List roles in the organisation

GET 
/api/organisations/:id/roles

List roles in the organisation. Requires an active membership; permissions and roles are resolved against that membership's TENANT, not the path organisation id, which the Directory schema does not guarantee to be equal. Callers with org.roles.manage receive full role objects (including permissions). Callers with only org.invitations.manage receive a minimal {id, name} projection suitable for role assignment in invitation flows.

Request

Responses

200

Successful response

401

Unauthorized — authentication credentials are missing or invalid

403

Forbidden — requires an active membership in the organisation, plus org.roles.manage or org.invitations.manage in that membership’s tenant