Partially update a custom organization role.
Human-readable description. Pass null to clear.
Full replacement of the role's grant set.
New role name. Reserved system names rejected.
Role updated
A role with its full grant set.
Domain grants this role carries. May be empty.
Whether a role is a built-in preset or defined by the organization. system roles are read-only; custom roles can be edited or deleted by an organization admin.