Role Web API
Install mageb2b/sublogin-role-api when an ERP, identity workflow or administration service must create and maintain sublogin roles, groups and permissions through Magento's REST or SOAP layer. The package requires the Sublogin Role add-on (mageb2b/sublogin-role).
Sublogin records themselves are managed by mageb2b/sublogin-api — see Sublogin Web API.
Routes
The package exposes 15 routes. Each entity supports create, read, update, delete and search:
| Entity | Route pattern | Operations |
|---|---|---|
| Roles | /V1/sublogin-role and /V1/sublogin-role/:id |
GET, POST, PUT, DELETE plus /V1/sublogin-role/search |
| Groups | /V1/sublogin-group and /V1/sublogin-group/:id |
GET, POST, PUT, DELETE plus /V1/sublogin-group/search |
| Permissions | /V1/sublogin-permission and /V1/sublogin-permission/:id |
GET, POST, PUT, DELETE plus /V1/sublogin-permission/search |
Search endpoints accept Magento's standard searchCriteria filters, so integrations can query by parent customer, name or other stored fields.
Permissions
Read operations on all three entities require the MageB2B_Sublogin::role and MageB2B_Sublogin::group ACL resources. Save and delete operations use the dedicated role_save, role_delete, group_save and group_delete resources. Grant these resources only to trusted admin users and integrations — a role change affects every sublogin assigned to it.