ServiceStack AuthFeature assign and unassign roles

Question

Do the AuthFeature AssignRoles and UnassignRoles endpoints require any permissions or roles?

Answer 1

Yes, you need the Admin role.

From the ServiceStack source code:

[RequiredRole(RoleNames.Admin)]
[DefaultRequest(typeof(AssignRoles))]
public class AssignRolesService : Service
{
   ...
}

Same role requirement for UnassignRolesService.