---
title: "The permission catalogue: every permission a role can grant"
method: GET
path: "/v1/Roles/permissions"
tags: ["Roles"]
---

# The permission catalogue: every permission a role can grant

`GET /v1/Roles/permissions`

## Request

- Base URL: `https://api.invendor.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.invendor.com/v1/Roles/permissions`
- Auth: OAuth 2
  - Authorization code: `https://identity.scanbro.com/connect/authorize`
  - Token URL: `https://identity.scanbro.com/connect/token` scopes: `io.common`
- TypeScript: <https://skmtc.dev/invendor/apis/io-commonapi/docs/v1/Roles/permissions/get.ts> (a function with typed inputs; its response is checked against the schema)

Read live by the role builder, so newly shipped permissions appear without a client release.
Grouped by portal area; Manage always includes View.

## Query parameters

- `Account` unknown

## Response `200`

Success

- PermissionCatalogueItem[]
  - `resource` string, nullable
  - `verb` string, nullable
  - `value` string, nullable
  - `area` string, nullable
  - `displayName` string, nullable
  - `description` string, nullable

## Other responses

- `401`: Unauthorized
- `403`: Forbidden

## Changes

- **2026-10-12** `1239b9eaa9bb`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/invendor/apis/io-commonapi/changes/v1/Roles/permissions/get.md)

---

[API](https://skmtc.dev/invendor/apis/io-commonapi.md) - [All operations](https://skmtc.dev/invendor/apis/io-commonapi/llms.txt) - [OpenAPI document](https://skmtc.dev/invendor/apis/io-commonapi/revisions/6a4a4fd7114d?raw)