diff --git a/packages/api-v4/src/iam/types.ts b/packages/api-v4/src/iam/types.ts
index 1da75c56215..fa36b3e8bf5 100644
--- a/packages/api-v4/src/iam/types.ts
+++ b/packages/api-v4/src/iam/types.ts
@@ -125,6 +125,7 @@ export type AccountAdmin =
   | 'view_account_login'
   | 'view_account_settings'
   | 'view_child_account'
+  | 'view_default_delegate_access'
   | 'view_enrolled_beta_program'
   | 'view_lock'
   | 'view_network_usage'
diff --git a/packages/manager/.changeset/pr-13409-added-1771405985553.md b/packages/manager/.changeset/pr-13409-added-1771405985553.md
new file mode 100644
index 00000000000..1c4b57f817a
--- /dev/null
+++ b/packages/manager/.changeset/pr-13409-added-1771405985553.md
@@ -0,0 +1,5 @@
+---
+"@linode/manager": Added
+---
+
+IAM Parent/Child: add permissions to UI ([#13409](https://github.com/linode/manager/pull/13409))
diff --git a/packages/manager/src/features/IAM/Delegations/AccountDelegations.test.tsx b/packages/manager/src/features/IAM/Delegations/AccountDelegations.test.tsx
index 6827a0013b3..b98a0b6c970 100644
--- a/packages/manager/src/features/IAM/Delegations/AccountDelegations.test.tsx
+++ b/packages/manager/src/features/IAM/Delegations/AccountDelegations.test.tsx
@@ -13,8 +13,17 @@ const mocks = vi.hoisted(() => ({
   mockUseGetChildAccountsQuery: vi.fn(),
   useParams: vi.fn().mockReturnValue({}),
   useSearch: vi.fn().mockReturnValue({}),
+  usePermissions: vi.fn().mockReturnValue({}),
 }));
 
+vi.mock('src/features/IAM/hooks/usePermissions', async () => {
+  const actual = await vi.importActual('src/features/IAM/hooks/usePermissions');
+  return {
+    ...actual,
+    usePermissions: mocks.usePermissions,
+  };
+});
+
 vi.mock('@tanstack/react-router', async () => {
   const actual = await vi.importActual('@tanstack/react-router');
   return {
@@ -53,6 +62,10 @@ describe('AccountDelegations', () => {
       data: { data: mockDelegations, results: mockDelegations.length },
       isLoading: false,
     });
+    mocks.usePermissions.mockReturnValue({
+      data: { list_all_child_accounts: true },
+      isLoading: false,
+    });
   });
 
   it('should render the delegations table with data', async () => {
@@ -93,4 +106,23 @@ describe('AccountDelegations', () => {
       expect(emptyElement).toBeInTheDocument();
     });
   });
+
+  it('should not render if user does not have permissions', () => {
+    mocks.usePermissions.mockReturnValue({
+      data: {
+        list_all_child_accounts: false,
+      },
+      isLoading: false,
+    });
+
+    renderWithTheme(<AccountDelegations />, {
+      flags: { iamDelegation: { enabled: true }, iam: { enabled: true } },
+      initialRoute: '/iam',
+    });
+    expect(
+      screen.queryByText(
+        'You do not have permission to view account delegations.'
+      )
+    ).toBeVisible();
+  });
 });
diff --git a/packages/manager/src/features/IAM/Delegations/AccountDelegations.tsx b/packages/manager/src/features/IAM/Delegations/AccountDelegations.tsx
index 2393e8649f3..ca54e98572f 100644
--- a/packages/manager/src/features/IAM/Delegations/AccountDelegations.tsx
+++ b/packages/manager/src/features/IAM/Delegations/AccountDelegations.tsx
@@ -1,5 +1,5 @@
 import { useGetChildAccountsQuery } from '@linode/queries';
-import { CircleProgress, Paper, Stack } from '@linode/ui';
+import { CircleProgress, Notice, Paper, Stack } from '@linode/ui';
 import { useMediaQuery, useTheme } from '@mui/material';
 import { useNavigate, useSearch } from '@tanstack/react-router';
 import React from 'react';
@@ -10,6 +10,7 @@ import { useOrderV2 } from 'src/hooks/useOrderV2';
 import { usePaginationV2 } from 'src/hooks/usePaginationV2';
 
