---
title: "Security Roles"
url: "https://earlyaccess.developers.bynder.com/apis/security-roles-1/versions/b3488685-ac81-4a41-9298-71b99f882ca6"
---

# Security Roles

OpenAPI specification document.

```json
{"components":{"securitySchemes":{"OAuth2":{"flows":{"authorizationCode":{"authorizationUrl":"https://{your-auth-url}","scopes":{"PERMISSIONMANAGEMENT":"Grants permission to manage permissions"},"tokenUrl":"https://{your-bynder-domain}/v6/authentication/oauth2/token"},"clientCredentials":{"scopes":{"PERMISSIONMANAGEMENT":"Grants permission to manage permissions"},"tokenUrl":"https://{your-bynder-domain}/v6/authentication/oauth2/token"}},"type":"oauth2"},"permanentToken":{"in":"header","name":"Authorization","type":"apiKey"}}},"info":{"title":"Security Roles","version":"1.0.0"},"openapi":"3.1.0","paths":{"/api/v4/profiles/":{"get":{"description":"To determine the security profile for your user you can compare the security profile id with the profileId retrieved from either the Retrieve specific user or Retrieve current user call. It’s the API’s responsibility to enforce that users can only perform allowed actions but nevertheless we recommend that your application checks whether or not an action can be performed because this will create a better user experience.\n","responses":{"200":{"content":{"application/json":{"example":"[\n  {\n    \"name\": \"Admin\",\n    \"id\": \"1\",\n    \"roles\": [\n      \"GROUPMANAGEMENT\",\n      \"USERMANAGEMENT\",\n      \"PERMISSIONMANAGEMENT\"\n    ]\n  },\n  {\n    \"name\": \"User\",\n    \"id\": \"2\",\n    \"roles\": [\n      \"USERMANAGEMENT\"\n    ]\n  }\n]\n","schema":{"items":{"properties":{"id":{"type":"string"},"name":{"type":"string"},"roles":{"items":{"type":"string"},"type":"array"}},"type":"object"},"type":"array"}}},"description":"Successful response"},"401":{"content":{"text/plain":{"example":"Invalid or expired token.\n","schema":{"type":"string"}}},"description":"Invalid or expired token"}},"security":[{"permanentToken":["PERMISSIONMANAGEMENT"]},{"OAuth2":["PERMISSIONMANAGEMENT"]}],"summary":"Retrieve security profiles","tags":["Profiles"]}},"/api/v4/profiles/{id}":{"get":{"description":"This call allows you to retrieve your own security profile without requiring the PERMISSIONMANAGEMENT security role. In order to get your own security profile use your user profile id retrieved by executing the Specific User or Current User call.\n","parameters":[{"description":"Security profile id.","in":"path","name":"id","required":true,"schema":{"type":"string"}}],"responses":{"200":{"content":{"application/json":{"example":"{\n  \"name\": \"Admin\",\n  \"id\": \"1\",\n  \"roles\": [\n    \"GROUPMANAGEMENT\",\n    \"USERMANAGEMENT\",\n    \"PERMISSIONMANAGEMENT\"\n  ]\n}\n","schema":{"properties":{"id":{"type":"string"},"name":{"type":"string"},"roles":{"items":{"type":"string"},"type":"array"}},"type":"object"}}},"description":"Successful response"},"401":{"content":{"text/plain":{"example":"Invalid or expired token.\n","schema":{"type":"string"}}},"description":"Invalid or expired token"}},"security":[{"OAuth2":["","PERMISSIONMANAGEMENT"]}],"summary":"Retrieve specific security profile","tags":["Profiles"]}}},"servers":[{"url":"https://{your-bynder-domain}/"}],"tags":[{"description":"To determine the security profile for your user you can compare the security profile id with the profileId retrieved from either the Retrieve specific user or Retrieve current user call. It's the API's responsibility to enforce that users can only perform allowed actions but nevertheless we recommend that your application checks whether or not an action can be performed because this will create a better user experience.\n","name":"Profiles"}]}
```