---
title: "Get a specific role"
method: GET
path: "/accounts/{id}/roles/{role_id}"
tags: ["roles"]
---

# Get a specific role

`GET /accounts/{id}/roles/{role_id}`

Roles can be granted to users and used to limit access to account resources

## Path parameters

- `id` string, required
- `role_id` string, required

## Response `200`

The call was successful

- Role — The current state of a role
  - `name` string — Name of the role
  - `description` string — Description of the role
  - `maximum_auth_age_secs` integer — An integer of value 1 or more.
  - `mfa_required` boolean — Determines if this role requires multi-factor authentication
  - `inheritable` boolean — Determines if this role is inheritable by the subaccounts of the account in which it was created
  - `permissions` Permissions[] — Webscale API permissions
    - `method` 'POST' | 'GET' | 'PUT' | 'PATCH' | 'DELETE', required — The HTTP method to which the permission applies.
    - `spec` string[], required — A collection of API specifications
    - `effect` 'permit' | 'deny', required — Permit or deny permission
  - `href` string — A reference to this role
  - `created` string — An iso8601 formatted timestamp
  - `updated` string — An iso8601 formatted timestamp

---

[API](https://skmtc.dev/webscale/apis/webscale-apis.md) · [All operations](https://skmtc.dev/webscale/apis/webscale-apis/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/webscale/webscale-apis/revisions/c98d872b50cb/schema)