# POST /roles/:role_id/users

**Resource:** [Roles & Permissions](./roles.md)  
**MCP tool:** `assign_role_member`  
**Scopes:** `permissions:write`  
**Write operation:** yes

Assign a workspace member to a role. You cannot assign a role that grants scopes you do not hold (unless you have admin). The member's prior role is remembered so removal can restore it.

## Parameters

| Name | In | Type | Required | Description |
|------|----|------|----------|-------------|
| `role_id` | path | string | yes |  |
| `user_id` | body | string | yes | UUID of the member to assign |
| `require_approval` | body | boolean | no | Optional. Set true to route this write into the approval queue for human review instead of executing it immediately (returns 202 + an approval_id). Works even when your key/token has permission to execute directly. |

## Request example

```bash
curl -X POST   "https://api.trustpager.com/functions/v1/api/v1/roles/:role_id/users"   -H "Authorization: Bearer YOUR_API_KEY"   -H "Content-Type: application/json"   -d '{"user_id":"..."}'
```

---
Base URL: `https://api.trustpager.com/functions/v1/api/v1` — Auth: `Authorization: Bearer YOUR_API_KEY`