# Permission model structure
<a name="next-gen-api-permission-model-structure"></a>

```
{
  "invokerRoleName": "string",
  "crossAccountRoles": [
    {
      "crossAccountRoleArn": "string",
      "externalId": "string"
    }
  ]
}
```