Registry API
Role mappings
Map SSO groups to principal roles.
A role mapping maps an identity provider’s group to a principal role: admin, reader or service. The wildcard `*` mapping covers identities that carry no groups. Admins only.
Operations
| Request | What it does |
|---|---|
| GET /v1/admin/role-mappings | List role mappings |
| PUT /v1/admin/role-mappings | Create or update a role mapping |
| DELETE /v1/admin/role-mappings/{provider}/{group} | Delete a role mapping |
Operations are the routes the server registers; this site checks its list against the route definitions. Operations marked “in spec” are also described in the committed OpenAPI file (apps/api/openapi.json), which does not yet cover every route. Only the public catalog and the health check work without a token.