GET /api/authorization/tenants/{tenantId}/principals/{principalId}/roles displays all of the roles assigned to a user.

Input

Use the supported input parameters to control the command output.

Parameter

Description

URL

https://$vRA/identity/api/authorization/tenants/$tenantId/principals/$principalId/roles

$vRA

Specifies the appliance name and fully qualified domain name, or IP address of the vRealize Automation server.

$token

Specifies a valid HTTP bearer token with necessary credentials.

$tenantId

Specifies the ID of the tenant.

principalId

Specifies the ID of the user in the form name@domain.

Output

The command output contains property names and values based on the command input parameters.

Parameter

Description

id

Specifies the role ID.

name

Specifies the role name.

description

Specifies the role description.

status

Specifies the status of this role.

assignedPermissions

Specifies the set of permissions that are implied by this role assignment.

curl Command to Display all Roles Assigned to a User

The following example command lists all the roles that are assigned to tony@example.mycompany.com.

curl --insecure -H "Content-Type: application/json" -H "Authorization: Bearer $token" https://$vRA/identity/api/authorization/tenants/development/principals/tony@example.mycompany.com/roles

The following JSON output is returned based on the command input.

{
   "links" : [ ],
   "content" : [ 
      {
         "@type" : "SystemRole",
         "id" : "ABX_TENANT_ADMIN",
         "name" : "Tenant Administrator",
         "description" : "ABX Tenant Administrator",
         "assignedPermissions" : [ {
         "id" : "CATALOG_CONSUME_TENANT_MGMT",
         "name" : "Catalog Consume Tenant Management",
         "description" : "Consume services, resources and manage requests ... within a Tenant",
         "prereqAdminPermissions" : null
      }, 
      {
         "id" : "MY_TENANT_MANAGEMENT",
         "name" : "My Tenant Management",
         "description" : "Manage my tenant.",
         "prereqAdminPermissions" : null
      }, 
      {
         "id" : "CATALOG_AUTHOR_TENANT",
         "name" : "Catalog Tenant-level Author",
         "description" : "Create, update and publish services, catalog ... across a Tenant.",
         "prereqAdminPermissions" : null
      }, 
      {
         "id" : "GUI_MY_TENANT_MANAGEMENT",
         "name" : "My Tenant Administration User Interface",
         "description" : "Access my tenant administration GUI.",
         "prereqAdminPermissions" : null
      }, 
      {
         "id" : "CATALOG_ENTITLE_TENANT",
         "name" : "Catalog Tenant-level Entitlement Management",
         "description" : "Entitle services, catalog items and actions ... users within a tenant.",
         "prereqAdminPermissions" : null
      }, 
      {
         "id" : "FILE_EDIT_TENANT",
         "name" : "Manage Tenant Files",
         "description" : "Upload and delete files belonging to this tenant.",
         "prereqAdminPermissions" : null
      }, 
      {
         "id" : "TENANT_USER_DATA_MANAGEMENT",
         "name" : "Manage user data (requests, items, tasks etc) within a tenant.",
         "description" : "Manage user created objects belonging to the tenant.",
         "prereqAdminPermissions" : null
      }, 
      {
         "id" : "TENANT_ADMIN_ROLE_ASSIGNMENT",
         "name" : "Tenant Administrator Role Assignment",
         "description" : "Assign the tenant administrator role to other users.",
         "prereqAdminPermissions" : null
      }, 
      {
         "id" : "GUI_MY_TENANT_TUG_MANAGEMENT",
         "name" : "My Tenant Identity Stores, Groups and Users Administration User Interfaces",
         "description" : "Access my tenant identity stores, groups ... users administration GUIs.",
         "prereqAdminPermissions" : null
      } 
   ],
   "metadata" : {
   "size" : 20,
   "totalElements" : 1,
   "totalPages" : 1,
   "number" : 1,
   "offset" : 0
   }
}