Claude Platform Docs

RBAC 组

创建 RBAC 组
$ ant beta:organization:rbac-groups create
POST/v1/organizations/rbac_groups

在 Claude Enterprise 租户中创建 RBAC 组。通过 API 创建的组的来源类型为 "direct"。

列出 RBAC 组
$ ant beta:organization:rbac-groups list
GET/v1/organizations/rbac_groups

列出 Claude Enterprise 租户中的 RBAC 组。

获取 RBAC 组
$ ant beta:organization:rbac-groups retrieve
GET/v1/organizations/rbac_groups/{rbac_group_id}

按 ID 检索 RBAC 组。

更新 RBAC 组
$ ant beta:organization:rbac-groups update
POST/v1/organizations/rbac_groups/{rbac_group_id}

更新 RBAC 组的名称。当租户中的某个组织使用 SCIM 预配时，由身份提供商预配的组（来源类型为 "scim"）无法通过 API 修改。

删除 RBAC 组
$ ant beta:organization:rbac-groups delete
DELETE/v1/organizations/rbac_groups/{rbac_group_id}

删除 RBAC 组。当租户中的某个组织使用 SCIM 预配时，由身份提供商预配的组（来源类型为 "scim"）无法通过 API 删除。

Models
beta_rbac_group: object{ type: "rbac_group", id, created_at, 4 more }
type: "rbac_group"

Object type.

For RBAC Groups, this is always "rbac_group".

id: string

ID of the RBAC Group.

created_at: string

RFC 3339 timestamp of when the RBAC Group was created.

formatdate-time
name: string

Name of the RBAC Group. Not uniqueness-enforced.

role_ids: array of string

RBAC Role IDs attached to this RBAC Group. Role attachment is managed in the admin settings and is read-only on this API. null means role data was temporarily unavailable — retry to distinguish from an empty list.

source_type: "direct" or "scim"

How the RBAC Group was created: "direct" for groups created directly (for example, in the organization's admin settings), "scim" for groups provisioned by the identity provider.

One of the following:
"direct"
"scim"
updated_at: string

RFC 3339 timestamp of when the RBAC Group was last updated.

formatdate-time

RBAC 组成员

列出 RBAC 组成员
$ ant beta:organization:rbac-groups:members list
GET/v1/organizations/rbac_groups/{rbac_group_id}/members

列出 RBAC 组的成员。

添加 RBAC 组成员
$ ant beta:organization:rbac-groups:members add
POST/v1/organizations/rbac_groups/{rbac_group_id}/members

将用户添加到 RBAC 组。当租户中的某个组织使用 SCIM 预配时，由身份提供商预配的组（来源类型为 "scim"）的成员资格无法通过 API 修改。

移除 RBAC 组成员
$ ant beta:organization:rbac-groups:members remove
DELETE/v1/organizations/rbac_groups/{rbac_group_id}/members/{user_id}

从 RBAC 组中移除用户。当租户中的某个组织使用 SCIM 预配时，由身份提供商预配的组（来源类型为 "scim"）的成员资格无法通过 API 修改。