Fetch a single role by its ID
GET/roles/:roleId
Returns the full details of the role identified by roleId within the tenant specified by the required tenant-id header. Use this when you already hold a role ID and need the role's name, description, and metadata; to list all available roles use GET /roles. The roleId path parameter is the string identifier returned when the role was created (e.g. "role-123-456-789"). Returns a single role object (RoleResponseDto) on success. Returns 400 if the tenant-id header is absent or blank. Note: if no role with the given ID exists, the current implementation returns 500 rather than 404 (tracked in CP-36405); verify the ID against GET /roles to find valid values.
Request
Responses
- 200
- 400
- 401
- 403
- 500
Role retrieved successfully
Bad request - Invalid request parameters or missing required headers
Authentication required - Valid authentication token is missing or invalid
Forbidden - User does not have the required permissions to read roles
Internal server error - An unexpected error occurred while processing the request. No response body is returned. Note: a non-existent role ID currently also surfaces here as a 500 rather than a 404, since not-found conditions are not distinguished from other failures (tracked in CP-36405).