List role bindings
List role bindings in the caller's organization, optionally filtered by principal, resource, and role.
Query parameters
The kind of principal that receives permissions from a role binding. Possible values: user, service_account, api_key, invite.
Filter by principal type. Required when principal_id is set.
Filter by principal ID. Requires principal_type. The ID is a UUID for all principal types (user, service account, or invite).
The kind of resource scope a role binding applies to. Possible values: organization, project.
Filter by resource type. Required when resource_id is set.
Filter by resource ID. Requires resource_type.
A role assigned to a principal at a resource scope.
Filter by role.
The number of results to return per page. When omitted, the server defaults to 100. Out-of-range values return 400 OUT_OF_RANGE.
Cursor from pagination.next of a prior response. Must be reused with the same query context (path parameters, filters, and limit).
Headers
Required date-based version header
Response
A paginated list of role bindings. When multiple filters are supplied, they are combined with AND.
Example response
{
"data": [
{
"created_at": "2026-04-10T15:23:00.000Z",
"id": "9a8e3528-b9c0-4358-84ce-84c28e91b566",
"principal_id": "f8a3b2c1-4d5e-6f7a-8b9c-0d1e2f3a4b5c",
"principal_type": "service_account",
"resource_id": "a2f7dddb-1597-4eff-9f71-535fde243f58",
"resource_type": "project",
"role": "DataPlaneEditor"
}
],
"pagination": {
"next": "eyJsYXN0X2lkIjoiOWE4ZTM1MjgifQ=="
}
}