---
title: "Get role permissions"
method: GET
path: "/api/v1/permissions/role/{roleId}"
tags: ["Permissions"]
---

# Get role permissions

`GET /api/v1/permissions/role/{roleId}`

Retrieves all hosts and folders where a role has permissions defined, organized by asset with full permission matrices. Admin users can view any role. Non-admin users can only view permissions for roles they belong to.

## Path parameters

- `roleId` string, required

## Response `200`

Role permissions retrieved successfully

- ResponseEntityRolePermissionsView
  - `errors` ErrorEntity[]
    - `errorCode` string
    - `message` string
    - `fieldName` string
  - `entity` RolePermissionsView
    - `roleId` string, required — Role identifier
    - `roleName` string, required — Role display name
    - `assets` UserPermissionAssetView[], required — List of permission assets (hosts and folders) with their permission assignments
      - `id` string, required — Asset identifier (host identifier for HOST type, folder inode for FOLDER type)
      - `type` 'HOST' | 'FOLDER', required — Asset type
      - `name` string, required — Asset name (hostname for HOST, folder name for FOLDER)
      - `path` string, required — Full path to the asset
      - `hostId` string, required — Host identifier (same as id for HOST type, parent host for FOLDER type)
      - `canEditPermissions` boolean, required — Whether the requesting user can edit permissions on this asset
      - `inheritsPermissions` boolean, required — Whether this asset inherits permissions from its parent
      - `permissions` object, required — Map of permission types (INDIVIDUAL, HOST, FOLDER, etc.) to sets of permission level names (READ, WRITE, PUBLISH, EDIT_PERMISSIONS, CAN_ADD_CHILDREN)
        - `empty` boolean
  - `messages` MessageEntity[]
    - `message` string
  - `i18nMessagesMap` object
  - `permissions` string[]
  - `pagination` Pagination
    - `currentPage` integer
    - `perPage` integer
    - `totalEntries` integer

## Other responses

- `400` — Bad request - invalid role id
- `403` — Forbidden - user does not have access to view this role's permissions

---

[API](https://skmtc.dev/jostens/apis/dotcms-rest-api.md) · [All operations](https://skmtc.dev/jostens/apis/dotcms-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/jostens/dotcms-rest-api/revisions/a088fe9f515c/schema)