LAlakekeeper
role

List Transitive Role Members

Lists the role's transitive members — users assigned to the role or any role in its downward membership closure, plus every role in that closure — as one keyset-paginated page, optionally filtered to one kind. Supported only when assignments are catalog-managed; an assignment-managing authorizer (e.g. OpenFGA) returns 501.

get/management/v1/role/{role_id}/members/transitive

Request

Path parameters

role_idstring uuid required

Role ID

Query parameters

type'user' | 'role'

Kind of a role member. Serializes as "user" / "role".

Restrict to one member kind (user or role). Both kinds when omitted.

pageTokenstring nullable
pageSizeinteger nullable

Upper bound on the number of results returned. Default: 100.

Headers

x-project-idstring nullable

Project ID (optional; falls back to the default project if not provided)

Response

Transitive members of the role

next-page-tokenstring nullable

Token for the next page; null/absent once the listing is exhausted. Note for SDK authors: stop when next-page-token is null/absent. The final page of results may itself return a null token, so don't rely on receiving a separate trailing empty page — keep requesting until the token is null.

Changes

No recorded changes to this operation across all 1 revision of this API.