List all roles for a tenant

GET 
/roles

Returns every role belonging to the tenant identified by the required tenant-id header. Use this to populate role-selection UIs or to audit which roles exist before assigning one to a user. Requires the tenant-id header; the request returns 400 if the header is absent or blank. The response is a paginated envelope containing a data array of role objects, a totalCount, and links for navigation.

Request

Responses

200

Roles retrieved successfully

400

Bad request - Invalid request parameters or missing required headers

401

Authentication required - Valid authentication token is missing or invalid

403

Forbidden - User does not have the required permissions to read roles

500

Internal server error - Failed to retrieve roles. The response body is a flat {"error": "..."} object, not the structured ApiError shape used elsewhere.