To assign access:

1. Get the Access control id of the managed instance, using:

   GET /asset-service/workloads/cloud/assets?filter=extendedAttributes/managedInstanceName eq 'managedInstanceName'

   Search for accessControlId field in the response. Note down the value of this field.

2. Get the Role id, using:

   GET /access-control/roles

   Search for the id field in the response. Note down the value of this field.

3. Create an Access definition, using:

   POST /access-control/managed-objects/{objectId}/access-definitions

   Request payload

   {
    
       "data": {
           "type": "accessDefinition",
           "attributes": {
               "propagation": "OBJECT_AND_CHILDREN"
           },
           "relationships": {
               "role": {
                   "data": {
                       "id": "<roleId>",
                       "type": "accessControlRole"
                   }
               },
               "operations": {
                   "data": [
                       {
                           "id": "|OPERATIONS|VIEW|",
                           "type": "accessControlOperation"
                       }
                   ]
               },
               "managedObject": {
                   "data": {
                       "id": "<objectId>",
                       "type": "managedObject"
                   }
               }
           }
       }
   }

   For,

   • objectId : Use the value of accessControlId obtained from step 1.

   • roleId : Use the value of id obtained from step 2.