get https://{applicationQualifiedDomain}.us.wristband.dev/api/v1/clients//roles
Retrieves the roles that are assigned to the specified client (based off a query expression).
Query Filter Attributes:
idtypenamedisplayNametenantVisibility
Query Sort Attributes:
idtypenamedisplayNametenantVisibility
Required Permissions
Below is the list of required permissions needed to interact with this API. For each permission the allowed permission boundaries are also specified.
| Permission | Boundary | Description |
|---|---|---|
| role:read | Application | The subject can perform this query if the client specified in the URL path belongs to the subject's associated application. |
| Tenant | The subject can perform this query if the client specified in the URL path is owned by the subject's associated tenant. | |
| Tenant Inclusion List | The subject can perform this query if the client specified in the URL path is owned by a tenant included in the tenant inclusion list. | |
| Tenant Exclusion List | The subject can perform this query if the client specified in the URL path belongs to the subject's associated application and is not owned by a tenant in the tenant exclusion list. | |
| Self | The client subject can query the roles assigned to itself. |