Skip to main content
GET
Retrieve role details

Authorizations

Authorization
string
header
required

Bearer token authentication using OAuth2/OIDC tokens

Path Parameters

id
string
required

Unique role identifier

Response

Role details

RBAC role definition. For MVP, roles are a predefined set of system roles and cannot be created or modified via the API.

uid
string<uuid>
required
read-only

Server-generated UUID.

id
enum<string>
required

Well-known role identifier. Predefined system roles are owner, admin, member, and viewer. Must match a-z [blocked]?. Immutable.

Available options:
owner,
admin,
member,
viewer
Required string length: 1 - 63
Pattern: ^[a-z]([-a-z0-9]*[a-z0-9])?$
Example:

"viewer"

displayName
string
required

Human-readable display name for the role.

Required string length: 1 - 255
Example:

"Viewer"

permissions
string[]
required

List of permissions granted by this role

createdAt
string<date-time>
required

Role creation timestamp

Server-defined URL for this resource.

Example:

"/v1/regions/global/iam/roles/viewer"

description
string

Human-readable role description

updatedAt
string<date-time>

Role last update timestamp