Skip to main content
POST

Authorizations

​
Authorization
string
header
required

An access token must be provided in the Authorization header using the Bearer scheme.

Headers

​
X-Pinecone-Api-Version
string
default:2026-07
required

Required date-based version header

Body

application/json

Principal, resource scope, and role to bind.

​
principal_type
string
required

The kind of principal that receives permissions from a role binding. Possible values: user, service_account, api_key, invite.

Example:

"service_account"

​
principal_id
string
required

Principal ID. Format depends on principal_type.

Example:

"e2e92523-85dc-4142-b8c2-e681be8b78df"

​
resource_type
string
required

The kind of resource scope a role binding applies to. Possible values: organization, project.

Example:

"project"

​
role
string
required

A role assigned to a principal at a resource scope.

Example:

"ProjectOwner"

​
resource_id
string

Project UUID. Required when resource_type is project; omit for organization scope.

Example:

"a2f7dddb-1597-4eff-9f71-535fde243f58"

Response

Role binding created.

Grants a role to a principal at a resource scope.

​
id
string<uuid>
required

The unique ID of the role binding.

​
principal_type
string
required

The kind of principal that receives permissions from a role binding. Possible values: user, service_account, api_key, invite.

Example:

"service_account"

​
principal_id
string
required

The principal's ID. A UUID for all principal types (user, service_account, api_key, invite).

Example:

"e2e92523-85dc-4142-b8c2-e681be8b78df"

​
resource_type
string
required

The kind of resource scope a role binding applies to. Possible values: organization, project.

Example:

"project"

​
resource_id
string
required

The organization or project that the binding is scoped to.

​
role
string
required

A role assigned to a principal at a resource scope.

Example:

"ProjectOwner"

​
created_at
string<date-time>
required

When the role binding was created.