# Account Workspace Assignment

The direct assignment of a provisioned account-level principal (user, service
 principal, or group) to a workspace, together with the entitlements that
 assignment grants in the workspace.

 This resource covers only principals assigned directly to the workspace.
 Principals that inherit workspace access through a group are not represented
 here. See WorkspaceAccessDetail and WorkspaceIdentityDetail for the effective,
 direct-or-indirect view. Creating the resource assigns the principal to the
 workspace, and deleting it removes the assignment.

 `entitlements` is the only client-settable field. It holds the entitlements
 granted directly on this assignment, including any the principal also holds
 through a group. `effective_entitlements` is the read-only union of those and
 any granted through group membership.

 A direct assignment always carries at least one directly-assigned entitlement,
 because the assignment is what grants it. Create and update both reject an
 empty `entitlements` set. To remove a principal's assignment entirely, delete
 the resource.

 This resource replaces workspace assignment previously managed through the
 workspace SCIM and permission-assignment APIs, and is intended for account
 and workspace admins.

## The WorkspaceAssignment object

- [account-workspace-assignment/object.md](account-workspace-assignment/object.md)

## Endpoints

### Get

- [GET /api/2.0/identity/accounts/{account_id}/workspaces/{workspace_id}/workspace-assignments/{principal_id}](get-workspace-assignment.md)

### List

- [GET /api/2.0/identity/accounts/{account_id}/workspaces/{workspace_id}/workspace-assignments](list-workspace-assignments.md)

### Create

- [POST /api/2.0/identity/accounts/{account_id}/workspaces/{workspace_id}/workspace-assignments](create-workspace-assignment.md)

### Update

- [PATCH /api/2.0/identity/accounts/{account_id}/workspaces/{workspace_id}/workspace-assignments/{principal_id}](update-workspace-assignment.md)

### Delete

- [DELETE /api/2.0/identity/accounts/{account_id}/workspaces/{workspace_id}/workspace-assignments/{principal_id}](delete-workspace-assignment.md)