---
title: "List roles and assignments"
method: GET
path: "/api/v1/access-control/roles"
tags: ["Access Control"]
---

# List roles and assignments

`GET /api/v1/access-control/roles`

## Request

- Base URL: `https://dashboard.sealgate.ai`
- URL: `https://dashboard.sealgate.ai/api/v1/access-control/roles`
- Auth: HTTP bearer

Return role definitions and user-to-role assignments for the caller's domain. Requires the admin role.

## Response `200`

Role definitions and assignments

- RolesListResponse
  - `definitions` RoleDefinition[], required
    - `id` integer, required
    - `role` string, required: Role name
    - `domain` string, required: Domain scope
    - `priority` integer, required: Ordinal rank within the org (0 = highest priority)
    - `description` string, nullable
    - `created_at` string, date-time, required
  - `assignments` RoleAssignment[], required
    - `id` integer, required
    - `user_id` string, required
    - `user_email` string, nullable
    - `role_id` integer, required
    - `role_name` string, required
    - `domain` string, required

## Other responses

- `401`: Missing or invalid API key
- `403`: The caller's role is not permitted to perform this action

---

[API](https://skmtc.dev/sealgate/apis/sealgate-management-api.md) · [All operations](https://skmtc.dev/sealgate/apis/sealgate-management-api/llms.txt) · [OpenAPI document](https://skmtc.dev/sealgate/apis/sealgate-management-api/revisions/c9ca2e599065?raw)