List role bindings

List role bindings in the caller’s organization, optionally filtered by principal, resource, and role.

GET /admin/role-bindings

curl

PINECONE_ACCESS_TOKEN="YOUR_ACCESS_TOKEN"

curl -X GET "https://api.pinecone.io/admin/role-bindings?principal_type=user&principal_id=e2e92523-85dc-4142-b8c2-e681be8b78df" \
	-H "Authorization: Bearer $PINECONE_ACCESS_TOKEN" \
	-H "accept: application/json" \
	-H "X-Pinecone-Api-Version: 2026-04"

curl

{
  "data": [
    {
      "id": "5a86ed21-daf1-448d-a9ca-f92a0fd839d3",
      "principal_type": "user",
      "principal_id": "e2e92523-85dc-4142-b8c2-e681be8b78df",
      "resource_type": "organization",
      "resource_id": "-ExampleOrgId0000000",
      "role": "OrgMember",
      "created_at": "2026-04-10T15:23:00Z"
    }
  ],
  "pagination": {
    "next": "eyJsYXN0X2lkIjoiNWE4NmVkMjEifQ=="
  }
}

curl

PINECONE_ACCESS_TOKEN="YOUR_ACCESS_TOKEN"

curl -X GET "https://api.pinecone.io/admin/role-bindings?principal_type=user&principal_id=e2e92523-85dc-4142-b8c2-e681be8b78df" \
	-H "Authorization: Bearer $PINECONE_ACCESS_TOKEN" \
	-H "accept: application/json" \
	-H "X-Pinecone-Api-Version: 2026-04"

curl

{
  "data": [
    {
      "id": "5a86ed21-daf1-448d-a9ca-f92a0fd839d3",
      "principal_type": "user",
      "principal_id": "e2e92523-85dc-4142-b8c2-e681be8b78df",
      "resource_type": "organization",
      "resource_id": "-ExampleOrgId0000000",
      "role": "OrgMember",
      "created_at": "2026-04-10T15:23:00Z"
    }
  ],
  "pagination": {
    "next": "eyJsYXN0X2lkIjoiNWE4NmVkMjEifQ=="
  }
}

Authorizations

Authorization · string · header · required

An access token must be provided in the Authorization header using the Bearer scheme.

Headers

X-Pinecone-Api-Version · string · default: 2026-04 · required

Required date-based version header

Query Parameters

principal_type · string

Filter by principal type. Required when principal_id is set. The kind of principal that receives permissions from a role binding. Possible values: user, service_account, api_key, invite.

Example:

"service_account"

principal_id · string

Filter by principal ID. Requires principal_type. The ID is a UUID for all principal types (user, service account, or invite).

resource_type · string

Filter by resource type. Required when resource_id is set. The kind of resource scope a role binding applies to. Possible values: organization, project.

Example:

"project"

resource_id · string

Filter by resource ID. Requires resource_type.

role · string

Filter by role. A role assigned to a principal at a resource scope.

Example:

"ProjectOwner"

limit · integer · default: 100

The number of results to return per page. When omitted, the server defaults to 100. Out-of-range values return 400 OUT_OF_RANGE.

Required range: 1 <= x <= 100

paginationToken · string

Cursor from pagination.next of a prior response. Must be reused with the same query context (path parameters, filters, and limit).

Response

200

application/json

A paginated list of role bindings. When multiple filters are supplied, they are combined with AND.

A paginated list of role bindings.

data · object[] · required

The page of role bindings.

Show child attributes

pagination · object | null

Cursor envelope for the next page. null (or absent) on the final page of results.

Show child attributes

Example:

{
  "next": "eyJsYXN0X2lkIjogImluZGV4LTQifQ=="
}