Role Resource Set Bindings

The Role Resource Set Bindings API provides operations to assign members to a Custom Role that targets resources in a Resource Set. These operations allow you to assign custom roles to admins who are scoped to the designated resources in a resource set.

The returned role resource set binding is a single unique combination of a resource set, a custom role, and members.

Note: If you use a custom role with permissions that don't apply to the resources in the resource set, it doesn't affect the admin role. For example, the okta.users.userprofile.manage permission gives the admin no privileges if it's granted to a resource set that only includes https://{yourOktaDomain}/api/v1/groups/{targetGroupId} resources. If you want the admin to be able to manage the users within the group, the resource set must include the corresponding https://{yourOktaDomain}/api/v1/groups/{targetGroupId}/users resources.