---
title: "Create a role"
method: POST
path: "/v2/roles"
tags: ["Roles"]
---

# Create a role

`POST /v2/roles`

Create a new custom role for the authenticated user's account.

**Payload Requirements**
- `name` is required and must be unique within the account.
- `permissions` is required and must contain at least one valid permission
  identifier (e.g. `PROJECT_READ`, `DATASET_CREATE`).
- System-managed fields (`id`, `created_at`, `updated_at`, `is_predefined`)
  are rejected if provided.

**Valid example**
```json
{
  "name": "Data Scientist",
  "description": "Can read and create datasets and experiments.",
  "permissions": ["PROJECT_READ", "DATASET_READ", "DATASET_CREATE"]
}
```

**Invalid example** (missing required `permissions`)
```json
{
  "name": "Data Scientist"
}
```

<Note>This endpoint is in beta, read more [here](https://arize.com/docs/ax/rest-reference#api-version-stages).</Note>

## Request body

- CreateRoleRequest
  - `name` string, required — Human-readable name for the role. Must be unique within the account.
  - `description` string — Optional description of the role's purpose. Omitted from the response if empty.
  - `permissions` Permission[], required — List of permissions to grant. At least one permission is required. Each value must be a valid permission identifier (e.g. `PROJECT_READ`, `DATASET_CREATE`).

## Response `201`

A role object.

- Role
  - `id` string, required — Unique identifier for the role.
  - `name` string, required — Human-readable name of the role.
  - `description` string — A brief description of the role's purpose.
  - `permissions` Permission[], required — List of permissions granted by this role. Each value corresponds to a permission identifier (e.g. `PROJECT_READ`, `DATASET_CREATE`).
  - `is_predefined` boolean, required — Whether this role is a system-defined predefined role. Predefined roles cannot be updated or deleted.
  - `created_at` string, date-time, required — Timestamp when the role was created.
  - `updated_at` string, date-time, required — Timestamp when the role was last updated.

## Other responses

- `400` — Invalid request
- `401` — Authentication is required
- `403` — Insufficient permissions to access this resource
- `409` — Resource conflict
- `422` — Unprocessable entity
- `429` — Rate limit exceeded

---

[API](https://skmtc.net/arize-ai/apis/arize-rest-api.md) · [All operations](https://skmtc.net/arize-ai/apis/arize-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/arize-ai/arize-rest-api/versions/2ce448f1de13/schema)