---
title: "List role permissions by role id."
method: GET
path: "/access/roles/{role_id}/permissions"
tags: ["Access Management: Role Operations"]
---

# List role permissions by role id.

`GET /access/roles/{role_id}/permissions`

## Request

- Base URL: `https://replace-with-account.api.decodable.co/v1alpha2`
- URL: `https://replace-with-account.api.decodable.co/v1alpha2/access/roles/{role_id}/permissions`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/decodable/apis/decodable-control-plane/docs/access/roles/:role_id/permissions/get.ts> (a function with typed inputs; its response is checked against the schema)

Requires permission matching: `role:read:<name>`.

## Response `200`

A list of role permissions.

- object
  - `next_page_token` string: A token that, that when passed to a subsequent call as page_token, will return the next page of results.
  - `items` Permission[], required: An array of permissions.
    - `effect` 'allow' | 'deny', required: allow or deny.
    - `pattern` string, required: A three-part, colon(:)-delimited permission selector pattern, using asterisk (*) as wildcard. Takes form: <type>:<action>:<qualified-name>

## Other responses

- `400`: An invalid request was received.
- `403`: Access denied: requesting user lacks a required permission.
- `404`: The requested resource does not exist.
- `default`: An error has occurred.

---

[API](https://skmtc.dev/decodable/apis/decodable-control-plane.md) - [All operations](https://skmtc.dev/decodable/apis/decodable-control-plane/llms.txt) - [OpenAPI document](https://skmtc.dev/decodable/apis/decodable-control-plane/revisions/9718a3019da8?raw)