 import { useIsIAMDelegationEnabled } from '../hooks/useIsIAMEnabled';
+import { usePermissions } from '../hooks/usePermissions';
 import { AccountDelegationsTable } from './AccountDelegationsTable';
 
 const DELEGATIONS_ROUTE = '/iam/delegations';
@@ -17,6 +18,10 @@ const DELEGATIONS_ROUTE = '/iam/delegations';
 export const AccountDelegations = () => {
   const navigate = useNavigate();
   const { isIAMDelegationEnabled } = useIsIAMDelegationEnabled();
+  const { data: permissions, isLoading: isPermissionsLoading } = usePermissions(
+    'account',
+    ['list_all_child_accounts']
+  );
 
   const { company } = useSearch({
     from: '/iam',
@@ -78,12 +83,22 @@ export const AccountDelegations = () => {
     });
   };
 
-  if (isLoading) {
+  if (isLoading || isPermissionsLoading) {
     return <CircleProgress />;
   }
+
+  if (!permissions?.list_all_child_accounts) {
+    return (
+      <Notice variant="error">
+        You do not have permission to view account delegations.
+      </Notice>
+    );
+  }
+
   if (!isIAMDelegationEnabled) {
     return null;
   }
+
   return (
     <Paper sx={(theme) => ({ marginTop: theme.tokens.spacing.S16 })}>
       <Stack
diff --git a/packages/manager/src/features/IAM/Roles/Defaults/DefaultEntityAccess.test.tsx b/packages/manager/src/features/IAM/Roles/Defaults/DefaultEntityAccess.test.tsx
index 1efc96ba25c..6c9fdb5f8d6 100644
--- a/packages/manager/src/features/IAM/Roles/Defaults/DefaultEntityAccess.test.tsx
+++ b/packages/manager/src/features/IAM/Roles/Defaults/DefaultEntityAccess.test.tsx
@@ -17,6 +17,7 @@ const queryMocks = vi.hoisted(() => ({
   useIsDefaultDelegationRolesForChildAccount: vi
     .fn()
     .mockReturnValue({ isDefaultDelegationRolesForChildAccount: true }),
+  usePermissions: vi.fn().mockReturnValue({}),
 }));
 
 vi.mock('src/features/IAM/hooks/useDelegationRole', () => ({
@@ -41,6 +42,14 @@ vi.mock('src/queries/entities/entities', async () => {
   };
 });
 
+vi.mock('src/features/IAM/hooks/usePermissions', async () => {
+  const actual = await vi.importActual('src/features/IAM/hooks/usePermissions');
+  return {
+    ...actual,
+    usePermissions: queryMocks.usePermissions,
+  };
+});
+
 vi.mock('@tanstack/react-router', async () => {
   const actual = await vi.importActual('@tanstack/react-router');
   return {
@@ -51,6 +60,14 @@ vi.mock('@tanstack/react-router', async () => {
 });
 
 describe('DefaultEntityAccess', () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+
+    queryMocks.usePermissions.mockReturnValue({
+      data: { view_default_delegate_access: true },
+      isLoading: false,
+    });
+  });
   it('should render', async () => {
     queryMocks.useGetDefaultDelegationAccessQuery.mockReturnValue({
       data: {
@@ -92,4 +109,21 @@ describe('DefaultEntityAccess', () => {
     renderWithTheme(<DefaultEntityAccess />);
     expect(screen.getByText(ERROR_STATE_TEXT)).toBeVisible();
   });
+
+  it('should not render if user does not have permissions', () => {
+    queryMocks.usePermissions.mockReturnValue({
+      data: {
+        view_default_delegate_access: false,
+      },
+      isLoading: false,
+    });
+
+    renderWithTheme(<DefaultEntityAccess />);
+
+    expect(
+      screen.queryByText(
+        'You do not have permission to view default entity access for delegate users.'
+      )
+    ).toBeVisible();
+  });
 });
diff --git a/packages/manager/src/features/IAM/Roles/Defaults/DefaultEntityAccess.tsx b/packages/manager/src/features/IAM/Roles/Defaults/DefaultEntityAccess.tsx
index 633c1b3d914..61552a9bf45 100644
--- a/packages/manager/src/features/IAM/Roles/Defaults/DefaultEntityAccess.tsx
+++ b/packages/manager/src/features/IAM/Roles/Defaults/DefaultEntityAccess.tsx
@@ -2,12 +2,14 @@ import { useGetDefaultDelegationAccessQuery } from '@linode/queries';
 import {
   CircleProgress,
   ErrorState,
+  Notice,
   Paper,
   Stack,
   Typography,
 } from '@linode/ui';
 import * as React from 'react';
 
