Body for POST /sources/{sourceID}/sync. No fields are required — sync is read-only and accepts an empty body. The legacy globalRoles, force, and dryRun fields are ignored (kept here for client compatibility; they had install-side semantics that no longer apply).
{
"globalRoles": true,
"force": true,
"dryRun": true
}