---
title: "List All Roles"
url: "https://public-api-docs.cipherscale.com/apis/cipherscale-api-1/versions/fef69080-6094-4620-8bf0-16fd2de7b598/operations/RolesController_findAll"
---

> Full API specification: https://public-api-docs.cipherscale.com/apis/cipherscale-api-1/versions/fef69080-6094-4620-8bf0-16fd2de7b598.md

# List All Roles

`GET` `/tenants/roles`

Operation ID: `RolesController_findAll`

Retrieves all user roles available in the tenant, including system-defined roles (OWNER, ADMIN, etc.) and custom roles with their permissions and capabilities.

## Responses

- `200` - Successfully retrieved roles
- `401` - Unauthorized - Invalid or missing authentication token
- `403` - Forbidden - Insufficient permissions. Requires OWNER, ADMIN, AUDITOR, or SUPPORT role.

## OpenAPI definition

```yaml
openapi: 3.0.0
info:
  title: Cipherscale API
  version: "1.0"
servers:
  - url: https://public-api.cipherscale.com/qa
    description: Cipherscale Public API Server
paths:
  /tenants/roles:
    get:
      operationId: RolesController_findAll
      summary: List All Roles
      description: Retrieves all user roles available in the tenant, including
        system-defined roles (OWNER, ADMIN, etc.) and custom roles with their
        permissions and capabilities.
      responses:
        "200":
          description: Successfully retrieved roles
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: "#/components/schemas/RoleDto"
        "401":
          description: Unauthorized - Invalid or missing authentication token
        "403":
          description: Forbidden - Insufficient permissions. Requires OWNER, ADMIN,
            AUDITOR, or SUPPORT role.
      tags:
        - Roles
      security:
        - ApiKeyAuth: []
security:
  - ApiKeyAuth: []
components:
  schemas:
    RoleDto:
      type: object
      description: User role definition with specific permissions and capabilities
      properties:
        id:
          type: string
          format: uuid
          description: Unique identifier for the role
        createdAt:
          format: date-time
          type: string
          description: Timestamp when the role was created
        updatedAt:
          format: date-time
          type: string
          description: Timestamp when the role was last modified
        name:
          type: string
          description: Human-readable name of the role
        description:
          type: string
          description: Detailed description of the role's purpose and permissions
        deleteable:
          type: boolean
          description: Whether this role can be deleted (system roles are typically not
            deletable)
        type:
          enum:
            - OWNER
            - ADMIN
            - DEFAULT
            - BASIC
            - BILLING
            - AUDITOR
          type: string
          description: Predefined role type that determines the base permissions
      required:
        - id
        - createdAt
        - updatedAt
        - name
        - deleteable
        - type
  securitySchemes:
    ApiKeyAuth:
      type: apiKey
      in: header
      name: apikey
```