HERE

HERE Roles API

Role and Role Membership Management

Documentation GitHub OpenAPI

Business capability

Identity & Access Management BC-620.20

Operations 10

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /roles List roles in the realm · Get Roles #

Ask an LLM

“What roles exist in my HERE platform realm?”

“Can I find roles by name or by the resource they apply to?”

Tell an agent

List all roles in my realm.

Find roles named {roleName} for resource {resource}.

GET /roles/me List the roles assigned to me · Get My Roles #

Ask an LLM

“Which roles have been assigned to my own user or app?”

“How can I check what roles the calling identity holds?”

Tell an agent

List the roles assigned to me.

Show up to {count} of my own roles.

GET /roles/{role} Get a role by its HRN · Get Role #

Ask an LLM

“How do I look up the details of a single role from its HRN?”

“What resource is a particular role attached to?”

Tell an agent

Get role {role}.

Show the details of the role with HRN {role}.

GET /roles/{role}/permissions List the permissions granted by a role · Get Role Permissions #

Ask an LLM

“What permissions does a role grant?”

“Can I see all unscoped permissions attached to a role?”

Tell an agent

List the permissions of role {role}.

Show what actions role {role} is allowed to perform.

GET /roles/{role}/permissions/{permission} Get one permission of a role · Get Role Permission #

Ask an LLM

“How do I check a single permission on a role?”

“Does a role include a specific permission ID?”

Tell an agent

Get permission {permission} on role {role}.

Check whether role {role} carries permission {permission}.

GET /roles/{role}/filter Get the access filter attached to a role · Get Role Access Filter #

Ask an LLM

“Is there an access filter attached to this role?”

“Which access filter restricts the data a role can see?”

Tell an agent

Get the access filter attached to role {role}.

Show whether role {role} has an access filter.

GET /roles/{role}/entities List users and apps assigned a role · Get role entities #

Ask an LLM

“Who has been assigned a given role?”

“Which users and apps hold a particular role?”

Tell an agent

List the entities assigned role {role}.

Show everyone who holds role {role}.

GET /roles/{role}/entities/{entity} Check whether an entity holds a role · Get a single role entity #

Ask an LLM

“How do I confirm a specific user or app has been assigned a role?”

“Does a given entity have a particular role?”

Tell an agent

Get entity {entity} in role {role}.

Check if {entity} has been assigned role {role}.

POST /roles/{role}/entities/{entity} Assign a role to a user or app · Assign a role to an entity #

Ask an LLM

“How do I grant a role to a user or app?”

“Does an entity need to be a group member before it can get a group's role?”

Tell an agent

Assign role {role} to {entity}.

Give entity {entity} the role {role}.

DELETE /roles/{role}/entities/{entity} Revoke a role from a user or app · Revoke a role from an entity #

Ask an LLM

“How do I revoke a role from a user or app?”

“Can I take away one role from an entity without affecting its other roles?”

Tell an agent destructive · confirm first

Revoke role {role} from {entity}.

Remove entity {entity} from role {role}.

Documentation

https://docs.here.com/identity-and-access-management/docs

https://docs.here.com/identity-and-access-management/reference

https://docs.here.com/data-api/docs

https://docs.here.com/data-api/reference

https://docs.here.com/usage/docs

https://docs.here.com/usage/reference

https://docs.here.com/destination-weather/docs

https://docs.here.com/destination-weather/reference

https://docs.here.com/ev-products/docs

https://docs.here.com/ev-products/reference

https://docs.here.com/fuel-prices/docs

https://docs.here.com/fuel-prices/reference

https://docs.here.com/geocoding-and-search/docs

https://docs.here.com/geocoding-and-search/reference

https://docs.here.com/routing/docs

https://docs.here.com/routing/reference

https://docs.here.com/positioning/docs

https://docs.here.com/positioning/reference

https://docs.here.com/indoor-map/docs

https://docs.here.com/indoor-map/reference

https://docs.here.com/transit/docs

https://docs.here.com/transit/reference

https://docs.here.com/map-attributes/docs

https://docs.here.com/map-attributes/reference

https://docs.here.com/map-rendering/docs

https://docs.here.com/map-rendering/reference

https://docs.here.com/workspace/docs

https://docs.here.com/workspace/reference

https://docs.here.com/tour-planning/docs

https://docs.here.com/tour-planning/reference

https://docs.here.com/tracking/docs

https://docs.here.com/tracking/reference

https://docs.here.com/traffic-api/docs

https://docs.here.com/traffic-api/reference

https://docs.here.com/wego-pro/docs

https://docs.here.com/wego-pro/reference

Specifications

https://raw.githubusercontent.com/api-evangelist/here/refs/heads/main/openapi/here-roles-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/here:here-roles-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: Authorization API v1.1 Roles API
  version: 1.1.0
  description: 'This specification is intended to describe the Authorization v1.1 APIs

    ## Roles

    ### **OrgAdmin** - An entity which has administrative authority over an organization.'
servers:
- url: Use API Lookup for a base URL
security:
- Bearer: []
tags:


# --- truncated at 32 KB (37 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/here/refs/heads/main/openapi/here-roles-api-openapi.yml