Add a user role assignment.

Assign a role to a specific user. For bulk updates consider Set user role assignments.

You need to have a permission with action users.roles:add and scope permissions:type:delegate. permissions:type:delegate scope ensures that users can only assign roles which have same, or a subset of permissions which the user has. For example, if a user does not have required permissions for creating users, they won’t be able to assign a role which will allow to do that. This is done to prevent escalation of privileges.