> ## Documentation Index
> Fetch the complete documentation index at: https://docs.domesystems.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Assign Org Role

> Grant or change an org-level role (`owner`, `admin`, `member`) for an existing platform user. Gated on org `tenant.manage`. Only an org `owner` may grant the `owner` role. The target user must already exist — grants do not implicitly create users. Co-commits an `organization.membership.set` audit event.



## OpenAPI

````yaml POST /dome.mgmt.v1.Management/AssignOrgRole
openapi: 3.0.3
info:
  title: Dome Platform API
  description: Connect and REST APIs for the Dome agent governance platform.
  version: 2.0.0
servers:
  - url: https://api.domesystems.ai
    description: Production
security: []
tags:
  - name: Agents
  - name: Authorization
  - name: Guards
  - name: Tools
  - name: Tool Catalog
  - name: Models
  - name: Model Pools
  - name: Quotas
  - name: Gateways
  - name: Webhooks
  - name: Audit
  - name: Workspaces
  - name: Access Control
  - name: Tenants
  - name: Platform Keys
  - name: Enrollment
  - name: Platform
  - name: Identity
paths:
  /dome.mgmt.v1.Management/AssignOrgRole:
    post:
      tags:
        - dome.mgmt.v1.Management
      summary: AssignOrgRole
      description: >-
        Grant or change an org-level role (`owner`, `admin`, `member`) for an
        existing platform user. Gated on org `tenant.manage`. Only an org
        `owner` may grant the `owner` role. The target user must already exist —
        grants do not implicitly create users. Co-commits an
        `organization.membership.set` audit event.
      operationId: dome.mgmt.v1.Management.AssignOrgRole
      parameters:
        - name: Connect-Protocol-Version
          in: header
          required: true
          schema:
            $ref: 56c7fd57-ea70-4704-8575-8e38c84beaeb
        - name: Connect-Timeout-Ms
          in: header
          schema:
            $ref: 3572d4f2-9d91-455a-9b54-34cc3462714c
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/dome.mgmt.v1.AssignOrgRoleRequest'
        required: true
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/dome.mgmt.v1.AssignOrgRoleResponse'
        default:
          description: Error
          content:
            application/json:
              schema:
                $ref: 757438a2-e72f-488a-a66f-aa4f400ed4e4
components:
  schemas:
    dome.mgmt.v1.AssignOrgRoleRequest:
      type: object
      properties:
        orgId:
          type: string
          title: org_id
        userEmail:
          type: string
          title: user_email
        role:
          type: string
          title: role
          description: >-
            One of `owner`, `admin`, `member`. Only an org owner may grant
            `owner`.
      title: AssignOrgRoleRequest
      additionalProperties: false
    dome.mgmt.v1.AssignOrgRoleResponse:
      type: object
      title: AssignOrgRoleResponse
      additionalProperties: false

````