---
title: "Get a role."
method: GET
path: "/access-control/roles/{roleUID}"
tags: ["access_control", "enterprise"]
---

# Get a role.

`GET /access-control/roles/{roleUID}`

Get a role for the given UID.

You need to have a permission with action `roles:read` and scope `roles:*`.

## Path parameters

- `roleUID` string, required

## Response `200`

(empty)

- RoleDTO
  - `created` string, date-time, required
  - `delegatable` boolean
  - `description` string, required
  - `displayName` string, required
  - `global` boolean
  - `group` string, required
  - `hidden` boolean
  - `mapped` boolean
  - `name` string, required
  - `permissions` Permission[]
    - `action` string
    - `created` string, date-time
    - `scope` string
    - `updated` string, date-time
  - `uid` string, required
  - `updated` string, date-time, required
  - `version` integer, required

## Other responses

- `403` — ForbiddenError is returned if the user/token has insufficient permissions to access the requested resource.
- `500` — InternalServerError is a general error indicating something went wrong internally.

---

[API](https://skmtc.net/grafana/apis/http-api.md) · [All operations](https://skmtc.net/grafana/apis/http-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/grafana/http-api/versions/df55ba1718ba/schema)