Qlik-SaaS-AddRoleToUser.ps1

$UserEmail = 'Test@nillth.net'
$Roles = .\qlik.exe role ls|ConvertFrom-Json
$UserObjs = .\qlik.exe user ls --filter "email eq \`"$($UserEmail)\`""|ConvertFrom-Json
$RoleTenantAdmin = $Roles|?{$_.name -eq "TenantAdmin"}

foreach($UserObj in $UserObjs){
[System.Collections.Generic.List[string]]$RoleIDs = $UserObj.assignedRoles|%{$_.id}
if (!$RoleIDs.Contains($RoleTenantAdmin.id)){
    $RoleIDs.Add($RoleTenantAdmin.id)
    $UpdateBody = ConvertTo-Json -Compress -Depth 5 -InputObject @(
    [ordered]@{op = "replace"
    path = "/assignedRoles"
    value = @(
    $($RoleIDs|%{@{id=$_}})
    )
    }
    )
    .\qlik.exe user patch $UserObj.id --body ($UpdateBody|ConvertTo-Json) -v
}
}