---
title: "List firm role assignments on an entity"
method: GET
path: "/entities/{entity_id}/firm_role_assignments"
tags: ["Entity firm roles"]
---

# List firm role assignments on an entity

`GET /entities/{entity_id}/firm_role_assignments`

## Request

- Base URL: `https://api.soraban.com`
- URL: `https://api.soraban.com/entities/{entity_id}/firm_role_assignments`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/soraban/apis/soraban-private-api/docs/entities/:entity_id/firm_role_assignments/get.ts> (a function with typed inputs; its response is checked against the schema)

Identify the entity with the path `entity_id` (Soraban id or your `external_entity_id`) or with the `external_entity_id` query param.

## Response `200`

Who holds which role on this entity.

- FirmRoleAssignment[]
  - `id` integer
  - `firm_role_id` integer
  - `user_id` integer

## Other responses

- `403`: Missing or invalid API key, or the record does not belong to your firm.
- `404`: No such record for this firm.

## Changes

- **2026-11-03** `1c230fa547ad`: 1 breaking, 1 warning, 6 info
  - the response property `error` became optional for the status `403`
  - deleted the `path` request parameter `entity_id`
  - api operation id `listEntityFirmRoleAssignments` was added
  - the endpoint scheme security `bearerAuth` was removed from the API
  - …4 more

[Operation history](https://skmtc.dev/soraban/apis/soraban-private-api/changes/entities/:entity_id/firm_role_assignments/get.md)

---

[API](https://skmtc.dev/soraban/apis/soraban-private-api.md) - [All operations](https://skmtc.dev/soraban/apis/soraban-private-api/llms.txt) - [OpenAPI document](https://skmtc.dev/soraban/apis/soraban-private-api/revisions/1c230fa547ad?raw)