API TestingAPIAdvanced

Permissions/roles API

Scenario

Your interview prompt

An admin API manages workspace roles. Endpoints list roles, assign roles, revoke roles, invite users, and check whether a user can perform sensitive actions such as export, billing, and delete.

What would you test?

List flows, risks, edge cases, data conditions, UX, security, API/backend, and performance concerns.

Tip: a stronger answer usually mixes happy path, negative cases, state changes, data, backend, UX, accessibility, and risk.

How to structure your answer

Happy pathNegative casesData rulesSecurity/API risksUX/performance