Programmatic Role Resource Association

So you can associate a resource with a role in User App, and you can do it in Role Mapping Administrator. What if you wanted to do it in policy or in workflow? Any published APIs?

Thanx
Rob