---
title: "GET /orgs/{org_id}/iam/roles"
method: GET
path: "/orgs/{org_id}/iam/roles"
tags: ["iam"]
---

# GET /orgs/{org_id}/iam/roles

`GET /orgs/{org_id}/iam/roles`

List system and custom roles for the organization.

## Path parameters

- `org_id` string, required

## Response `200`

Roles for the organization

- ListOrgRolesResBody
  - `roles` RolePreview[], required — Roles available to this organization — system rows first, then custom rows alphabetically by name.
    - `created_at` string, date-time, required
    - `description` string, nullable
    - `id` string, required
    - `name` string, required — Role name. Unique per `(org_id)` for custom roles, globally unique for system roles.
    - `source` 'system' | 'custom', required — Whether a role is a built-in preset or defined by the organization. `system` roles are read-only; `custom` roles can be edited or deleted by an organization admin.
    - `updated_at` string, date-time, required

## Other responses

- `403` — Forbidden

## Changes

- **2026-06-05** `45de91fcec33` — 1 info
  - endpoint added
- **2026-03-16** `eb2c08128881` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/timbal-ai/apis/timbal-platform-api/changes/orgs/:org_id/iam/roles/get.md)

---

[API](https://skmtc.dev/timbal-ai/apis/timbal-platform-api.md) · [All operations](https://skmtc.dev/timbal-ai/apis/timbal-platform-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/timbal-ai/timbal-platform-api/revisions/dd7e398ce0d3/schema)