Roles
GET
Return the fixed role catalog and the permission metadata those roles reference. This is vocabulary, not org-scoped data, so no organization or project permission is required. Only an OIDC user JWT is admitted on this route; dtno_ organization API keys are not.
user_jwtheader
AuthorizationBearer <token>OIDC access token of a signed-in user (the dashboard/CLI login) used on the management plane: /me, /orgs*, /projects*, /invitations*, /roles, billing, audit, API-key, and service-account routes. Every management operation documents the org/project permission the authenticated member must hold.
Role catalog and permission metadata
application/json- response
permissions*array<>roles*array<>curl -X GET 'https://example.com/roles'{ "permissions": [ { "category": "string", "id": "string", "name": "string", "reserved": true } ], "roles": [ { "description": "string", "id": "string", "name": "string", "permissions": [ "string" ], "system": true } ]}