{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "title": "Role",
  "description": "Role schema from Palo Alto Networks SASE IAM Service API",
  "$id": "https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/json-schema/sase-iam-api-role-schema.json",
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "description": "Unique identifier of the role."
    },
    "name": {
      "type": "string",
      "description": "Role name (e.g., superuser, network_admin, readonly)."
    },
    "display_name": {
      "type": "string",
      "description": "Human-readable role display name."
    },
    "description": {
      "type": "string",
      "description": "Description of the permissions granted by this role."
    },
    "permissions": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "List of permission identifiers included in this role."
    }
  }
}
