[Roles] Use Query Roles API for Role Management grid screen

NOTICE.txt

@@ -1,5 +1,5 @@
 Kibana source code with Kibana X-Pack source code
-Copyright 2012-2024 Elasticsearch B.V.
+Copyright 2012-2025 Elasticsearch B.V.
 
 ---
 Adapted from remote-web-worker, which was available under a "MIT" license.

oas_docs/bundle.json

@@ -39116,6 +39116,76 @@
         ]
       }
     },
+    "/api/security/role/_query": {
+      "post": {
+        "operationId": "post-security-role-query",
+        "parameters": [
+          {
+            "description": "A required header to protect against CSRF attacks",
+            "in": "header",
+            "name": "kbn-xsrf",
+            "required": true,
+            "schema": {
+              "example": "true",
+              "type": "string"
+            }
+          }
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "additionalProperties": false,
+                "properties": {
+                  "filters": {
+                    "additionalProperties": false,
+                    "properties": {
+                      "showReservedRoles": {
+                        "type": "boolean"
+                      }
+                    },
+                    "type": "object"
+                  },
+                  "from": {
+                    "type": "number"
+                  },
+                  "query": {
+                    "type": "string"
+                  },
+                  "size": {
+                    "type": "number"
+                  },
+                  "sort": {
+                    "additionalProperties": false,
+                    "properties": {
+                      "direction": {
+                        "enum": [
+                          "asc",
+                          "desc"
+                        ],
+                        "type": "string"
+                      },
+                      "field": {
+                        "type": "string"
+                      }
+                    },
+                    "required": [
+                      "field",
+                      "direction"
+                    ],
+                    "type": "object"
+                  }
+                },
+                "type": "object"
+              }
+            }
+          }
+        },
+        "responses": {},
+        "summary": "Query roles",
+        "tags": []
+      }
+    },
     "/api/security/role/{name}": {
       "delete": {
         "operationId": "delete-security-role-name",

oas_docs/bundle.serverless.json

@@ -39116,6 +39116,76 @@
         ]
       }
     },
+    "/api/security/role/_query": {
+      "post": {
+        "operationId": "post-security-role-query",
+        "parameters": [
+          {
+            "description": "A required header to protect against CSRF attacks",
+            "in": "header",
+            "name": "kbn-xsrf",
+            "required": true,
+            "schema": {
+              "example": "true",
+              "type": "string"
+            }
+          }
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "additionalProperties": false,
+                "properties": {
+                  "filters": {
+                    "additionalProperties": false,
+                    "properties": {
+                      "showReservedRoles": {
+                        "type": "boolean"
+                      }
+                    },
+                    "type": "object"
+                  },
+                  "from": {
+                    "type": "number"
+                  },
+                  "query": {
+                    "type": "string"
+                  },
+                  "size": {
+                    "type": "number"
+                  },
+                  "sort": {
+                    "additionalProperties": false,
+                    "properties": {
+                      "direction": {
+                        "enum": [
+                          "asc",
+                          "desc"
+                        ],
+                        "type": "string"
+                      },
+                      "field": {
+                        "type": "string"
+                      }
+                    },
+                    "required": [
+                      "field",
+                      "direction"
+                    ],
+                    "type": "object"
+                  }
+                },
+                "type": "object"
+              }
+            }
+          }
+        },
+        "responses": {},
+        "summary": "Query roles",
+        "tags": []
+      }
+    },
     "/api/security/role/{name}": {
       "delete": {
         "operationId": "delete-security-role-name",

oas_docs/output/kibana.serverless.yaml

@@ -34344,6 +34344,54 @@ paths:
       tags:
         - roles
       x-beta: true
+  /api/security/role/_query:
+    post:
+      operationId: post-security-role-query
+      parameters:
+        - description: A required header to protect against CSRF attacks
+          in: header
+          name: kbn-xsrf
+          required: true
+          schema:
+            example: 'true'
+            type: string
+      requestBody:
+        content:
+          application/json; Elastic-Api-Version=2023-10-31:
+            schema:
+              additionalProperties: false
+              type: object
+              properties:
+                filters:
+                  additionalProperties: false
+                  type: object
+                  properties:
+                    showReservedRoles:
+                      type: boolean
+                from:
+                  type: number
+                query:
+                  type: string
+                size:
+                  type: number
+                sort:
+                  additionalProperties: false
+                  type: object
+                  properties:
+                    direction:
+                      enum:
+                        - asc
+                        - desc
+                      type: string
+                    field:
+                      type: string
+                  required:
+                    - field
+                    - direction
+      responses: {}
+      summary: Query roles
+      tags: []
+      x-beta: true
   /api/security/role/{name}:
     delete:
       operationId: delete-security-role-name

