The source type of roles to return: System or Custom (case-insensitive). When omitted, both are returned. Combined with filters as AND.

The sort order, in the format property(,asc|desc). The default is name,asc, and the direction is ascending when omitted. Repeat the parameter to sort by more than one property; the orders are applied in sequence. When sorting by createdDate or lastModifiedDate, roles without a value (System roles) are always returned last, in both ascending and descending order. Ties are ordered by name, then id, so pages are stable across requests.

The filter expression for roles, at most 1000 characters. Combine conditions with ; (AND). Supported: name with ==, !==, ==, !=, =sw=, =ew=; createdDate and lastModifiedDate with =gt=, =gte=, =lt=, =lte=. !== means not equal and != means does not match. For == and !~= supply % as the wildcard (e.g. %Vendor%); without % the match is exact. =sw= and =ew= always mean starts with and ends with: the trailing or leading % is optional (name=sw=Admin and name=sw=Admin% give the same result). Name matching is case-insensitive. Dates are ISO-8601 in UTC (2025-01-01T00:00:00Z) or a date (2025-01-01, read as midnight UTC); System roles have no dates and never match a date condition. OR (,), a standalone NOT (!) and parentheses are not supported. Values must not contain , ; ! ( ) ^ [ ] — filter by a part of the name without them instead, or fetch the whole list. To get a single role by its id, use GET /api/access/v3/roles/{roleId}.