---
title: "Get User Role From Id Token"
method: GET
path: "/api/v1/users/self/role-from-id-token"
tags: ["User APIs", "users"]
---

# Get User Role From Id Token

`GET /api/v1/users/self/role-from-id-token`

Return the role for the authenticated user using an Okta ID token.

Accepts the Okta ID token in the Authorization Bearer header.  Mirrors
/self/role but uses the Okta ID token issuer so that integrations such
as OpenBB workspace widgets can check the caller's role without a
regular API Bearer token.

Note: require_permissions cannot be used here as a route dependency
because it internally calls get_user_from_token (regular JWT Bearer),
which rejects Okta ID tokens.  The role response is inherently tied to
the authenticated user, so no additional permission gate is needed.

## Response `200`

Successful Response

- object

---

[API](https://skmtc.net/carbonarc/apis/carbon-arc-client-admin-api.md) · [All operations](https://skmtc.net/carbonarc/apis/carbon-arc-client-admin-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/carbonarc/carbon-arc-client-admin-api/revisions/a8ca30023371/schema)