> ## Documentation Index > Fetch the complete documentation index at: https://api-docs.select.dev/llms.txt > Use this file to discover all available pages before exploring further. # List default role grants > List the roles every member of your organization holds by default. ## OpenAPI ````yaml https://api.select.dev/v2/openapi.json get /default-roles openapi: 3.1.0 info: title: SELECT API (v2) version: 0.1.0 servers: - url: https://api.select.dev/v2 description: SELECT API v2 security: [] paths: /default-roles: get: tags: - default-roles summary: List default role grants description: List the roles every member of your organization holds by default. operationId: list_default_roles_route_default_roles_get parameters: - name: page_token in: query required: false schema: anyOf: - type: string - type: 'null' description: Opaque cursor from a previous response. Omit on the first call. title: Page Token description: Opaque cursor from a previous response. Omit on the first call. - name: max_results in: query required: false schema: type: integer default: 50 title: Max Results - name: x-tenant-id in: header required: true schema: type: string description: The organization ID the request is scoped to. title: X-Tenant-Id description: The organization ID the request is scoped to. responses: '200': description: Successful Response content: application/json: schema: $ref: '#/components/schemas/ListResponse_DefaultRoleGrantV2_' '422': description: Validation Error content: application/json: schema: $ref: '#/components/schemas/HTTPValidationError' security: - HTTPBearer: [] components: schemas: ListResponse_DefaultRoleGrantV2_: properties: items: items: $ref: '#/components/schemas/DefaultRoleGrantV2' type: array title: Items page_token: anyOf: - type: string - type: 'null' title: Page Token description: Opaque cursor for the next page; empty/absent on the last page. row_count: anyOf: - type: integer - type: 'null' title: Row Count description: >- Best-effort total for the filtered result set; may be null when expensive. type: object required: - items title: ListResponse[DefaultRoleGrantV2] HTTPValidationError: properties: detail: items: $ref: '#/components/schemas/ValidationError' type: array title: Detail type: object title: HTTPValidationError DefaultRoleGrantV2: properties: id: type: string title: Id description: The unique identifier of this role grant. readOnly: true x-terraform-computed: true role: $ref: '#/components/schemas/AccessRole' description: The role every organization member holds. snowflake_organization_name: anyOf: - type: string - type: 'null' title: Snowflake Organization Name description: Snowflake organization this grant is scoped to, if any. snowflake_account_uuid: anyOf: - type: string - type: 'null' title: Snowflake Account Uuid description: Snowflake account this grant is scoped to, if any. usage_group_id: anyOf: - type: string - type: 'null' title: Usage Group Id description: Usage group this grant is scoped to, if any. entity: $ref: '#/components/schemas/PermissionEntityWithDisplayName' description: >- The resolved scope this grant applies to — its type, id and human readable display name. Falls back to the organization when the grant carries no narrower scope. readOnly: true x-terraform-computed: true create_time: type: string title: Create Time description: >- When the grant was created — RFC 3339 UTC, e.g. 2026-06-05T10:30:00Z. readOnly: true x-terraform-computed: true update_time: type: string title: Update Time description: When the grant was last updated — RFC 3339 UTC. readOnly: true x-terraform-computed: true etag: type: string title: Etag description: Opaque strong ETag for optimistic concurrency. readOnly: true x-terraform-computed: true type: object required: - id - role - entity - create_time - update_time - etag title: DefaultRoleGrant description: >- A role every member of your organization holds by default, with the scope it applies to. ValidationError: properties: loc: items: anyOf: - type: string - type: integer type: array title: Location msg: type: string title: Message type: type: string title: Error Type type: object required: - loc - msg - type title: ValidationError AccessRole: type: string enum: - admin - editor - monitor_editor - viewer - team_creator title: AccessRole description: The permission level a role grant confers. PermissionEntityWithDisplayName: properties: type: $ref: '#/components/schemas/PermissionEntityType' id: type: string title: Id display_name: type: string title: Display Name usage_group_details: anyOf: - $ref: '#/components/schemas/UsageGroupDetails' - type: 'null' parent_id: anyOf: - type: string - type: 'null' title: Parent Id type: object required: - type - id - display_name title: PermissionEntityWithDisplayName description: >- Permission entity with a human readable display name. Args: type: The type of the entity. `usage_group`, `snowflake_account`, `snowflake_organization`, `databricks_account`, `databricks_connection`, `team`, or `select_organization`. id: The id of the entity. The `usage_group_id`, `snowflake_account_uuid`, `snowflake_organization_name`, `databricks_account_id`, `databricks_conn_id`, `team_id`, or `organization_id`. display_name: A human readable name for the entity. Typically colon delimited. On this class the property is required. usage_group_details: Optional details about the usage group. Only included in serialization when type is USAGE_GROUP. Note that the hashing and equality check are done based on the `type` and `id` fields as per the `PermissionEntity` class. This means that even if the `display_name` is different, two `PermissionEntityWithDisplayName` instances will still compare equal. PermissionEntityType: type: string enum: - select_organization - snowflake_organization - snowflake_account - databricks_account - databricks_connection - bigquery_connection - aws_account - tableau_site - team - usage_group title: PermissionEntityType description: >- The type of the permission entity. Comparison operations are supported to understand the level in the hierarchy of the type. NOTE: The object hierarchy is not linear. SELECT Organizations are still at the top, but teams and usage groups are effectively the same level, but will return false if compared. Hierarchy (see ``grants.CONTAINS`` for the authoritative tree): SELECT_ORGANIZATION ├── SNOWFLAKE_ORGANIZATION │ └── SNOWFLAKE_ACCOUNT │ └── USAGE_GROUP ├── DATABRICKS_ACCOUNT │ └── DATABRICKS_CONNECTION ├── BIGQUERY_CONNECTION ├── AWS_ACCOUNT ├── TABLEAU_SITE ├── TEAM │ └── USAGE_GROUP └── USAGE_GROUP UsageGroupDetails: properties: set_name: type: string title: Set Name group_name: type: string title: Group Name type: object required: - set_name - group_name title: UsageGroupDetails description: |- Details about a usage group entity. This is only populated when the entity type is USAGE_GROUP. securitySchemes: HTTPBearer: type: http description: Organization API key (sl_…). scheme: bearer ````