---
aside: false
---

# IAM API

Manage Identity and Access Management roles and their CASL policy statements. Role management requires Super Admin (`manage:all`) permission. Reading roles requires `read:roles` permission.

## List All Roles

<OAOperation operationId="getRoles" />

## Create a Role

<OAOperation operationId="createRole" />

## Get a Role

<OAOperation operationId="getRoleById" />

## Update a Role

<OAOperation operationId="updateRole" />

## Delete a Role

<OAOperation operationId="deleteRole" />