Allowed durations (in seconds) for access requests to this role. If omitted or set to null, inherits from the parent resource's allowed durations, which in turn may inherit from the integration. Empty array is not allowed. Values must be from the predefined enum.

Workflow associated with the role (object with 'id' UUID). To get available workflow IDs, use GET /public/v1/workflows. If null, inherits from the parent resource's workflow.

Prerequisite permissions grouped by any-of/all-of sets. Outer array represents OR logic (any set can match), inner arrays represent AND logic (all permissions in a set must match). To get role permission IDs, use GET /public/v1/roles?resourceId=.

Resource to attach this role to (object with 'id' UUID). To get resource IDs, use GET /public/v1/resources?integrationId=.

Virtualized role to link to this resource role (object with 'id' UUID). To get virtualized role IDs, first create a 'Virtual Application' integration with resources and roles, then use GET /public/v1/roles?resourceId= where the resource belongs to that virtual integration.