Claude Platform Docs

RBAC 组

创建 RBAC 组
beta.organization.rbac_groups.create(**kwargs) -> BetaRBACGroup
POST/v1/organizations/rbac_groups

在 Claude Enterprise 租户中创建 RBAC 组。通过 API 创建的组的来源类型为 "direct"。

列出 RBAC 组
beta.organization.rbac_groups.list(**kwargs) -> SyncPageCursor[BetaRBACGroup]
GET/v1/organizations/rbac_groups

列出 Claude Enterprise 租户中的 RBAC 组。

获取 RBAC 组
beta.organization.rbac_groups.retrieve(rbac_group_id) -> BetaRBACGroup
GET/v1/organizations/rbac_groups/{rbac_group_id}

按 ID 检索 RBAC 组。

更新 RBAC 组
beta.organization.rbac_groups.update(rbac_group_id, **kwargs) -> BetaRBACGroup
POST/v1/organizations/rbac_groups/{rbac_group_id}

更新 RBAC 组的名称。当租户中的某个组织使用 SCIM 预配时，由身份提供商预配的组（来源类型为 "scim"）无法通过 API 修改。

删除 RBAC 组
beta.organization.rbac_groups.delete(rbac_group_id) -> RBACGroupDeleteResponse
DELETE/v1/organizations/rbac_groups/{rbac_group_id}

删除 RBAC 组。当租户中的某个组织使用 SCIM 预配时，由身份提供商预配的组（来源类型为 "scim"）无法通过 API 删除。

Models
class BetaRBACGroup: type: "rbac_group"; id; created_at; ... # 4 more
type: Literal["rbac_group"]

Object type.

For RBAC Groups, this is always "rbac_group".

defaultrbac_group
id: str

ID of the RBAC Group.

created_at: datetime

RFC 3339 timestamp of when the RBAC Group was created.

formatdate-time
name: str

Name of the RBAC Group. Not uniqueness-enforced.

role_ids: Optional[List[str]]

RBAC Role IDs attached to this RBAC Group. Role attachment is managed in the admin settings and is read-only on this API. null means role data was temporarily unavailable — retry to distinguish from an empty list.

source_type: Literal["direct", "scim"]

How the RBAC Group was created: "direct" for groups created directly (for example, in the organization's admin settings), "scim" for groups provisioned by the identity provider.

One of the following:
"direct"
"scim"
updated_at: datetime

RFC 3339 timestamp of when the RBAC Group was last updated.

formatdate-time
class RBACGroupDeleteResponse: type: "rbac_group_deleted"; id
type: Literal["rbac_group_deleted"]

Deleted object type.

For RBAC Groups, this is always "rbac_group_deleted".

defaultrbac_group_deleted
id: str

ID of the RBAC Group.

RBAC 组成员

列出 RBAC 组成员
beta.organization.rbac_groups.members.list(rbac_group_id, **kwargs) -> SyncPageCursor[BetaRBACGroupMember]
GET/v1/organizations/rbac_groups/{rbac_group_id}/members

列出 RBAC 组的成员。

添加 RBAC 组成员
beta.organization.rbac_groups.members.add(rbac_group_id, **kwargs) -> BetaRBACGroupMember
POST/v1/organizations/rbac_groups/{rbac_group_id}/members

将用户添加到 RBAC 组。当租户中的某个组织使用 SCIM 预配时，由身份提供商预配的组（来源类型为 "scim"）的成员资格无法通过 API 修改。

移除 RBAC 组成员
beta.organization.rbac_groups.members.remove(user_id, **kwargs) -> MemberRemoveResponse
DELETE/v1/organizations/rbac_groups/{rbac_group_id}/members/{user_id}

从 RBAC 组中移除用户。当租户中的某个组织使用 SCIM 预配时，由身份提供商预配的组（来源类型为 "scim"）的成员资格无法通过 API 修改。