Permissions - Claude API Reference

List RBAC Role Permissions

PermissionListPage Beta.Organization.RbacRoles.Permissions.List(parameters, cancellationToken = default)

GET/v1/organizations/rbac_roles/{rbac_role_id}/permissions

List the permissions an RBAC Role grants.

Models

class BetaRbacAllConnectorsPermissionResource { Type = "all_connectors"; }

JsonElement Type = "all_connectors"

Kind of resource the permission applies to.

class BetaRbacConnectorPermissionResource { Type = "connector"; ConnectorID; }

JsonElement Type = "connector"

Kind of resource the permission applies to.

required string ConnectorID

ID of the connector the permission applies to.

class BetaRbacConnectorScopePermissionResource { Type = "connector_scope"; ConnectorID; Scope; }

JsonElement Type = "connector_scope"

Kind of resource the permission applies to.

required string ConnectorID

ID of the connector the permission applies to.

required string Scope

OAuth scope the permission names — the role may receive this scope when tokens are minted for the connector.

Subject to the same encoding rule as tool_name: a scope containing characters outside [a-zA-Z0-9_-] (or colliding with a reserved form) appears server-encoded in a stable {prefix}_{32-hex} form. OAuth scopes routinely contain : and /, so most appear encoded.

class BetaRbacConnectorToolPermissionResource { Type = "connector_tool"; ConnectorID; ToolName; }

JsonElement Type = "connector_tool"

Kind of resource the permission applies to.

required string ConnectorID

ID of the connector the permission applies to.

required string ToolName

Published name of the connector tool the permission applies to.

When the published name contains characters outside [a-zA-Z0-9_-] (or collides with a reserved form), it is server-encoded into a stable {prefix}_{32-hex} form — a shortened readable prefix of the name plus a hash — from which the published name is not recoverable.

class BetaRbacOrganizationPermissionResource { Type = "organization"; OrganizationID; }

JsonElement Type = "organization"

Kind of resource the permission applies to.

required string OrganizationID

UUID of the organization the permission applies to.

class BetaRbacRolePermission { Type = "rbac_role_permission"; Action; Resource; }