Get Roles
Return a list of roles. Default: all. With managed_only=true: only those with managed devices.
Authentication
AuthorizationBearer
Bearer JWT used by CLI and machine clients on svc-* endpoints. Authentication is required by default, but deployments may disable it with [auth] required = false. Browser OIDC sessions, mTLS, SPIFFE identities, and trusted gateway identity headers may also satisfy authentication outside this generated client flow.
Query parameters
managed_only
Limit to roles with managed devices
Response
Successful Response
id
name
Errors
422
Unprocessable Entity Error