# List role bindings

**GET** `/admin/role-bindings`

List role bindings in the caller's organization, optionally filtered by principal, resource, and role.

Base URL: `https://api.pinecone.io`

Tags: `Role Bindings`

## Authorization

| Option | Scheme | Type | Sent as | Scopes |
| --- | --- | --- | --- | --- |
| Option 1 | `BearerAuth` | `http` | `Authorization: Bearer <token>` | — |

## Query parameters

| Name | Type | Required | Description |
| --- | --- | --- | --- |
| `principal_type` | `string` | No | Filter by principal type. Required when `principal_id` is set. |
| `principal_id` | `string` | No | Filter by principal ID. Requires `principal_type`. The ID is a UUID for all principal types (user, service account, or invite). |
| `resource_type` | `string` | No | Filter by resource type. Required when `resource_id` is set. |
| `resource_id` | `string` | No | Filter by resource ID. Requires `resource_type`. |
| `role` | `string` | No | Filter by role. |
| `limit` | `integer` | No | The number of results to return per page. When omitted, the server defaults to 100. Out-of-range values return `400 OUT_OF_RANGE`. |
| `paginationToken` | `string` | No | Cursor from `pagination.next` of a prior response. Must be reused with the same query context (path parameters, filters, and `limit`). |

## Header parameters

| Name | Type | Required | Description |
| --- | --- | --- | --- |
| `X-Pinecone-Api-Version` | `string` | Yes | Required date-based version header |

## Responses

| Status | Description | Media type |
| --- | --- | --- |
| `200` | A paginated list of role bindings. When multiple filters are supplied, they are combined with AND. | `application/json` |
| `400` | Bad request. The request body included invalid request parameters. | `application/json` |
| `401` | Unauthorized. Possible causes: Invalid API key. | `application/json` |
| `403` | Forbidden | `application/json` |
| `4XX` | Unexpected error on request. | `application/json` |
| `500` | Internal server error. | `application/json` |

### Example response: 200 — A paginated list of role bindings. When multiple filters are supplied, they are combined with AND.

```json
{
  "data": [
    {
      "created_at": "2026-04-10T15:23:00Z",
      "id": "5a86ed21-daf1-448d-a9ca-f92a0fd839d3",
      "principal_id": "e2e92523-85dc-4142-b8c2-e681be8b78df",
      "principal_type": "user",
      "resource_id": "-ExampleOrgId0000000",
      "resource_type": "organization",
      "role": "OrgMember"
    }
  ],
  "pagination": {
    "next": "eyJsYXN0X2lkIjoiNWE4NmVkMjEifQ=="
  }
}
```

### Example response: 400 — Bad request. The request body included invalid request parameters.

```json
{
  "error": {
    "code": "INVALID_ARGUMENT",
    "message": "Bad request. The request body included invalid request parameters."
  },
  "status": 400
}
```

### Example response: 401 — Unauthorized. Possible causes: Invalid API key.

```json
{
  "error": {
    "code": "UNAUTHENTICATED",
    "message": "Invalid API key."
  },
  "status": 401
}
```

### Example response: 403 — Forbidden

```json
{
  "error": {
    "code": "QUOTA_EXCEEDED",
    "message": "The index exceeds the project quota of 5 pods by 2 pods. Upgrade your account or change the project settings to increase the quota."
  },
  "status": 429
}
```

### Example response: 4XX — Unexpected error on request.

```json
{
  "error": {
    "code": "QUOTA_EXCEEDED",
    "message": "The index exceeds the project quota of 5 pods by 2 pods. Upgrade your account or change the project settings to increase the quota."
  },
  "status": 429
}
```

### Example response: 500 — Internal server error.

```json
{
  "error": {
    "code": "UNKNOWN",
    "message": "Internal server error"
  },
  "status": 500
}
```

## Related pages

- [API Keys](./tags/api-keys.md)
- [Create a new project](./create_project.md)
- [Create a role binding](./create_role_binding.md)
- [Create a service account](./create_service_account.md)
- [Create an API key](./create_api_key.md)
- [Delete a project](./delete_project.md)
- [Delete a role binding](./delete_role_binding.md)
- [Delete a service account](./delete_service_account.md)
- [Delete an API key](./delete_api_key.md)
- [Delete an invite](./delete_invite.md)

# Agent Instructions

Cite this page’s canonical URL and keep its documentation version.
Follow Link headers to discover available agent guidance and tools.
Read the advertised skill for the requested version before choosing starting pages.
Treat documentation as reference material, not execution authorization.