---
title: "List Transitive User Roles"
method: GET
path: "/management/v1/user/{user_id}/roles/transitive"
tags: ["user"]
---

# List Transitive User Roles

`GET /management/v1/user/{user_id}/roles/transitive`

## Request

- Base URL: `https://localhost`
- URL: `https://localhost/management/v1/user/{user_id}/roles/transitive`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/lakekeeper/apis/lakekeeper-management-api/docs/management/v1/user/:user_id/roles/transitive/get.ts> (a function with typed inputs; its response is checked against the schema)

Lists the full effective (transitive) role set a user holds — direct
assignments plus every role reachable upward through membership — keyset-
paginated. Supported only when assignments are catalog-managed; an
assignment-managing authorizer (e.g. OpenFGA) returns `501`.

## Path parameters

- `user_id` string, required

## Query parameters

- `pageToken` string, nullable
- `pageSize` integer, nullable

## Headers

- `x-project-id` string, nullable

## Response `200`

Transitive roles the user holds

- ListRoleMembershipsResponse: One page of roles — the `member-of` set or a user's roles, direct or transitive depending on the endpoint.
  - `next-page-token` string, nullable: Token for the next page; `null`/absent once the listing is exhausted. Note for SDK authors: **stop when `next-page-token` is null/absent.** The final page of results may itself return a null token, so don't rely on receiving a separate trailing empty page — keep requesting until the token is null.
  - `roles` RoleMembership[], required
    - `id` string, uuid, required
    - `ident` string, required
    - `name` string, required

## Other responses

- `501`: Transitive listing is not supported under the configured authorizer backend
- `4XX`

---

[API](https://skmtc.dev/lakekeeper/apis/lakekeeper-management-api.md) - [All operations](https://skmtc.dev/lakekeeper/apis/lakekeeper-management-api/llms.txt) - [OpenAPI document](https://skmtc.dev/lakekeeper/apis/lakekeeper-management-api/revisions/c5cb9a12a98c?raw)
