List roles in the organisation

GET 
/api/organisations/:id/roles

List roles in the organisation. Callers with org.roles.manage receive full role objects (including permissions). Callers with only org.invitations.manage receive a minimal {id, name} projection suitable for role assignment in invitation flows.

Request

Responses

200

Successful response

401

Unauthorized — missing or invalid session

403

Forbidden — requires org.roles.manage or org.invitations.manage permission