# (NEW!) List Security Roles (Paginated)

Retrieve a paginated, searchable list of the security roles configured for the authenticated customer.

Defaults:
- sortField defaults to roleName.
- order defaults to asc.
- from defaults to 0.
- limit defaults to 100 (clamped to 100 if a higher value is supplied).

Business Rules:
- searchTerm is a case-insensitive substring match on role name. Special LIKE characters (%, _, \) are treated as literal text, not wildcards.
- consentForm is not included on list items — it only appears on the get-by-id detail.

The user submitting the request must have the Role Management privilege.

Endpoint: GET /security/roles
Version: 1.5
Security: ApiKeyAuth, BasicAuth

## Header parameters:

  - `X-API-Key` (string, required)
    Customer-specific API key required to invoke API.

  - `Authorization` (string, required)
    Provided by Authentication Token creation operation.

## Query parameters:

  - `searchTerm` (string)
    Case-insensitive substring match on role name. Special LIKE characters (%, _, \) are treated as literal text.

  - `sortField` (string)
    Field to sort results by. Defaults to roleName.
    Enum: "roleName", "privilegeCount", "userCount", "createdEpoch", "lastUpdatedEpoch"

  - `order` (string)
    Sort direction. Defaults to asc.
    Enum: "asc", "desc"

  - `from` (integer)
    Result offset from which to start. Defaults to 0.

  - `limit` (integer)
    Number of results to return per page. Defaults to 100, maximum 100 (values above 100 are silently clamped).
    Example: 100

## Response 200 fields (application/json):

  - `roles` (array)
    Roles on this page.

  - `roles.id` (string)
    Unique ID of the role.
    Example: "6c15af83-d4a9-4772-875a-1c8a2bb1688f"

  - `roles.name` (string)
    Display name of the role.
    Example: "Creative Producer"

  - `roles.privilegeCount` (integer)
    Number of privileges granted to the role.
    Example: 2

  - `roles.userCount` (integer)
    Number of users currently assigned this role.
    Example: 12

  - `roles.createdBy` (string,null)
    User-profile id of the role's creator.
    Example: "dc63db1b-1e63-43bc-877e-418931b6895c"

  - `roles.createdEpoch` (integer)
    Unix timestamp (ms) of creation.
    Example: 1734000000000

  - `roles.createdDate` (string,null)
    ISO 8601 creation date.
    Example: "2024-12-12T12:00:00.000Z"

  - `roles.lastUpdatedBy` (string,null)
    User-profile id of the last user to update the role.
    Example: "a5ae4577-8940-4ca9-bf2c-b1b65b4306ec"

  - `roles.lastUpdatedEpoch` (integer)
    Unix timestamp (ms) of the last update.
    Example: 1755600000000

  - `roles.lastUpdatedDate` (string,null)
    ISO 8601 last-updated date.
    Example: "2025-08-19T12:00:00.000Z"

  - `pageInfo` (object)

  - `pageInfo.from` (integer)
    Offset of the first result on this page.

  - `pageInfo.limit` (integer)
    Maximum number of results requested per page.

  - `pageInfo.total` (integer)
    Total number of roles matching the query.

  - `pageInfo.hasNextPage` (boolean)
    Whether more roles exist beyond this page (from +  < total).

## Response 400 fields (application/json):

  - `status` (string)
    Example: "error"

  - `message` (string)

## Response 401 fields (application/json):

  - `status` (string)
    Example: "error"

  - `message` (string)

## Response 403 fields (application/json):

  - `status` (string)
    Example: "error"

  - `message` (string)