That, of course, was it.  Thanks for seeing something that was hidden in plain sight.

I'm trying to upload avatars for students that never had them.  Apparently, one must upload a 128x128 image file, get the token from that, and use it in an upload post, such as this API endpoint f...

This looks good. I'm developing it in Perl, so I don't have any results right now. I'll mark it as an accepted solution.

I need to get enrollments for each section in each course in semesters of interest.  To do this, I load the list of semesters to get numeric IDs, filter those, then walk the semesters and get a list o...

Got it.  Stripping an admin of elevated permissions is not an option, so if we want an admin to be restricted to a student's role, but able to be an admin as well, then we need two accounts and th...

I'm trying to upload avatars for students that never had them.  Apparently, one must upload a 128x128 image file, get the token from that, and use it in an upload post, such as this API endpoint f...

This looks good. I'm developing it in Perl, so I don't have any results right now. I'll mark it as an accepted solution.

I need to get enrollments for each section in each course in semesters of interest.  To do this, I load the list of semesters to get numeric IDs, filter those, then walk the semesters and get a list o...

Got it.  Stripping an admin of elevated permissions is not an option, so if we want an admin to be restricted to a student's role, but able to be an admin as well, then we need two accounts and th...

@Allie_Dilts How about roles that that are not by-class such as admin.  If there is a "Vic the admin" and "Vic the student", how would one user be both?  The Admin is Admin everywh...