with the keys resourceType and
action, both drawn from fossa_list_roles section "permissions" — FOSSA
rejects a pair that is not in that catalog. Passing permissions on an
update replaces the role's entire permission list, so send the full set,
not a delta; omit it to leave the permissions alone. A role's scope cannot be
changed after creation.
Only custom roles can be edited or deleted. FOSSA refuses to delete a built-in role, and refuses to delete any role still assigned to a user, so a delete cannot silently strip someone's access.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| name | No | ||
| scope | No | ||
| action | Yes | ||
| role_id | No | ||
| description | No | ||
| permissions | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||