Replace a role's trust policy

PUT/roles/{role_id}/trust-policy

Validates principals, actions and conditions; referenced groups and workload identity providers must belong to the caller's organization.

Path parameters

role_idstring

Role ID

Headers

Authorizationstring

Bearer <token>.

Body parameters

Trust policy document

A JSON object (required).

Returns

200OKRole

boundary_idoptional string

created_atoptional string

created_by_user_idoptional string

descriptionoptional string

display_namestring

environment_idoptional string

idoptional string

is_enabledoptional boolean

is_systemoptional boolean

max_session_durationoptional integer

namestring

organization_idoptional string

role_typeoptional string

Assumable-role fields (migration 027).

scopestring

One of: "organization", "workspace", "environment", "platform"

trust_policyoptional object

updated_atoptional string

workspace_idoptional string

Errors

400Bad Request
404Not Found

curl --request PUT \ --url 'https://api.hexelstudio.com/v1/roles/{role_id}/trust-policy' \ --header "Authorization: Bearer $ACCESS_TOKEN" \ --header 'Content-Type: application/json' \ --data '{}'

const res = await fetch("https://api.hexelstudio.com/v1/roles/{role_id}/trust-policy", { method: "PUT", headers: { Authorization: `Bearer ${process.env.ACCESS_TOKEN}`, "Content-Type": "application/json", }, body: JSON.stringify({}), }) const data = await res.json()

import os import requests res = requests.put( "https://api.hexelstudio.com/v1/roles/{role_id}/trust-policy", headers={"Authorization": f"Bearer {os.environ['ACCESS_TOKEN']}"}, json={}, ) data = res.json()

{ "boundary_id": "string", "created_at": "2026-01-01T00:00:00Z", "created_by_user_id": "string", "description": "string", "display_name": "string", "environment_id": "string", "id": "string", "is_enabled": true, "is_system": true, "max_session_duration": 0, "name": "string", "organization_id": "string", "role_type": "string", "scope": "organization", "trust_policy": {}, "updated_at": "2026-01-01T00:00:00Z", "workspace_id": "string" }