---
title: "OneRoster - Get all enrollments"
method: GET
path: "/oneroster/enrollments"
tags: ["Oneroster"]
---

# OneRoster - Get all enrollments

`GET /oneroster/enrollments`

**Requires permission:** *ServiceAccount*

OneRoster v1.1 GetAllEnrollments. Class enrollments plus House class enrollments (house staff + tutors as teachers, house pupils as students). Supports offset/limit and status filtering.

## Response `200`

Success - enrollments

- EnrollmentSetResponse
  - `enrollments` OrEnrollment[]
    - `sourcedId` string, nullable
    - `status` string
    - `dateLastModified` string, date-time, nullable
    - `user` OrGuidRef
      - `href` string, nullable
      - `sourcedId` string, nullable
      - `type` string, nullable
    - `class` OrGuidRef
      - `href` string, nullable
      - `sourcedId` string, nullable
      - `type` string, nullable
    - `school` OrGuidRef
      - `href` string, nullable
      - `sourcedId` string, nullable
      - `type` string, nullable
    - `role` string, nullable
    - `primary` boolean

## Other responses

- `401` — Unauthorized
- `403` — Caller is not an authorised service account

## Changes

- **2026-07-26** `87818d31ea72` — 2 info
  - api operation id `PanopticApiEndpointsExternalOneRosterGetOneRosterEnrollmentsEndpoint` removed and replaced with `PanopticApiEndpointsExternalOneRosterGetOneRosterEnrollmentsEndpoint1`
  - the security scope `ServiceAccount` was removed from the endpoint's security scheme `JWTBearerAuth`

[Change history](https://skmtc.dev/tonbridge/apis/tonbridge-app-api/changes/oneroster/enrollments/get.md)

---

[API](https://skmtc.dev/tonbridge/apis/tonbridge-app-api.md) · [All operations](https://skmtc.dev/tonbridge/apis/tonbridge-app-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/tonbridge/tonbridge-app-api/revisions/518857b639a0/schema)