# Retrieve a specific role and its permissions by roleId

Retrieves the full details of a specific role identified by its roleId, including its description and the complete product-level module and feature permission map.

## Endpoints

**GET** `/emsapi/roles/{roleId}`

## Request

### Request URL

`https://[{serverurl}](https://www.manageengine.com/products/desktop-central/help/api/cloud/oauth-authentication-endpoint-domain.html)/emsapi/roles/{roleId}`

### Scope

`DesktopCentralCloud.Admin.READ`

### Header

`Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52`

### Request Parameters

#### Path Parameters

- **roleId** `string` — **Mandatory**
  - Unique role identifier. To get role id click here: [Get Role Id](https://www.manageengine.com/products/desktop-central/help/api/cloud/roles-get-role-by-id.html?Roles_getRoles)

### Sample Request

```curl
curl --request GET \
  --url https://appdomains/emsapi/roles/{roleId} \
  --header 'Authorization: Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52'
```

## Response

### Response Parameters

#### HTTP Code 200

##### Response Body — application/json

- `JSON Object`
  - **roleId** `string`
    - Unique role identifier.
  - **roleName** `string`
    - Name of the role as configured in the system.
  - **roleDescription** `string`
    - Description of the role's purpose and access level.
  - **roleDetails** `JSON Object`
    - Product-keyed map of module and feature permissions assigned to this role. Each key represents a product name.

### Possible Response Codes

- **200** `HTTP code`

### Sample Response: HTTP 200

Shortened response example for get role by ID, showing product-level modules, optional feature restriction object, and 0/1/2/-1 boolean flags.

```json
{
  "roleId": "97913000000010560",
  "roleName": "Security Auditor",
  "roleDetails": {
    "desktopCentral": {
      "displayName": "Endpoint Control",
      "modules": [
        {
          "0": false,
          "1": false,
          "2": false,
          "-1": false,
          "displayName": "Configurations",
          "isFeatureRestrictionAllowed": {
            "read": 2,
            "fullControl": 0,
            "write": 0
          },
          "moduleId": "97913000000010497",
          "value": "Configurations"
        },
        {
          "0": false,
          "1": false,
          "2": false,
          "-1": true,
          "displayName": "Patch Management",
          "value": "Patch Management"
        }
      ]
    },
    "mdm": {
      "displayName": "MDM",
      "modules": [
        {
          "0": false,
          "1": false,
          "2": false,
          "-1": true,
          "displayName": "Inventory",
          "isFeatureRestrictionAllowed": {
            "fullControl": 0,
            "read": 0,
            "write": 0
          },
          "moduleId": "186245000000000405",
          "value": "MDM Inventory"
        },
        {
          "0": true,
          "1": false,
          "2": false,
          "-1": false,
          "displayName": "Report",
          "value": "MDM Report"
        }
      ]
    }
  },
  "roleDescription": "Read-only access to compliance dashboards, reports, and audit insights."
}
```

## Rate Limit

![](https://www.zohowebstatic.com/sites/zweb/images/people/ico-help.png)

**Duration:** 1 minute | **Threshold:** 30 | **Lock period:** 5 minutes

Duration - Time window for the threshold.  
Threshold - Number of API calls allowed within the specified duration.  
Lock Period - Wait time before consecutive API requests.