Hello, I’m a security engineer working in IAM (Access Management) space in our organization. We are onboarding automation anywhere in our application to manage users and roles

I see that the user API allows me to send the array of roles to be assigned to a user account. So, if a user requests any role for Automation Anywhere, I’ll have to call Update User API with role array containing existing roles and the new role id. If any role is to be revoked from a user’s account, I’ll have to call update user API with role array containing existing roles minus the role to be revoked. Is that correct?

Is there any API that does the user-role assignment alone instead of using user api (to modify roles) or the roles api (to modify users)