// Requires Node.js SDK v8.2.0 or later
import { AdminClient } from '@pinecone-database/pinecone';

// Reads PINECONE_CLIENT_ID and PINECONE_CLIENT_SECRET from the environment
const admin = new AdminClient();

const roleBinding = await admin.roleBindings.create({
  principalType: 'service_account',
  principalId: 'f8a3b2c1-4d5e-6f7a-8b9c-0d1e2f3a4b5c',
  resourceType: 'project',
  resourceId: 'a2f7dddb-1597-4eff-9f71-535fde243f58',
  role: 'DataPlaneEditor',
});
console.log(roleBinding);

// Requires Go SDK v6.0.0 or later
package main

import (
    "context"
    "fmt"
    "log"
    "os"

    "github.com/pinecone-io/go-pinecone/v6/pinecone"
)

func main() {
    ctx := context.Background()

    adminClient, err := pinecone.NewAdminClientWithContext(ctx, pinecone.NewAdminClientParams{
        ClientId:     os.Getenv("PINECONE_CLIENT_ID"),
        ClientSecret: os.Getenv("PINECONE_CLIENT_SECRET"),
    })
    if err != nil {
        log.Fatalf("Failed to create AdminClient: %v", err)
    }

    projectId := "a2f7dddb-1597-4eff-9f71-535fde243f58"
    roleBinding, err := adminClient.RoleBinding.Create(ctx, &pinecone.CreateRoleBindingParams{
        PrincipalType: pinecone.PrincipalTypeServiceAccount,
        PrincipalId:   "f8a3b2c1-4d5e-6f7a-8b9c-0d1e2f3a4b5c",
        ResourceType:  pinecone.ResourceTypeProject,
        ResourceId:    &projectId,
        Role:          "DataPlaneEditor",
    })
    if err != nil {
        log.Fatalf("Failed to create role binding: %v", err)
    }
    fmt.Printf("Successfully created role binding: %v\n", roleBinding.Id)
}

# Requires Terraform provider v4.0.0 or later
# Bindings are immutable; changing any attribute forces replacement
resource "pinecone_role_binding" "ci_data_plane_editor" {
  principal_type = "service_account"
  principal_id   = "f8a3b2c1-4d5e-6f7a-8b9c-0d1e2f3a4b5c"
  resource_type  = "project"
  resource_id    = "a2f7dddb-1597-4eff-9f71-535fde243f58"
  role           = "DataPlaneEditor"
}

PINECONE_ACCESS_TOKEN="YOUR_ACCESS_TOKEN"

curl "https://api.pinecone.io/admin/role-bindings" \
	-H "X-Pinecone-Api-Version: 2026-04" \
	-H "Authorization: Bearer $PINECONE_ACCESS_TOKEN" \
	-d '{
		"principal_type": "service_account",
		"principal_id": "f8a3b2c1-4d5e-6f7a-8b9c-0d1e2f3a4b5c",
		"resource_type": "project",
		"resource_id": "a2f7dddb-1597-4eff-9f71-535fde243f58",
		"role": "DataPlaneEditor"
	}'

{
  "id": "9a8e3528-b9c0-4358-84ce-84c28e91b566",
  "principal_type": "service_account",
  "principal_id": "f8a3b2c1-4d5e-6f7a-8b9c-0d1e2f3a4b5c",
  "resource_type": "project",
  "resource_id": "a2f7dddb-1597-4eff-9f71-535fde243f58",
  "role": "DataPlaneEditor",
  "created_at": "2026-04-10T15:23:00Z"
}