List your org's roles
List your org’s roles. Each role carries its display metadata (title,
description) and the assignment surfaces it may be offered on via the
applies_to field (team, service_account, api_token,
oidc_trust_policy). A role with no applies_to entries exists and may be
displayed, but cannot be newly assigned. Pass ?context=<surface> to filter
to the roles assignable on a single surface.
Authorizations
Type "Bearer" followed by a space and token.
Query Parameters
filter to roles assignable on a surface (team, service_account, api_token, oidc_trust_policy)
Response
OK
org_admin, org_support, org_read_only, org_builder, installer, runner, hosted-installer display + assignability metadata; the single source of truth read by GET /v1/roles and every role picker. Managed roles are kept in sync with standardOrgRoles by the authz reconciler.