# Retrieve a specific role and its permissions by roleId

Retrieves the full details of a specific role identified by its roleId, including its description and the complete product-level module and feature permission map.

## Endpoints

GET `/emsapi/roles/{roleId}`

## Request URL

`https://{server-hostname}:8383/emsapi/roles/{roleId}`

## Scope

`Admin.READ`

## Header

`Authorization: d92d4xxxxxxxxxxxxx15f52`

## Request Parameters

### Path Parameters

- **roleId** `string` — Mandatory

  Unique role identifier. To get role id click here: [Get Role Id](https://www.manageengine.com/products/desktop-central/help/api/onpremise/roles-get-role-by-id.html?Roles_getRoles)

## Sample Request

```curl
curl --request GET \
  --url https://appdomain/emsapi/roles/{roleId} \
  --header 'Authorization:  d92d4xxxxxxxxxxxxx15f52'
```

## Response Parameters

### HTTP code 200

#### Response Body — application/json

`JSON object`

- **roleId** `string`

  Unique role identifier.

- **roleName** `string`

  Name of the role as configured in the system.

- **roleDescription** `string`

  Description of the role's purpose and access level.

- **roleDetails** `JSON object`

  Product-keyed map of module and feature permissions assigned to this role. Each key represents a product name.

## Possible Response Codes

- **200** `HTTP code`

## Sample Response: HTTP 200

Shortened response example for get role by ID, showing product-level modules, optional feature restriction object, and 0/1/2/-1 boolean flags.

```json
{
  "roleId": "97913000000010560",
  "roleName": "Security Auditor",
  "roleDetails": {
    "desktopCentral": {
      "displayName": "Endpoint Control",
      "modules": [
        {
          "0": false,
          "1": false,
          "2": false,
          "-1": false,
          "displayName": "Configurations",
          "isFeatureRestrictionAllowed": {
            "read": 2,
            "fullControl": 0,
            "write": 0
          },
          "moduleId": "97913000000010497",
          "value": "Configurations"
        },
        {
          "0": false,
          "1": false,
          "2": false,
          "-1": true,
          "displayName": "Patch Management",
          "value": "Patch Management"
        }
      ]
    },
    "mdm": {
      "displayName": "MDM",
      "modules": [
        {
          "0": false,
          "1": false,
          "2": false,
          "-1": true,
          "displayName": "Inventory",
          "isFeatureRestrictionAllowed": {
            "fullControl": 0,
            "read": 0,
            "write": 0
          },
          "moduleId": "186245000000000405",
          "value": "MDM Inventory"
        },
        {
          "0": true,
          "1": false,
          "2": false,
          "-1": false,
          "displayName": "Report",
          "value": "MDM Report"
        }
      ]
    }
  },
  "roleDescription": "Read-only access to compliance dashboards, reports, and audit insights."
}
```

![](https://www.zohowebstatic.com/sites/zweb/images/people/ico-help.png)

**Duration:** 1 minute | **Threshold:** 30 | **Lock period:** 5 minutes

Duration - Time window for the threshold.  
Threshold - Number of API calls allowed within the specified duration.  
Lock Period - Wait time before consecutive API requests.