Grant a permission to a role
POST /api/v1/roles/:roleId/permissions
Binds a permission code to the role. Everyone holding the role gains it on their next request — permissions are resolved per request, not carried in the caller's token. Requires role.permission.assign.
Request