List user role assignments

GET

/api/admin/users/{id}/roles

Code sample: Shell / cURL

curl --request GET \
  --url https://auth.example.com/api/admin/users/example/roles \
  --header 'Authorization: Bearer <token>'

Returns active role assignments for the user, including role display names, scope, assignment actor, expiry, and creation time.

Authorizations

• adminBearer
• adminSessionCookie

Parameters

Path Parameters

id

required

string

Responses

200

Active role assignments for a user.

Media type application/json

object

user_id

required

string

roles

required

Array<object>

object

id

string

role_id

string

role_name

string

role_display_name

string

is_system_role

boolean

role_type

string

scope

string

scope_target

string

assigned_by

string

expires_at

integer

created_at

integer

key

additional properties

key

additional properties

Example

{
  "user_id": "user_123",
  "roles": [
    {
      "id": "ra_123",
      "role_id": "role_support",
      "role_name": "support_agent",
      "role_display_name": "Support Agent",
      "is_system_role": false,
      "role_type": "custom",
      "scope": "global",
      "scope_target": "",
      "assigned_by": "admin_123",
      "expires_at": null,
      "created_at": 1770000000000
    }
  ]
}

400

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

401

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

403

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}