| GET | /authz/roles | Get all roles |
| POST | /authz/roles | Create new role |
| POST | /authz/roles/{id}/add-permissions | Add permissions to a role |
| POST | /authz/roles/{id}/remove-permissions | Remove permissions from a role |
| GET | /authz/roles/{id} | Get a role |
| DELETE | /authz/roles/{id} | Delete a role |
| POST | /authz/roles/{id}/has-permission | Check whether a role possesses a permission |
| GET | /authz/roles/{id}/users | Get users assigned to a role |
| GET | /authz/roles/{id}/user-assignments | Get users assigned to a role |
| GET | /authz/roles/{id}/group-assignments | Get groups that have a specific role assigned |
| GET | /authz/users/{id}/roles | Get roles assigned to a user |
| GET | /authz/users/{id}/roles/{userType} | Get roles assigned to a user |
| POST | /authz/users/{id}/assign | Assign a role to a user |
| POST | /authz/users/{id}/revoke | Revoke a role from a user |
| POST | /authz/groups/{id}/assign | Assign a role to a group |
| POST | /authz/groups/{id}/revoke | Revoke a role from a group |
| GET | /authz/groups/{id}/roles/{groupType} | Get roles assigned to a specific group |
| GET | /authz/groups/{groupType} | List all groups of a specific type |