---
title: "Fetch Roles"
method: GET
path: "/access/roles"
tags: ["Access"]
---

# Fetch Roles

`GET /access/roles`

Return the effective role catalog per scope.

Scopes are `organization`, `workspace`, `project`. Each entry has
`role`, `description`, and `permissions`. Permissions are returned
verbatim from access-controls, including the `"*"` wildcard for
`owner` — callers that need to render the full permission list
should expand the wildcard themselves (see
`ee.src.services.converters._expand_permissions`).

## Response `200`

Successful Response

- object

## Changes

- **2026-05-19** `a7f9a6823230` — 1 info
  - endpoint added
- **2025-06-27** `e3e84db47198` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/agenta-ai/apis/agenta-api/changes/access/roles/get.md)

---

[API](https://skmtc.dev/agenta-ai/apis/agenta-api.md) · [All operations](https://skmtc.dev/agenta-ai/apis/agenta-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/agenta-ai/agenta-api/revisions/2040366204e5/schema)