get
https://api.qfp.quantnetwork.net/api/tenants//roles
One page of the roles this tenant may assign, each with the flat set
of permission names it grants. The path tenant must equal the
caller's tenant_id claim; a mismatch is 403. No permission is
required.
custom tells the platform roles (SUPER_ADMIN, ADMIN, USER,
shared by every tenant and not editable) from this tenant's own;
another tenant's custom roles never appear. search matches the name
and description, case-insensitively. Ordering defaults to name,asc.

