Claude Platform Docs

RBAC 组

创建 RBAC 组
$client->beta->organization->rbacGroups->create(string name): RBACGroup
POST/v1/organizations/rbac_groups

在 Claude Enterprise 租户中创建 RBAC 组。通过 API 创建的组的来源类型为 "direct"。

列出 RBAC 组
$client->beta->organization->rbacGroups->list(?int limit, ?string page): PageCursor<RBACGroup>
GET/v1/organizations/rbac_groups

列出 Claude Enterprise 租户中的 RBAC 组。

获取 RBAC 组
$client->beta->organization->rbacGroups->retrieve(string rbacGroupID): RBACGroup
GET/v1/organizations/rbac_groups/{rbac_group_id}

按 ID 检索 RBAC 组。

更新 RBAC 组
$client->beta->organization->rbacGroups->update(string rbacGroupID, ?string name): RBACGroup
POST/v1/organizations/rbac_groups/{rbac_group_id}

更新 RBAC 组的名称。当租户中的某个组织使用 SCIM 预配时，由身份提供商预配的组（来源类型为 "scim"）无法通过 API 修改。

删除 RBAC 组
$client->beta->organization->rbacGroups->delete(string rbacGroupID): DeletedRBACGroup
DELETE/v1/organizations/rbac_groups/{rbac_group_id}

删除 RBAC 组。当租户中的某个组织使用 SCIM 预配时，由身份提供商预配的组（来源类型为 "scim"）无法通过 API 删除。

Models
class DeletedRBACGroup { $type = 'rbac_group_deleted'; $id; }
"rbac_group_deleted" type

Deleted object type.

For RBAC Groups, this is always "rbac_group_deleted".

string id

ID of the RBAC Group.

class RBACGroup { $type = 'rbac_group'; $id; $createdAt; /* 4 more */ }
"rbac_group" type

Object type.

For RBAC Groups, this is always "rbac_group".

string id

ID of the RBAC Group.

\Datetime createdAt

RFC 3339 timestamp of when the RBAC Group was created.

string name

Name of the RBAC Group. Not uniqueness-enforced.

?list<string> roleIDs

RBAC Role IDs attached to this RBAC Group. Role attachment is managed in the admin settings and is read-only on this API. null means role data was temporarily unavailable — retry to distinguish from an empty list.

SourceType sourceType

How the RBAC Group was created: "direct" for groups created directly (for example, in the organization's admin settings), "scim" for groups provisioned by the identity provider.

\Datetime updatedAt

RFC 3339 timestamp of when the RBAC Group was last updated.

RBAC 组成员

列出 RBAC 组成员
$client->beta->organization->rbacGroups->members->list(string rbacGroupID, ?int limit, ?string page): PageCursor<BetaRBACGroupMember>
GET/v1/organizations/rbac_groups/{rbac_group_id}/members

列出 RBAC 组的成员。

添加 RBAC 组成员
$client->beta->organization->rbacGroups->members->add(string rbacGroupID, string userID): BetaRBACGroupMember
POST/v1/organizations/rbac_groups/{rbac_group_id}/members

将用户添加到 RBAC 组。当租户中的某个组织使用 SCIM 预配时，由身份提供商预配的组（来源类型为 "scim"）的成员资格无法通过 API 修改。

移除 RBAC 组成员
$client->beta->organization->rbacGroups->members->remove(string userID, string rbacGroupID): BetaDeletedRBACGroupMember
DELETE/v1/organizations/rbac_groups/{rbac_group_id}/members/{user_id}

从 RBAC 组中移除用户。当租户中的某个组织使用 SCIM 预配时，由身份提供商预配的组（来源类型为 "scim"）的成员资格无法通过 API 修改。