Returns one role — built-in or custom — with every permission it grants and where each comes from: the built-in definition, the base role it was copied from, or this role’s own permission rules
curl -X GET 'https://app.memorylake.ai/openapi/memorylake/admin/v1/roles/data_analyst' \ -H 'Authorization: Bearer sk_xxxxxx'
Returns one role — built-in or custom — with every permission it grants and where each comes from: the built-in definition, the base role it was copied from, or this role’s own permission rules. Any member may read the role; permissions is returned only to callers holding policy:manage on tenant:policy (the permission that lists permission rules) and is omitted for everyone else. The effective permissions of a member or an access group (Get Member Effective Permissions, Get Access Group Effective Permissions) also show what their role grants. To see your own permissions, use List My Permissions.
Permission required: none — any member’s key can call this
When true, only the team owner or a member holding the admin baseline — through their role or through an access group — may grant this role. A property of the role, the same for every caller; it is not the console role list’s per-caller assignable flag.
Whether member and invitation writes accept this role at all — the same for every caller. The owner role never is. Unlike the console’s role list, this does not say whether you yourself may grant it: for that, combine it with admin_grant_only and your own role.
For custom roles: the role whose permission rules were copied into this one when it was created. Absent on built-in roles and on custom roles created without a base.
Every permission the role grants, with its source. Returned only to callers holding policy:manage on tenant:policy; omitted for everyone else. An empty list means the role grants nothing. Instance limits (the role’s access scope) are not reflected here.
built_in: part of a built-in role’s definition. base_role: the base role grants it too — it was copied from the base role when this role was created. role_rule: granted only by this role’s own permission rules.
