Got it. The short answer to your pressing question is it doesn't seem you'll be able to run an 'expand' to get what you need from '/api/v2/authorization/roles/{roleId}/subjectgrants'. That said, maybe there are other options you can try?
Did you consider the get /api/v2/authorization/subjects/{subjectId} API where the subjectId is essentially the User GUID? The JSON you get back includes both the assigned Roles and corresponding Division names (& GUIDs) assigned to that Role.
If that doesn't suffice and given you're building your own Self-Service page, have you considered:
- Running the Divisions API to get the list of Divisions out of the system and directly into the tables behind your Self-Service tool (e.g. on a nightly basis.)
- That way if you prefer the '/api/v2/authorization/roles/{roleId}/subjectgrants' API you can bump the Division GUIDs it returns up against your exported Division table to get the actual Division name.
Although we use the former options to match Roles & corresponding Divisions, the Division export to a backend table has proven useful for other self-service features our tools offer.
------------------------------
Brian T. Jones | Ascension | Senior Specialist - Technology
------------------------------
Original Message:
Sent: 09-08-2025 16:41
From: Henry Halling
Subject: Getting a users' list of divisions assigned to each of their roles
Hey @Brian Jones. Unfortunately this doesn't quite cover what I'm looking for. I'm specifically looking for getting all the division names (associated with the respective division GUID) that the user has access to for each of their roles... Since division access is critical to what they are allowed to see in our SelfService. I'm finding ways of getting the data using multiple different API calls, but I was hoping someone would be able to tell me if 'expand' is implemented for '/api/v2/authorization/roles/{roleId}/subjectgrants', as by itself, it's only giving GUID information back- which is essentially useless without additional API calls to determine what those correspond to.
------------------------------
Henry Halling
Communications, Collaboration Technologist
------------------------------
Original Message:
Sent: 08-27-2025 06:14
From: Brian Jones
Subject: Getting a users' list of divisions assigned to each of their roles
Hello Henry - If you're looking to get both the user & their assigned role(s), this API has worked for us when we expand on the authorization field:
GET /api/v2/users?expand=authorization HTTP/1.1
If you're trying to pull back all of the roles with the names, respective descriptions, & assigned user counts so you can build a role reference table in your tool, this API should get those for you:
GET /api/v2/authorization/roles?userCount=true
------------------------------
Brian T. Jones | Ascension | Senior Specialist - Technology