---
descriptions:
  role:
    self: 'The [Environment Role](/reference/roles/role) object.'
    object: Distinguishes the Role object.
    id: Unique identifier of the Role.
    name: A descriptive name for the Role. This field does not need to be unique.
    slug: >-
      A unique key to reference the role. Must be lowercase and contain only
      letters, numbers, hyphens, and underscores.
    description: A description for the Role.
    permissions: A list of permission slugs assigned to the role.
    type: 'The type of Role. For environment roles, this is always `EnvironmentRole`.'
    resource_type_slug: The slug of the resource type the role is scoped to.
    created_at: The timestamp when the Role was created.
    updated_at: The timestamp when the Role was last updated.
reference:
  curl:
    - url: /reference/roles/role
      key: role
      id: role
      title: Role
      properties:
        - key: object
          type: '"role"'
          description: (role.object)
        - key: id
          type: string
          description: (role.id)
        - key: name
          type: string
          description: (role.name)
        - key: slug
          type: string
          description: (role.slug)
        - key: description
          type: string | null
          description: (role.description)
        - key: permissions
          type: 'string[]'
          description: (role.permissions)
        - key: type
          type: '"EnvironmentRole"'
          description: (role.type)
        - key: resource_type_slug
          type: string
          description: (role.resource_type_slug)
        - key: created_at
          type: string
          description: (role.created_at)
        - key: updated_at
          type: string
          description: (role.updated_at)
  js:
    - url: /reference/roles/role
      key: Role
      id: role
      title: Role
      properties:
        - key: object
          type: '"role"'
          description: (role.object)
        - key: id
          type: string
          description: (role.id)
        - key: name
          type: string
          description: (role.name)
        - key: slug
          type: string
          description: (role.slug)
        - key: description
          type: string | null
          description: (role.description)
        - key: permissions
          type: 'string[]'
          description: (role.permissions)
        - key: type
          type: '"EnvironmentRole"'
          description: (role.type)
        - key: resourceTypeSlug
          type: string
          description: (role.resource_type_slug)
        - key: createdAt
          type: string
          description: (role.created_at)
        - key: updatedAt
          type: string
          description: (role.updated_at)
  python:
    - url: /reference/roles/role
      key: Role
      id: role
      title: Role
      properties:
        - key: object
          type: str
          description: (role.object)
        - key: id
          type: str
          description: (role.id)
        - key: name
          type: str
          description: (role.name)
        - key: slug
          type: str
          description: (role.slug)
        - key: description
          type: str | None
          description: (role.description)
        - key: permissions
          type: 'list[str]'
          description: (role.permissions)
        - key: type
          type: str
          description: (role.type)
        - key: resource_type_slug
          type: str
          description: (role.resource_type_slug)
        - key: created_at
          type: str
          description: (role.created_at)
        - key: updated_at
          type: str
          description: (role.updated_at)
originalPath: .tmp-workos-clone/packages/docs/content/reference/roles/role/index.mdx
---

# Environment Role

An environment role is an access control resource defined at the environment level. Environment roles can be assigned to [organization memberships](/reference/authkit/organization-membership), [directory users](/directory-sync/identity-provider-role-assignment), and [SSO profiles](/sso/identity-provider-role-assignment).

Environment roles provide a consistent set of roles across all organizations in your environment. Each role has a unique slug identifier. Roles can have permissions assigned to them.

<CodeBlock title="Environment Role" file="role" referenceId="role" />