---
title: "List all user roles and permissions in an organization"
method: GET
path: "/orgs/{orgId}/users/{userId}/roles"
tags: ["orgs"]
---

# List all user roles and permissions in an organization

`GET /orgs/{orgId}/users/{userId}/roles`

List all user roles and permissions in an organization; also list the sources of those roles (via team assignment or direct user assignment).

## Path parameters

- `orgId` integer, required
- `userId` integer, required

## Response `200`

OK

- ListUserRolesResponse
  - `user` MemberDbDto
    - `avatar` string
    - `email` string
    - `firstName` string
    - `lastName` string
    - `memberId` integer
    - `role` 'owner' | 'member' | 'collaborator'
    - `userId` integer
    - `userName` string
  - `userWorkspaces` UserWorkspaceRolesDto[]
    - `permissions` UserWorkspacePermissionDto[]
      - `permission` string
      - `roles` string[]
    - `roles` UserWorkspaceRoleDto[]
      - `role` string
      - `roleSourceType` 'individual' | 'team'
      - `sourceTeamId` integer
      - `sourceTeamName` string
      - `sourceTeamType` 'regular' | 'system_owners'
    - `workspaceId` integer
    - `workspaceName` string

## Other responses

- `400` — Bad request
- `403` — Operation not allowed

---

[API](https://skmtc.net/seqeralabs/apis/seqera-api.md) · [All operations](https://skmtc.net/seqeralabs/apis/seqera-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/seqeralabs/seqera-api/revisions/13316c9fe5ff/schema)