Get a role

One role, with everything it allows. Requires the `organizations.roles.read` permission.

GET
/organizations/{organizationId}/roles/{roleId}

Authorization

AuthorizationBearer <token>

The access token returned after a successful sign-in, sent as Authorization: Bearer <access_token>.

It identifies the person and the organization they are working in, and it lasts about fifteen minutes. When it runs out, use their refresh token at POST /auth/refresh-token instead of asking them to sign in again.

In: header

Path Parameters

organizationId*string

Identifier of the organization. Each endpoint states whether it must be the caller's active organization or may be used without authentication.

roleId*string

Identifier of the role.

Response Body

application/json

application/json

application/json

application/json

application/json

curl -X GET "https://api.dual.network/organizations/665f1c2d4b1a2c3d4e5f6aa0/roles/665f1c2d4b1a2c3d4e5f6ab0"
{
  "id": "665f1c2d4b1a2c3d4e5f6ab1",
  "name": "scanner",
  "description": "Scans and redeems tickets at the door.",
  "permissions": [
    {
      "resource": "objects",
      "crud": {
        "read": true,
        "create": false,
        "update": false,
        "delete": false
      }
    },
    {
      "resource": "ebus.actions",
      "crud": {
        "read": true,
        "create": true,
        "update": false,
        "delete": false
      }
    }
  ],
  "when_created": "2026-03-01T10:00:00Z",
  "when_modified": "2026-03-01T10:00:00Z"
}
{
  "code": 3,
  "message": "Key: 'limit' Error:Field validation for 'limit' failed on the 'lte' tag"
}

{
  "code": 16,
  "message": "no auth provided"
}

{
  "code": 5,
  "message": "object not found"
}
{
  "code": 13,
  "message": "internal error"
}