The Access Management API allows an administrator (or any user with sufficient privileges) to manage access for their users. Administrators can either create new roles or work with the default roles. These APIs also allow customers to perform create, read, update, and delete (CRUD) operations on roles and permissions of its principals

The APIs allow managing user access programmatically, so you can incorporate user roles and permission management into their existing workflows.

See the Access Management API documentation on the Cisco Developer Network: