Read one role's permissions Retrieve one role's table-by-table permissions: rows it can see, fields it can read, fields it can change, and rows on which it can add, edit, or delete.
GET /v1/apps/{appId}/roles/{roleId}
Include the same sentence shown in Studio for each table so tools and screens describe the role consistently.
Requires the schema:read scope. Operation roles.get. MCP tool roles_get. CLI: grid82 roles get (npx grid82).
Path parameters
Name Type Required Description appIdstring yes roleIdstring yes
dataobject required
Show child attributes data. roleobject required
Show child attributes data.role. idstring required pattern: ^[a-z][a-z0-9_]{0,62}$
data.role. namestring required length: 1–120 chars
data.role. descriptionstring length: ≤ 500 chars
data.role. assistantMonthlyCreditsinteger range: 0–10000000
data.role. interfaceenum<string> one of: assigned, own
data.role. automationsenum<string> one of: none, own
data. tablesstring | object[] required
data. revisionstring required
errorobject required
Show child attributes error. codeenum<string> required one of: not_found, forbidden, unauthenticated, validation_failed, conflict, rate_limited, payment_required, not_implemented, internal
error. messagestring required
error. detailsRecord<string, unknown>