API ReferencePlatform API

Api Admin Staff Groups Create

POST handler with superadmin-only field protection.

Strips superadmin-only fields from non-superadmin requests before delegating to OrganizationInjectionMixin.post() for org injection.

Authentication

AuthorizationBearer
JWT access token or Respan API key

Request

This endpoint expects an object.
namestringRequiredformat: "^[A-Za-z0-9_-]+$"1-100 characters
descriptionstringOptional<=500 characters
permissions_overridelist of stringsOptional

Response

idstringRead-only
namestringformat: "^[A-Za-z0-9_-]+$"<=100 characters
granted_byinteger or nullRead-only
granted_atdatetimeRead-only
revoked_atdatetime or nullRead-only
revoked_by_emailstring or nullRead-only
member_countintegerRead-only

Active (non-revoked) members of this group. Tiny — staff roster is bounded, so the COUNT runs without a separate query when the queryset annotates it; otherwise it’s a cheap COUNT.

descriptionstring<=500 characters
permissions_overridelist of strings