---
title: "List grants for a data-access role"
method: GET
path: "/v4/data-access/roles/{role_id}/grants"
tags: ["v4", "Data Access"]
---

# List grants for a data-access role

`GET /v4/data-access/roles/{role_id}/grants`

## Path parameters

- `role_id` union, required
  - string, uuid
  - string

## Response `200`

Success

- SuccessResponseListDataAccessGrant
  - `success` true, required — Flag for it request was successful
  - `data` DataAccessGrant[], required — Response data
    - `id` union — Unique grant identifier (DB-generated)
      - string, uuid
      - string
    - `roleId` union, required — Parent data-access role
      - string, uuid
      - string
    - `schemaPattern` string, required — Glob pattern matched against the DuckLake schema name
    - `tablePattern` string, required — Glob pattern matched against the table name
    - `createdAt` string, date-time, nullable — Creation timestamp (DB-generated)
  - `meta` ResponseMeta
    - `requestId` string — Unique request identifier for tracing
    - `timestamp` string, date-time — Response timestamp (UTC)
    - `durationMs` integer, nullable — Request processing time in milliseconds

## Other responses

- `401` — Auth Invalid Token
- `403` — Forbidden Insufficient Permissions
- `404` — Resource Not Found
- `422` — Validation Failed
- `426` — Business Quota Exceeded
- `500` — Internal Error

---

[API](https://skmtc.dev/definite/apis/defapi.md) · [All operations](https://skmtc.dev/definite/apis/defapi/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/definite/defapi/revisions/3943d8deb3be/schema)