> ## Documentation Index > Fetch the complete documentation index at: https://conductorone-docs-mcp-bridge-private-server.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. # List Suggestions > List role suggestions generated by analysis runs, optionally filtered by state. ## OpenAPI ````yaml https://spec.speakeasy.com/conductor-one/conductorone/my-source-with-code-samples get /api/v1/role-mining/suggestions openapi: 3.1.0 info: description: The C1 API is a HTTP API for managing C1 resources. title: C1 API version: 0.1.0-alpha servers: - description: The C1 API server for the current tenant. url: https://{tenantDomain}.conductor.one variables: tenantDomain: default: example description: The domain of the tenant to use for this request. security: - bearerAuth: [] oauth: [] paths: /api/v1/role-mining/suggestions: get: tags: - Role Mining summary: List Suggestions description: >- List role suggestions generated by analysis runs, optionally filtered by state. operationId: >- c1.api.role_mining_management.v1.RoleMiningManagementService.ListSuggestions responses: '200': content: application/json: schema: $ref: >- #/components/schemas/c1.api.role_mining_management.v1.ListSuggestionsResponse description: Successful response x-codeSamples: - lang: go label: ListSuggestions source: "package main\n\nimport(\n\t\"context\"\n\t\"github.com/conductorone/conductorone-sdk-go/pkg/models/shared\"\n\tconductoronesdkgo \"github.com/conductorone/conductorone-sdk-go\"\n\t\"log\"\n)\n\nfunc main() {\n ctx := context.Background()\n\n s := conductoronesdkgo.New(\n conductoronesdkgo.WithSecurity(shared.Security{\n BearerAuth: \"\",\n Oauth: \"\",\n }),\n )\n\n res, err := s.RoleMiningManagement.ListSuggestions(ctx)\n if err != nil {\n log.Fatal(err)\n }\n if res.ListSuggestionsResponse != nil {\n // handle response\n }\n}" - lang: typescript label: Typescript (SDK) source: >- import { ConductoroneSDKTypescript } from "conductorone-sdk-typescript"; const conductoroneSDKTypescript = new ConductoroneSDKTypescript({ security: { bearerAuth: "", oauth: "", }, }); async function run() { const result = await conductoroneSDKTypescript.roleMiningManagement.listSuggestions(); console.log(result); } run(); components: schemas: c1.api.role_mining_management.v1.ListSuggestionsResponse: description: The ListSuggestionsResponse message. properties: list: description: The list of role mining suggestions. items: $ref: >- #/components/schemas/c1.api.role_mining_management.v1.RoleMiningManagementSuggestion type: - array - 'null' nextPageToken: description: >- Token to retrieve the next page of results, empty if no more results. type: - string - 'null' title: List Suggestions Response type: object x-speakeasy-name-override: ListSuggestionsResponse c1.api.role_mining_management.v1.RoleMiningManagementSuggestion: description: The RoleMiningManagementSuggestion message. properties: avgCoverage: description: >- Average fraction of suggested entitlements held by each user in the cohort. type: - number - 'null' cohortFilters: description: The profile filters that define which users belong to this cohort. items: $ref: '#/components/schemas/c1.mcp.role_mining.v1.ProfileFilter' type: - array - 'null' cohortSize: description: Total number of users in the cohort matching the profile filters. format: int32 type: - integer - 'null' confidence: description: Overall confidence score for this suggestion, from 0.0 to 1.0. type: - number - 'null' createdAt: format: date-time type: - string - 'null' createdCatalogId: description: >- The ID of the access profile created when this suggestion was accepted, empty if not yet accepted. type: - string - 'null' description: description: >- A human-readable description of the proposed role and the cohort it serves. type: - string - 'null' dimensionCount: description: Number of distinct attribute dimensions used to define the cohort. format: int32 type: - integer - 'null' entitlements: description: The entitlements that are commonly held by users in this cohort. items: $ref: '#/components/schemas/c1.mcp.role_mining.v1.CohortEntitlement' type: - array - 'null' existingProfileMatches: description: Existing access profiles that overlap with this suggestion. items: $ref: '#/components/schemas/c1.mcp.role_mining.v1.AccessProfileMatch' type: - array - 'null' id: description: Unique identifier for this suggestion. type: - string - 'null' insights: description: Human-readable insights explaining why this role was suggested. items: type: string type: - array - 'null' lastGeneratedAt: format: date-time type: - string - 'null' runId: description: The ID of the analysis run that produced this suggestion. type: - string - 'null' suggestedName: description: The suggested display name for the proposed role. type: - string - 'null' suggestionState: description: >- Current workflow state of this suggestion (e.g., pending, accepted, dismissed). enum: - SUGGESTION_STATE_UNSPECIFIED - SUGGESTION_STATE_NEW - SUGGESTION_STATE_DISMISSED - SUGGESTION_STATE_ACCEPTED type: - string - 'null' x-speakeasy-unknown-values: allow updatedAt: format: date-time type: - string - 'null' usersWithAll: description: >- Number of users in the cohort that hold all of the suggested entitlements. format: int32 type: - integer - 'null' title: Role Mining Management Suggestion type: object x-speakeasy-name-override: RoleMiningManagementSuggestion c1.mcp.role_mining.v1.ProfileFilter: description: |- ProfileFilter defines a filter on a user profile attribute. Use GetOrgOverview to discover available attribute keys and their values. properties: attribute: description: The attribute field. type: - string - 'null' values: description: The values field. items: type: string type: - array - 'null' title: Profile Filter type: object x-speakeasy-name-override: ProfileFilter c1.mcp.role_mining.v1.CohortEntitlement: description: The CohortEntitlement message. properties: appDisplayName: description: The appDisplayName field. type: - string - 'null' appId: description: The appId field. type: - string - 'null' appResourceDisplayName: description: The appResourceDisplayName field. type: - string - 'null' appResourceTypeDisplayName: description: The appResourceTypeDisplayName field. type: - string - 'null' coverage: description: The coverage field. type: - number - 'null' entitlementDisplayName: description: The entitlementDisplayName field. type: - string - 'null' entitlementId: description: The entitlementId field. type: - string - 'null' grantedCount: description: The grantedCount field. format: int32 type: - integer - 'null' riskLevelValueId: description: The riskLevelValueId field. type: - string - 'null' title: Cohort Entitlement type: object x-speakeasy-name-override: CohortEntitlement c1.mcp.role_mining.v1.AccessProfileMatch: description: The AccessProfileMatch message. properties: catalogDisplayName: description: The catalogDisplayName field. type: - string - 'null' catalogId: description: The catalogId field. type: - string - 'null' matchType: description: The matchType field. enum: - ACCESS_PROFILE_MATCH_TYPE_UNSPECIFIED - ACCESS_PROFILE_MATCH_TYPE_EXACT - ACCESS_PROFILE_MATCH_TYPE_SUPERSET - ACCESS_PROFILE_MATCH_TYPE_PARTIAL type: - string - 'null' x-speakeasy-unknown-values: allow missingEntitlements: description: The missingEntitlements field. items: $ref: '#/components/schemas/c1.mcp.role_mining.v1.CohortEntitlement' type: - array - 'null' overlapRatio: description: The overlapRatio field. type: - number - 'null' title: Access Profile Match type: object x-speakeasy-name-override: AccessProfileMatch securitySchemes: bearerAuth: scheme: bearer type: http oauth: description: >- This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the [c1TokenSource.Token()](https://github.com/ConductorOne/conductorone-sdk-go/blob/3375fe7c0126d17e7ec4e711693dee7b791023aa/token_source.go#L101-L187) function. flows: clientCredentials: scopes: {} tokenUrl: /auth/v1/token type: oauth2 ````