---
title: "List Roles"
method: GET
path: "/rbac/roles"
tags: ["rbac"]
---

# List Roles

`GET /rbac/roles`

## Request

- Base URL: `https://platform.tracecat.com/api`
- URL: `https://platform.tracecat.com/api/rbac/roles`
- Auth: one of:
  - API key in cookie `fastapiusersauth`
  - HTTP bearer

List roles for the organization.

Requires: authenticated organization member.

## Response `200`

Successful Response

- RoleList: Response schema for listing roles.
  - `items` RoleReadWithScopes[], required
    - `id` string, uuid, required
    - `name` string, required
    - `slug` string, nullable
    - `description` string, nullable
    - `organization_id` string, uuid, required
    - `created_at` string, date-time, required
    - `updated_at` string, date-time, required
    - `created_by` string, uuid, nullable
    - `scopes` ScopeRead[]
      - `id` string, uuid, required
      - `name` string, required
      - `resource` string, required
      - `action` string, required
      - `description` string, nullable
      - `source` 'platform' | 'custom', required: Source/ownership of a scope definition.
      - `source_ref` string, nullable
      - `organization_id` string, uuid, nullable
      - `created_at` string, date-time, required
      - `updated_at` string, date-time, required
    - `is_system` boolean, required: Whether this is a preset system role.
  - `total` integer, required

---

[API](https://skmtc.dev/tracecat/apis/tracecat-api.md) - [All operations](https://skmtc.dev/tracecat/apis/tracecat-api/llms.txt) - [OpenAPI document](https://skmtc.dev/tracecat/apis/tracecat-api/revisions/2efdda25045f?raw)