---
title: "GET /api/v1/users/{userId}/roles"
method: GET
path: "/api/v1/users/{userId}/roles"
tags: ["User"]
---

# GET /api/v1/users/{userId}/roles

`GET /api/v1/users/{userId}/roles`

## Request

- Base URL: `https://your-subdomain.okta.com`
- URL: `https://your-subdomain.okta.com/api/v1/users/{userId}/roles`
- Auth: API key in header `Authorization`

Lists all roles assigned to a user.

## Path parameters

- `userId` string, required

## Query parameters

- `expand` string

## Response `200`

Success

- Role[]
  - `_embedded` object
  - `_links` object
  - `assignmentType` 'GROUP' | 'USER'
  - `created` string, date-time
  - `description` string
  - `id` string
  - `label` string
  - `lastUpdated` string, date-time
  - `status` 'ACTIVE' | 'INACTIVE'
  - `type` 'SUPER_ADMIN' | 'ORG_ADMIN' | 'APP_ADMIN' | 'USER_ADMIN' | 'HELP_DESK_ADMIN' | 'READ_ONLY_ADMIN' | 'MOBILE_ADMIN' | 'API_ACCESS_MANAGEMENT_ADMIN' | 'REPORT_ADMIN' | 'GROUP_MEMBERSHIP_ADMIN' | 'CUSTOM'

---

[API](https://skmtc.dev/okta/apis/okta-api.md) - [All operations](https://skmtc.dev/okta/apis/okta-api/llms.txt) - [OpenAPI document](https://skmtc.dev/okta/apis/okta-api/revisions/7e5249c30571?raw)