oas_docs/output/kibana.yaml

@@ -36906,6 +36906,53 @@ paths:
       summary: Get all roles
       tags:
         - roles
+  /api/security/role/_query:
+    post:
+      operationId: post-security-role-query
+      parameters:
+        - description: A required header to protect against CSRF attacks
+          in: header
+          name: kbn-xsrf
+          required: true
+          schema:
+            example: 'true'
+            type: string
+      requestBody:
+        content:
+          application/json; Elastic-Api-Version=2023-10-31:
+            schema:
+              additionalProperties: false
+              type: object
+              properties:
+                filters:
+                  additionalProperties: false
+                  type: object
+                  properties:
+                    showReservedRoles:
+                      type: boolean
+                from:
+                  type: number
+                query:
+                  type: string
+                size:
+                  type: number
+                sort:
+                  additionalProperties: false
+                  type: object
+                  properties:
+                    direction:
+                      enum:
+                        - asc
+                        - desc
+                      type: string
+                    field:
+                      type: string
+                  required:
+                    - field
+                    - direction
+      responses: {}
+      summary: Query roles
+      tags: []
   /api/security/role/{name}:
     delete:
       operationId: delete-security-role-name

x-pack/packages/security/plugin_types_common/index.ts

@@ -12,6 +12,8 @@ export type {
   AuthenticationProvider,
 } from './src/authentication';
 export type {
+  QueryRolesRole,
+  QueryRolesResult,
   Role,
   RoleIndexPrivilege,
   RoleKibanaPrivilege,

x-pack/packages/security/plugin_types_common/src/authorization/index.ts

@@ -8,6 +8,8 @@
 export type { FeaturesPrivileges } from './features_privileges';
 export type { RawKibanaFeaturePrivileges, RawKibanaPrivileges } from './raw_kibana_privileges';
 export type {
+  QueryRolesRole,
+  QueryRolesResult,
   Role,
   RoleKibanaPrivilege,
   RoleIndexPrivilege,

x-pack/packages/security/plugin_types_common/src/authorization/role.ts

@@ -5,6 +5,8 @@
  * 2.0.
  */
 
+import { estypes } from '@elastic/elasticsearch';
+
 import type { FeaturesPrivileges } from './features_privileges';
 
 export interface RoleIndexPrivilege {
@@ -53,3 +55,11 @@ export interface Role {
   _transform_error?: string[];
   _unrecognized_applications?: string[];
 }
+
+export type QueryRolesRole = estypes.SecurityQueryRoleQueryRole;
+
+export interface QueryRolesResult {
+  roles: Role[];
+  count: number;
+  total: number;
+}

x-pack/plugins/security/public/management/roles/roles_api_client.mock.ts

@@ -12,5 +12,6 @@ export const rolesAPIClientMock = {
     deleteRole: jest.fn(),
     saveRole: jest.fn(),
     bulkUpdateRoles: jest.fn(),
+    queryRoles: jest.fn(),
   }),
 };

x-pack/plugins/security/public/management/roles/roles_api_client.ts

@@ -5,13 +5,26 @@
  * 2.0.
  */
 
+import type { Criteria } from '@elastic/eui';
+
 import type { HttpStart } from '@kbn/core/public';
+import type { QueryRolesResult } from '@kbn/security-plugin-types-common';
 import type { BulkUpdatePayload, BulkUpdateRoleResponse } from '@kbn/security-plugin-types-public';
 
 import type { Role, RoleIndexPrivilege, RoleRemoteIndexPrivilege } from '../../../common';
 import { API_VERSIONS } from '../../../common/constants';
 import { copyRole } from '../../../common/model';
 
+export interface QueryRoleParams {
+  query: string;
+  from: number;
+  size: number;
+  filters?: {
+    showReservedRoles?: boolean;
+  };
+  sort: Criteria<Role>['sort'];
+}
+
 const version = API_VERSIONS.roles.public.v1;
 
 export class RolesAPIClient {
@@ -24,6 +37,12 @@ export class RolesAPIClient {
     });
   };
 
+  public queryRoles = async (params?: QueryRoleParams) => {
+    return await this.http.post<QueryRolesResult>(`/api/security/role/_query`, {
+      body: JSON.stringify(params || {}),
+    });
+  };
+
   public getRole = async (roleName: string) => {
     return await this.http.get<Role>(`/api/security/role/${encodeURIComponent(roleName)}`, {
       version,