manage-roles

Manage Harness RBAC roles, assignments, and permissions via MCP v2 tools.

80|16|Updated Mar 11, 2026
One-click install
npx skills add https://github.com/harness/harness-skills --skill manage-roles
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: manage-roles
Source: https://github.com/harness/harness-skills/tree/main/skills/manage-roles
Command: npx skills add https://github.com/harness/harness-skills --skill manage-roles

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Managing access control across Harness environments is complex and error-prone. This Skill centralizes RBAC management via Harness MCP v2, reducing misconfigurations and drift in roles, assignments, and permissions.

Core Features & Use Cases

  • List, create, update, and delete custom roles to enforce least privilege.
  • View role assignments and permissions for users, groups, and service accounts to audit access.
  • Onboard users and assign roles across scopes (account/org/project) with guided validation and safe defaults.

Quick Start

Ask the skill to list all roles in the target project to begin managing access.

Frequently Asked Questions about manage-roles

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I manage Harness RBAC roles and permissions across multiple projects?

You can manage Harness RBAC roles across account, org, and project scopes by listing, creating, updating, and deleting custom roles. This centralized access control management reduces configuration drift and enforces least privilege.

What is the best way to audit user access and role assignments in Harness?

Auditing user access in Harness involves viewing role assignments and permissions for users, groups, and service accounts. You can audit access across account, org, and project scopes to verify correct privilege levels and identify misconfigurations.

Can I create custom roles in Harness to enforce least privilege for specific teams?

Yes, creating custom roles in Harness allows you to enforce least privilege by defining specific permissions. The Skill validates identifiers and principal types to safely interact with the API and prevent misconfigurations during role creation.

Does this MCP v2 tool support deleting and updating existing access control roles?

Yes, the MCP v2 tool supports deleting and updating existing access control roles. It safely interacts with the API through defined commands to ensure role modifications and deletions are validated across your account, org, or project scopes.

How do I onboard new users and assign roles across account and org scopes safely?

Onboarding users and assigning roles across account, org, or project scopes is handled with guided validation and safe defaults. The system enforces principal types and validates identifiers to prevent access control errors during the assignment process.