Access Request API
List Requestable Roles
List roles that are available for requesting access. Returns roles with their access policy IDs so callers can look up policy constraints (max duration, justification requirements) via the Access Policy API.
GET
List Requestable Roles
Authentication and permissions
Token requirements: User-based token (OAuth) or Organization-scoped API key or Workspace-scoped API key. Send a bearer access token for one of these identities. The permissions and resource restrictions below also apply.
Permissions joined by + are all required; or separates alternatives. Full-access keys still cannot call endpoints marked unsupported. Workspace keys must allow every workspace checked by the request. OAuth access depends on the user’s roles and resource access.
- Your own requestable roles: target_user_id must be omitted or be your own user ID.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Query Parameters
The ID of the workspace. Required.
The ID of the user to check requestable roles for. Defaults to the authenticated user if omitted.
Maximum number of results to return. Default is 100, maximum is 1000.
Token for pagination. Leave empty for the first request.

