iblai-rbac

Drive the organization's role-based access control from the API: define roles and policies, attach them to groups and users, check permissions, share agents and teams, and toggle what students may do — the org-wide "who can do what" surface under …/dm/api/core/rbac/….

Auth & conventions

• Base URL: https://api.iblai.app
• Header: Authorization: Api-Token $IBLAI_API_KEY on every request.
• Path vars: {org} = $IBLAI_ORG (a.k.a. platform_key), {username} = $IBLAI_USERNAME.
• Not connected yet? Run /iblai-login first to populate IBLAI_ORG, IBLAI_USERNAME, and IBLAI_API_KEY.
• The RBAC developer docs phrase auth as Authorization: Token <key> — that is the same platform key; use Api-Token.

Concepts