# GET /api/roles

> Roles - List all Roles (Read-Only)

Roles are exposed read-only. A role holds the permission map of every staff member assigned to it, so granting or editing one through the API would be a privilege escalation path; create and edit roles in the RISE admin area instead. The serialised permissions column is omitted from this listing.

- **Endpoint:** `GET /api/roles`
- **Group:** Roles
- **Since:** v1.0.0
- **Defined in:** `RestApi/Controllers/RolesController.php`

## Headers

| Field | Type | Description |
| --- | --- | --- |
| `authtoken` | String | Authentication token, generated from admin area |

## Request example

```bash
curl -X GET "https://yoursite.com/index.php/api/roles" \
  -H "authtoken: YOUR_API_TOKEN"
```

## Responses

### Success - Success-Response:

```json
HTTP/1.1 200 OK
[
  { "id": "1", "title": "Project manager", "deleted": "0" },
  { "id": "2", "title": "Support agent", "deleted": "0" }
]
```

### Error - Error-Response:

```json
HTTP/1.1 404 Not Found
{ "status": false, "messages": { "error": "No data were found" } }
```

---

Part of the [REST API for RISE CRM](https://risecrm.themesic.com/apiguide/) documentation.
Full page: https://risecrm.themesic.com/apiguide/roles/get-roles/