# List roles

`GET https://api.endless.app/organizations/{organization_id}/roles`

Source: https://endless.app/docs/api/roles/list

Lists the roles the caller can read. Scoped to the organization named by `organization_id`.

## Authentication

- `bearerAuth`: HTTP bearer (JWT)

## Parameters

| Name | In | Type | Required | Description |
| --- | --- | --- | --- | --- |
| `organization_id` | path | string | yes |  |
| `Endless-Api-Version` | header | string | no | Pin the caller to an API major (`1`). Omit to accept the current version. A major this deployment cannot serve is refused with 400 `unsupported_api_version`. |

## Responses

### 200 OK

Content type: `application/json` — object

- `roles` (array<object>, required)
  - `role` ("org:admin" | "org:billing_manager" | "org:member" | "org:viewer", required)
  - `permissions` (array<"billing:manage" | "members:manage" | "roles:manage" | "workspace:manage" | "content:create" | "content:delete_own" | "content:read_any" | "content:edit_any" | "content:delete_any" | "governance:read" | "governance:write">, required)
- `caller` (object, required)
  - `role` ("org:admin" | "org:billing_manager" | "org:member" | "org:viewer" | null, required)
  - `permissions` (array<"billing:manage" | "members:manage" | "roles:manage" | "workspace:manage" | "content:create" | "content:delete_own" | "content:read_any" | "content:edit_any" | "content:delete_any" | "governance:read" | "governance:write">, required)

### Errors

- `400` (Error): The request is malformed, or failed input validation. `message` names the field and the rule it broke; `data.issues` carries them individually.
- `401` (Error): No bearer token, or a token that failed verification.
- `402` (Error): The workspace has no credits left, or the caller is over a spending limit.
- `403` (Error): Authenticated, but the caller's role in this workspace does not carry the permission this operation needs.
- `404` (Error): No resource with that id, or the caller cannot read it. The two are deliberately one answer, so an id cannot be probed for existence.
- `409` (Error): The request is well-formed, but the resource's current state forbids it — a taken name, a last admin, a limit already reached.
- `429` (Error): The caller has spent its rate-limit window. `Retry-After` says when to come back.
- `500` (Error): The request failed on our side. Safe to retry an idempotent operation with backoff.