# Give a role a permission

`POST https://api.mailmasker.org/api/v1/admin/roles/:role/permissions/:permission`

Let every account with a role do one more thing.

- Who can use it: Site admins
- Area: Users and roles
- Answers 200 OK when it works
- Page: https://developer.mailmasker.org/admin-grant-permission

Every account with the role gets the permission. Giving a role a permission it already has changes nothing.

## Parameters

| Name | In | Required | What it is | Example |
|---|---|---|---|---|
| `role` | path | yes | The role's name. | `auditor` |
| `permission` | path | yes | The permission's name, from the permission list. | `audit.view` |

## Good to know

- An unknown role or permission answers 404.

## Examples

cURL:

```bash
curl -s -X POST 'https://api.mailmasker.org/api/v1/admin/roles/auditor/permissions/audit.view' \
  -H "Authorization: Bearer $TOKEN"
```

Perl:

```perl
use Mojo::Base -strict;
use Mojo::UserAgent;

my $ua  = Mojo::UserAgent->new;
my $res = $ua->post('https://api.mailmasker.org/api/v1/admin/roles/auditor/permissions/audit.view',
    { Authorization => "Bearer $ENV{TOKEN}" })->result;
die $res->code, ' ', ($res->json('/error') // $res->message), "\n" unless $res->is_success;
print $res->body, "\n";
```

homelab-cli:

```bash
homelab-cli admin roles grant-permission auditor audit.view
```

## Response

200 OK:

```json
{ "ok": true }
```