A 2 UI5

Access Conflict4

Access Review10

Access Review Template4

Access Review Templates3

AI Governance Settings4

App7

App Entitlement17

App Entitlement Automation4

App Entitlement Automation Exclusion3

App Entitlement Configuration Rule6

App Entitlement Monitor Binding3

App Entitlement Owner6

App Entitlement Owner V29

App Entitlement Proxy Binding3

App Entitlement User Binding3

App Entitlement User Binding Feed1

App Entitlement User Binding History1

App Owner6

App Owner V29

App Reports2

App Resource7

App Resource Owner6

App Resource Owner V29

App Resource Type5

App Usage Controls2

App User Owner V27

AppAccessRequestDefaults3

Application Managed State3

AppUsers6

Attribute6

Auth1

Auth Config5

Automations15

AWS External ID Settings1

Compliance Framework4

Connector17

Connector Authoring Activation2

Connector Catalog1

Connector Owner V29

Contacts2

Conversations1

Credential Inventory6

Cross-App Access36

Decoy7

Directory5

External Client1

Finding Routing Rules5

Finding Settings2

Finding Transformation Rules5

Findings8

Function8

Function Commit5

Function Invocation3

Function Tag2

Hook6

Identity Policy Defaults2

LLM Gateway Keys3

LLM Gateway Provider Credentials3

Local Directory9

MCP Resources5

MCP Servers13

MCP Tools6

MCP Toolsets15

Onboarding Settings2

Org Domain2

Org Notification Settings2

Personal Client6

Personal Device6

Policy8

Recovery Policy6

Report7

Request Catalog23

Request Schema4

Request Schema Entitlement Binding3

Request Settings2

Risk Level4

Role3

Role Mining14

Secrets9

Secrets Admin4

Service Principal10

Service Principal Binding3

Session Policy11

Session Settings3

Sign-In Policy6

SSF Receiver9

SSO18

Step Up Authentication Providers8

Step Up Authentication Transactions2

System Log1

System Log Exporter7

Task22

Tenant Email Provider5

Terraform Export1

Tunnel9

User6

User Developer Preferences2

User Notification Settings2

User Owner V27

Vault4

Webhook7

Workload Federation13

Role

Get

Get a role by id.

get/api/v1/iam/roles/{role_id}

Path parameters

role_idstring required

The roleId field.

Response

The GetRolesResponse message contains the retrieved role.

Changes

Changed in 2 of the 33 revisions of this API.2193

Aug 21, 2026f2cf3228f366210See the full diff
- ▲
  added c1.api.iam.v1.Role subschema #2 to the role response property oneOf list for the response status 200
  response-property-one-of-added
- ▲
  the role response's property type/format changed from object/ to / for status 200
  response-property-type-changed
- ●
  removed the optional property role/createdAt from the response with the 200 status
  response-optional-property-removed
- ●
  removed the optional property role/deletedAt from the response with the 200 status
  response-optional-property-removed
- ●
  removed the optional property role/displayName from the response with the 200 status
  response-optional-property-removed
- ●
  removed the optional property role/id from the response with the 200 status
  response-optional-property-removed
- ●
  removed the optional property role/name from the response with the 200 status
  response-optional-property-removed
- ●
  removed the optional property role/permissions from the response with the 200 status
  response-optional-property-removed
- ●
  removed the optional property role/serviceRoles from the response with the 200 status
  response-optional-property-removed
- ●
  removed the optional property role/systemApiOnly from the response with the 200 status
  response-optional-property-removed
- ●
  removed the optional property role/systemBuiltin from the response with the 200 status
  response-optional-property-removed
- ●
  removed the optional property role/updatedAt from the response with the 200 status
  response-optional-property-removed
This revision also has 1 change that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog
Apr 10, 202517f9f3bcedd593See the full diff
- ●
  removed the optional property createdAt from the response with the 200 status
  response-optional-property-removed
- ●
  removed the optional property deletedAt from the response with the 200 status
  response-optional-property-removed
- ●
  removed the optional property displayName from the response with the 200 status
  response-optional-property-removed
- ●
  removed the optional property id from the response with the 200 status
  response-optional-property-removed
- ●
  removed the optional property name from the response with the 200 status
  response-optional-property-removed
- ●
  removed the optional property permissions from the response with the 200 status
  response-optional-property-removed
- ●
  removed the optional property serviceRoles from the response with the 200 status
  response-optional-property-removed
- ●
  removed the optional property systemBuiltin from the response with the 200 status
  response-optional-property-removed
- ●
  removed the optional property updatedAt from the response with the 200 status
  response-optional-property-removed
- ○
  api tag Role added
  api-tag-added
- ○
  api tag Roles removed
  api-tag-removed
- ○
  added the optional property role to the response with the 200 status
  response-optional-property-added
This revision also has 4 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog

Full history