Platform Access Control: Roles API Documentation
Documentation is now available for the Access Control Roles API, which enables administrators to manage custom roles in Tenable Vulnerability Management. Custom roles allow you to define granular permission sets tailored to specific user responsibilities, providing greater flexibility than the standard predefined roles.
The documentation includes endpoints for creating, listing, updating, and deleting custom roles, as well as retrieving the complete list of available role permission strings (custom role privileges) that can be assigned to a role.
With this API, you can:
- List all standard and custom roles defined for your account
- Create custom roles with specific permission sets
- Update or delete existing custom roles
- Retrieve the complete list of available role permission strings and their hierarchical relationships
For more information about roles, see Roles in the Tenable Developer Portal and Roles in the Tenable Vulnerability Management User Guide.
Documentation is now available for the following endpoints:
| API Endpoint | Name | Description |
|---|---|---|
| POST /access-control/v1/roles | Create role | Creates a custom role with the specified permissions. |
| GET /access-control/v1/roles | List roles | Lists all standard and custom roles defined for your Tenable Vulnerability Management instance. |
| GET /access-control/v1/roles/{role_uuid} | Get role details | Retrieves the details for the specified role. |
| PUT /access-control/v1/roles/{role_uuid} | Update role | Updates the specified custom role. |
| DELETE /access-control/v1/roles/{role_uuid} | Delete role | Deletes the specified custom role. |
| GET /access-control/v1/role-permissions | List role permissions | Lists all available role permission strings (custom role privileges), including metadata and hierarchical relationships. |