List all permissions assigned to a role
GET/roles/:roleId/permissions
Returns the full list of permissions currently assigned to the role identified by roleId within the tenant specified by the required tenant-id header. Use this to inspect what a role grants before assigning it to a user, or to determine which permissions need to be added or removed. The roleId is the string identifier returned when the role was created. Returns an array of permission objects (PermissionResponseDto) — the array will be empty if no permissions are assigned. Returns 400 if the tenant-id header is absent or blank. Note: if the role does not exist, the current implementation returns 500 rather than 404 (tracked in CP-36405).
Request
Responses
- 200
- 400
- 401
- 403
- 500
Permissions retrieved successfully
Bad request - Invalid request parameters or missing required headers
Authentication required - Valid authentication token is missing or invalid
Forbidden - User does not have the required permissions to read role permissions
Internal server error - An unexpected error occurred while processing the request. No response body is returned. Note: a non-existent role ID currently also surfaces here as a 500 rather than a 404, since not-found conditions are not distinguished from other failures (tracked in CP-36405).