Skip to main content
GET
List a user's roles
🔒 Admin only. Requires administrator privileges — the authenticated principal (API key, embed JWT, or any bearer token) must belong to a user with the admin role. Every role the user holds, built-in and custom, whether assigned directly or through a group. Only a direct assignment can be removed with DELETE /api/v1/roles/{roleId}/users/{userId}. An API key scoped to specific deployments answers 403 here.

Authorizations

Authorization
string
header
required

Token authentication. Send Authorization: Bearer <YOUR_TOKEN>.

Path Parameters

id
number
required

Response

isAdmin
boolean
required

Set by the user's own Admin flag or by a group granting Admin.

roles
object[]
required