Edit a role's grant map
Edit a role’s per-tag grant map + description (the base-tier jq is seed-fixed, not
editable here). Admin-only; guards the reserved admin role and the block-downgrade
of any allow_all role. Both inputs are omit-means-keep — an absent grants/
description preserves the stored value, so a description-only edit never wipes the
grant map. Validates a supplied grant map before persist; LIVE — the edit changes every
holder’s reach on their next request via the policy-version bump. Audits.
Authorizations
Path Parameters
Body
The edit-role request body: only the per-tag grant map + description are editable;
the base-tier jq / base_tier are seed-fixed and rejected on any change attempt. Both
fields are omit-means-keep — an absent grants (None) preserves the stored grant
map (it is never silently wiped), and an absent description preserves the stored
description.
Response
Success.

