---
title: "Retrieves the roles on an account"
method: GET
path: "/settings/users/2026-09/roles"
tags: ["Roles"]
---

# Retrieves the roles on an account

`GET /settings/users/2026-09/roles`

## Request

- Base URL: `https://api.hubapi.com`
- URL: `https://api.hubapi.com/settings/users/2026-09/roles`
- Auth: one of:
  - OAuth 2
    - Authorization code: `https://app.hubspot.com/oauth/authorize`
    - Token URL: `https://api.hubapi.com/oauth/v1/token` scopes: `crm.objects.users.read`
  - OAuth 2
    - Authorization code: `https://app.hubspot.com/oauth/authorize`
    - Token URL: `https://api.hubapi.com/oauth/v1/token` scopes: `settings.users.read`

Retrieve a list of user roles available in your HubSpot account. This endpoint provides information about the different permission sets that can be assigned to users, which is useful for managing user access and permissions within the account.

## Response `200`

successful operation

- CollectionResponsePublicPermissionSetNoPaging
  - `results` PublicPermissionSet[], required: An array of PublicPermissionSet objects, each representing a specific permission set. This property is required.
    - `id` string, required: The unique identifier for the permission set. It is a string.
    - `name` string, required: The name of the permission set. It is a string.
    - `requiresBillingWrite` boolean, required: A boolean indicating whether the permission set requires billing write access.

## Other responses

- `default`: An error occurred.

## Changes

- **2026-10-13** (2026-09) `9aa42e094343`: 2 info
  - the security scope `crm.objects.users.read` was added to the endpoint's security scheme `oauth2`
  - the security scope `settings.users.read` was removed from the endpoint's security scheme `oauth2`
- **2026-10-10** (2026-09) `1ec62479c06a`: 2 info
  - the security scope `crm.objects.users.read` was added to the endpoint's security scheme `oauth2`
  - the security scope `settings.users.read` was removed from the endpoint's security scheme `oauth2`
- **2026-09-22** (2026-09) `1ec62479c06a`: 2 info
  - the security scope `crm.objects.users.read` was added to the endpoint's security scheme `oauth2`
  - the security scope `settings.users.read` was removed from the endpoint's security scheme `oauth2`

[Operation history](https://skmtc.dev/hubspot/apis/settings-user-provisioning/changes/settings/users/2026-09/roles/get.md)

---

[API](https://skmtc.dev/hubspot/apis/settings-user-provisioning.md) - [All operations](https://skmtc.dev/hubspot/apis/settings-user-provisioning/llms.txt) - [OpenAPI document](https://skmtc.dev/hubspot/apis/settings-user-provisioning/revisions/9aa42e094343?raw)