Skip to main content
GET
Get Organization Roles Groups

Authorizations

Authorization
string
header
required

A Barndoor API key, sent as Authorization: Bearer <key>. Keys are prefixed bdai_ and are opaque — do not attempt to decode one. Interchangeable with an OAuth 2.0 access token.

Response

200 - application/json

Successful Response

Aggregated roles and groups for all users in an organization.

These are the names a policy rule addresses through roles_groups. The values here are UNPREFIXED; a policy rule requires the role:/group: prefix (see PolicyRule.roles_groups in policy-service), so a value Engineering from groups is written as group:Engineering.

roles
string[]
required

Distinct role names assigned to at least one user in the organization. Unprefixed — use as role:<name> in a policy rule's roles_groups.

groups
string[]
required

Distinct group names assigned to at least one user in the organization. Unprefixed — use as group:<name> in a policy rule's roles_groups.