Permissions changedapi/admin/rbac_roles/permissions
Nearest release: v2.1.245, published an hour after this site recorded the change. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Recorded here
Lines+42added
Lines−45removed
From line
1
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits5to this page, all time
### Path parameters ### Query parameters ### Headers #### Response (200) ## Domain types ### Path Parameters ### Query Parameters ### Header Parameters #### Response ## Domain Types
The whole hunk
from line 1, old and new numbered
/
from line 1
1---
2title: Permissions
3url: https://platform.claude.com/docs/en/api/admin/rbac_roles/permissions
4---
5
61# Permissions
72
83## List RBAC Role Permissions
94
10**get** `/v1/organizations/rbac_roles/{role_id}/permissions`
5**GET** `/v1/organizations/rbac_roles/{role_id}/permissions`
116
127List the permissions an RBAC Role grants.
138
149The RBAC Roles API is in beta and available to Claude Enterprise organizations only. Requests must send the `ce-user-management-2026-07-13` value in the `anthropic-beta` header.
1510
16### Path Parameters
11### Path parameters
1712
1813- `role_id: string`
1914
2015 ID of the RBAC Role.
2116
22### Query Parameters
17### Query parameters
2318
2419- `limit: optional number`
2520
from line 22
2722
2823 Defaults to `20`. Ranges from `1` to `1000`.
2924
25 default: 20, maximum: 1000, minimum: 1
26
3027- `page: optional string`
3128
3229 Optionally set to the `next_page` token from the previous response.
3330
34### Header Parameters
31### Headers
3532
3633- `"anthropic-beta": optional array of string`
3734
from line 59
6259 `all_connectors` grants carry a tool-access action, the scope action, or
6360 an authentication-method action (`interactive` or `managed`).
6461
65 - `resource: object { organization_id, type } or object { connector_id, tool_name, type } or object { connector_id, scope, type } or 2 more`
62 - `resource: object or object or object or 2 more`
6663
6764 What the permission applies to.
6865
from line 66
6966 A tagged union: `type` names the kind of resource and determines which
7067 identifier fields are present.
7168
72 - `Organization object { organization_id, type }`
69 - `Organization object`
7370
7471 - `organization_id: string`
7572
from line 76
7976
8077 Kind of resource the permission applies to.
8178
82 - `"organization"`
79 default: organization
8380
84 - `ConnectorTool object { connector_id, tool_name, type }`
81 - `ConnectorTool object`
8582
8683 - `connector_id: string`
8784
from line 97
10097
10198 Kind of resource the permission applies to.
10299
103 - `"connector_tool"`
100 default: connector_tool
104101
105 - `ConnectorScope object { connector_id, scope, type }`
102 - `ConnectorScope object`
106103
107104 - `connector_id: string`
108105
from line 119
122119
123120 Kind of resource the permission applies to.
124121
125 - `"connector_scope"`
122 default: connector_scope
126123
127 - `Connector object { connector_id, type }`
124 - `Connector object`
128125
129126 - `connector_id: string`
130127
from line 131
134131
135132 Kind of resource the permission applies to.
136133
137 - `"connector"`
134 default: connector
138135
139 - `AllConnectors object { type }`
136 - `AllConnectors object`
140137
141138 - `type: "all_connectors"`
142139
143140 Kind of resource the permission applies to.
144141
145 - `"all_connectors"`
142 default: all_connectors
146143
147144 - `type: "rbac_role_permission"`
148145
from line 147
150147
151148 For RBAC Role Permissions, this is always `"rbac_role_permission"`.
152149
153 - `"rbac_role_permission"`
150 default: rbac_role_permission
154151
155152- `has_more: boolean`
156153
from line 160
163160
164161### Example
165162
166```http
163```bash
167164curl https://api.anthropic.com/v1/organizations/rbac_roles/$ROLE_ID/permissions \
168165 -H 'anthropic-version: 2023-06-01' \
169166 -H "Authorization: Bearer $ANTHROPIC_OAUTH_TOKEN"
170167```
171168
172#### Response
169#### Response (200)
173170
174171```json
175172{
from line 185
188185}
189186```
190187
191## Domain Types
188## Domain types
192189
193190### Rbac Role Permission
194191
195- `RbacRolePermission object { action, resource, type }`
192- `RbacRolePermission object`
196193
197194 - `action: string`
198195
from line 210
213210 `all_connectors` grants carry a tool-access action, the scope action, or
214211 an authentication-method action (`interactive` or `managed`).
215212
216 - `resource: object { organization_id, type } or object { connector_id, tool_name, type } or object { connector_id, scope, type } or 2 more`
213 - `resource: object or object or object or 2 more`
217214
218215 What the permission applies to.
219216
from line 217
220217 A tagged union: `type` names the kind of resource and determines which
221218 identifier fields are present.
222219
223 - `Organization object { organization_id, type }`
220 - `Organization object`
224221
225222 - `organization_id: string`
226223
from line 227
230227
231228 Kind of resource the permission applies to.
232229
233 - `"organization"`
230 default: organization
234231
235 - `ConnectorTool object { connector_id, tool_name, type }`
232 - `ConnectorTool object`
236233
237234 - `connector_id: string`
238235
from line 248
251248
252249 Kind of resource the permission applies to.
253250
254 - `"connector_tool"`
251 default: connector_tool
255252
256 - `ConnectorScope object { connector_id, scope, type }`
253 - `ConnectorScope object`
257254
258255 - `connector_id: string`
259256
from line 270
273270
274271 Kind of resource the permission applies to.
275272
276 - `"connector_scope"`
273 default: connector_scope
277274
278 - `Connector object { connector_id, type }`
275 - `Connector object`
279276
280277 - `connector_id: string`
281278
from line 282
285282
286283 Kind of resource the permission applies to.
287284
288 - `"connector"`
285 default: connector
289286
290 - `AllConnectors object { type }`
287 - `AllConnectors object`
291288
292289 - `type: "all_connectors"`
293290
294291 Kind of resource the permission applies to.
295292
296 - `"all_connectors"`
293 default: all_connectors
297294
298295 - `type: "rbac_role_permission"`
299296
from line 298
301298
302299 For RBAC Role Permissions, this is always `"rbac_role_permission"`.
303300
304 - `"rbac_role_permission"`
301 default: rbac_role_permission
305302
No line in this hunk matches that.