+import { usePermissions } from '../../hooks/usePermissions';
 import { AssignedEntitiesTable } from '../../Shared/AssignedEntitiesTable/AssignedEntitiesTable';
 import {
   ERROR_STATE_TEXT,
@@ -16,20 +18,35 @@ import {
 import { NoAssignedRoles } from '../../Shared/NoAssignedRoles/NoAssignedRoles';
 
 export const DefaultEntityAccess = () => {
+  const { data: permissions, isLoading: isPermissionsLoading } = usePermissions(
+    'account',
+    ['view_default_delegate_access']
+  );
   const {
     data: defaultAccess,
     isLoading: defaultAccessLoading,
     error,
-  } = useGetDefaultDelegationAccessQuery({ enabled: true });
+  } = useGetDefaultDelegationAccessQuery({
+    enabled: permissions?.view_default_delegate_access,
+  });
 
   const hasAssignedEntities = defaultAccess
     ? defaultAccess.entity_access.length > 0
     : false;
 
-  if (defaultAccessLoading) {
+  if (defaultAccessLoading || isPermissionsLoading) {
     return <CircleProgress />;
   }
 
+  if (!permissions?.view_default_delegate_access) {
+    return (
+      <Notice variant="error">
+        You do not have permission to view default entity access for delegate
+        users.
+      </Notice>
+    );
+  }
+
   if (error) {
     return <ErrorState errorText={ERROR_STATE_TEXT} />;
   }
diff --git a/packages/manager/src/features/IAM/Roles/Defaults/DefaultRoles.test.tsx b/packages/manager/src/features/IAM/Roles/Defaults/DefaultRoles.test.tsx
index b27283a6393..9c560567186 100644
--- a/packages/manager/src/features/IAM/Roles/Defaults/DefaultRoles.test.tsx
+++ b/packages/manager/src/features/IAM/Roles/Defaults/DefaultRoles.test.tsx
@@ -17,6 +17,7 @@ const queryMocks = vi.hoisted(() => ({
   useIsDefaultDelegationRolesForChildAccount: vi
     .fn()
     .mockReturnValue({ isDefaultDelegationRolesForChildAccount: true }),
+  usePermissions: vi.fn().mockReturnValue({}),
 }));
 
 vi.mock('@tanstack/react-router', async () => {
@@ -35,11 +36,28 @@ vi.mock('@linode/queries', async () => {
       queryMocks.useGetDefaultDelegationAccessQuery,
   };
 });
+
+vi.mock('src/features/IAM/hooks/usePermissions', async () => {
+  const actual = await vi.importActual('src/features/IAM/hooks/usePermissions');
+  return {
+    ...actual,
+    usePermissions: queryMocks.usePermissions,
+  };
+});
+
 vi.mock('src/features/IAM/hooks/useDelegationRole', () => ({
   useIsDefaultDelegationRolesForChildAccount:
     queryMocks.useIsDefaultDelegationRolesForChildAccount,
 }));
 describe('DefaultRoles', () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+
+    queryMocks.usePermissions.mockReturnValue({
+      data: { view_default_delegate_access: true },
+      isLoading: false,
+    });
+  });
   it('should render', async () => {
     queryMocks.useGetDefaultDelegationAccessQuery.mockReturnValue({
       data: {
@@ -84,4 +102,21 @@ describe('DefaultRoles', () => {
     renderWithTheme(<DefaultRoles />);
     expect(screen.getByText(ERROR_STATE_TEXT)).toBeVisible();
   });
+
+  it('should not render if user does not have permissions', () => {
+    queryMocks.usePermissions.mockReturnValue({
+      data: {
+        view_default_delegate_access: false,
+      },
+      isLoading: false,
+    });
+
+    renderWithTheme(<DefaultRoles />);
+
+    expect(
+      screen.queryByText(
+        'You do not have permission to view default roles for delegate users.'
+      )
+    ).toBeVisible();
+  });
 });
diff --git a/packages/manager/src/features/IAM/Roles/Defaults/DefaultRoles.tsx b/packages/manager/src/features/IAM/Roles/Defaults/DefaultRoles.tsx
index 7c979c02d71..11e60aba199 100644
--- a/packages/manager/src/features/IAM/Roles/Defaults/DefaultRoles.tsx
+++ b/packages/manager/src/features/IAM/Roles/Defaults/DefaultRoles.tsx
@@ -1,7 +1,14 @@
 import { useGetDefaultDelegationAccessQuery } from '@linode/queries';
-import { CircleProgress, ErrorState, Paper, Typography } from '@linode/ui';
+import {
+  CircleProgress,
+  ErrorState,
+  Notice,
+  Paper,
+  Typography,
+} from '@linode/ui';
 import * as React from 'react';
 
