---
title: "List roles"
method: GET
path: "/roles"
tags: ["Roles"]
---

# List roles

`GET /roles`

Returns roles for the caller's organization. By default only org-scoped roles are returned. Pass `include=cluster` to also include cluster-wide roles (those with `organizationId == null`, e.g. super-admin and other system-actor roles); these are not assignable from the org UI but downstream consumers like the auth-context role lookup and the events page need them to resolve cluster-wide role IDs.

## Query parameters

- `include` 'cluster'
- `limit` integer
- `cursor` string

## Response `200`

Success

- object
  - `data` Role[], required
    - `id` string, uuid, required
    - `organizationId` string, uuid, nullable — NULL for global roles (e.g. super-admin)
    - `slug` string, nullable — Stable identifier for the super-admin role
    - `name` string, required
    - `description` string, required
    - `permissions` Permission[], required
      - `resource` 'sites' | 'missions' | 'media' | 'organization' | 'users' | 'roles' | 'billing' | 'developer' | 'events' | 'transactions', required
      - `level` 'none' | 'read' | 'write', required
    - `isSystem` boolean, required
    - `canSwitchOrganizations` boolean, required
    - `deletedAt` number, nullable, required
    - `createdAt` number, required
    - `updatedAt` number, required
  - `meta` PaginationMeta, required
    - `cursor` string, nullable, required — Opaque cursor for the next page; null when no more results
    - `total` integer — Total matching results across all pages; included when cheaply computable

## Other responses

- `401` — Authentication required
- `403` — Insufficient permissions
- `429` — Rate limit exceeded
- `500` — Internal server error

---

[API](https://skmtc.net/voltairlabs/apis/voltair-api.md) · [All operations](https://skmtc.net/voltairlabs/apis/voltair-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/voltairlabs/voltair-api/revisions/be08f4f706f5/schema)