hs4.admin.users.set_role
Set a user's role via admin controls. Supports dry-run simulations and audit logging for safe role changes.
Instructions
Set the role for a user account through admin controls.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| role | Yes | ||
| domain | Yes | Admin mutation domain; must be 'users'. | |
| dryRun | No | If true, validates and simulates action without changing HS4. | |
| intent | No | High-level intent for this operation. | |
| reason | No | Reason/rationale for auditability. | |
| userId | Yes | ||
| confirm | No | Must be true for mutating operations unless running dry-run. | |
| riskLevel | No | Risk classification for audit and change-control workflows. | medium |
| changeTicket | No | Required when policy enforces change-ticket gating. | |
| operationTier | No | Privilege tier for this mutation. | operator |
| maintenanceWindowId | No | Required for non-dry-run admin mutations. |