---
title: "User Roles Fetch"
method: POST
path: "/api/MobileApp/user_roles_permissions"
tags: ["MobileApp"]
---

# User Roles Fetch

`POST /api/MobileApp/user_roles_permissions`

## Request

- Base URL: `https://api.leapsurgebi.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.leapsurgebi.com/api/MobileApp/user_roles_permissions`
- Auth: OAuth 2
  - Password
  - Token URL: `/auth/token`
- TypeScript: <https://skmtc.dev/leapsurgebi/apis/leapsurgeapi/docs/api/MobileApp/user_roles_permissions/post.ts> (a function with typed inputs; its response is checked against the schema)

**Function**: `Fetch User Roles and Permissions`

**Type**: API Endpoint (POST)

**Purpose**:  
Fetches the roles and associated permissions for a user based on the provided `usercode`, `appcode`, `group_code`, and `menu_code`.

**Headers**:  
- `App_Code` (str, required): The application code.
- `User_Code` (str, required): The user code.
- `Group_Code` (str, required): The group code.

**Response**:  
Returns a JSON response containing the user roles and their permissions.

**Exceptions**:  
- `HTTPException`: If any exception occurs during the process, it raises an HTTPException with a 500 status code and the exception message.

## Headers

- `App-Code` string, required
- `User-Code` string, required
- `Group-Code` string, required

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

## Changes

- **2026-09-24** `23b42df3193a`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/leapsurgebi/apis/leapsurgeapi/changes/api/MobileApp/user_roles_permissions/post.md)

---

[API](https://skmtc.dev/leapsurgebi/apis/leapsurgeapi.md) - [All operations](https://skmtc.dev/leapsurgebi/apis/leapsurgeapi/llms.txt) - [OpenAPI document](https://skmtc.dev/leapsurgebi/apis/leapsurgeapi/revisions/13653cb8ee76?raw)