API TestingAPIAdvanced

Permissions/roles API

Scenario

An admin API manages workspace roles. Endpoints list roles, assign roles, revoke roles, invite users, and check whether a user can perform sensitive actions such as export, billing, and delete.

What would you test?

List checks, risks, edge cases, data conditions, and user experience concerns you would cover.