POST /members/target/:target/:target_id
Path Parameters
Request Body
Response
Errors
A membership row is the access perimeter — it is the thing that grants access — so granting one is a
human act. A service account’s own key gets
403 here for every target, even
one it holds admin on: an account cannot widen its own reach, or anyone else’s. Use an
acting token when automation has to grant access on a human’s behalf.
Adding a service account to an Organization or Blob uses this endpoint, unchanged — pass the account’s
id
as user_id. There is no separate flow for machine identities.