+import { usePermissions } from '../../hooks/usePermissions';
 import { AssignedRolesTable } from '../../Shared/AssignedRolesTable/AssignedRolesTable';
 import {
   ERROR_STATE_TEXT,
@@ -10,20 +17,35 @@ import {
 import { NoAssignedRoles } from '../../Shared/NoAssignedRoles/NoAssignedRoles';
 
 export const DefaultRoles = () => {
+  const { data: permissions, isLoading: isPermissionsLoading } = usePermissions(
+    'account',
+    ['view_default_delegate_access']
+  );
   const {
     data: defaultRolesData,
     isLoading: defaultRolesLoading,
     error,
-  } = useGetDefaultDelegationAccessQuery({ enabled: true });
+  } = useGetDefaultDelegationAccessQuery({
+    enabled: permissions?.view_default_delegate_access,
+  });
+
   const hasAssignedRoles = defaultRolesData
     ? defaultRolesData.account_access.length > 0 ||
       defaultRolesData.entity_access.length > 0
     : false;
 
-  if (defaultRolesLoading) {
+  if (defaultRolesLoading || isPermissionsLoading) {
     return <CircleProgress />;
   }
 
+  if (!permissions?.view_default_delegate_access) {
+    return (
+      <Notice variant="error">
+        You do not have permission to view default roles for delegate users.
+      </Notice>
+    );
+  }
+
   if (error) {
     return <ErrorState errorText={ERROR_STATE_TEXT} />;
   }
diff --git a/packages/manager/src/features/IAM/Roles/Roles.tsx b/packages/manager/src/features/IAM/Roles/Roles.tsx
index 45aa59d204e..d14073ebb3a 100644
--- a/packages/manager/src/features/IAM/Roles/Roles.tsx
+++ b/packages/manager/src/features/IAM/Roles/Roles.tsx
@@ -19,7 +19,8 @@ export const RolesLanding = () => {
     permissions?.list_role_permissions
   );
   const { isIAMDelegationEnabled } = useIsIAMDelegationEnabled();
-  const { isChildUserType, isProfileLoading } = useDelegationRole();
+  const { isChildUserType, isProfileLoading, isDelegateUserType } =
+    useDelegationRole();
 
   const { roles } = React.useMemo(() => {
     if (!accountRoles) {
@@ -41,7 +42,9 @@ export const RolesLanding = () => {
 
   return (
     <>
-      {isChildUserType && isIAMDelegationEnabled && <DefaultRolesPanel />}
+      {(isChildUserType || isDelegateUserType) && isIAMDelegationEnabled && (
+        <DefaultRolesPanel />
+      )}
       <Paper sx={(theme) => ({ marginTop: theme.tokens.spacing.S16 })}>
         <Typography variant="h2">Roles</Typography>
         <RolesTable roles={roles} />
diff --git a/packages/manager/src/features/IAM/Users/UserDelegations/UserDelegations.test.tsx b/packages/manager/src/features/IAM/Users/UserDelegations/UserDelegations.test.tsx
index 8b729db6fcd..9a34910cc71 100644
--- a/packages/manager/src/features/IAM/Users/UserDelegations/UserDelegations.test.tsx
+++ b/packages/manager/src/features/IAM/Users/UserDelegations/UserDelegations.test.tsx
@@ -14,6 +14,7 @@ const queryMocks = vi.hoisted(() => ({
   useNavigate: vi.fn().mockReturnValue(vi.fn()),
   useGetDelegatedChildAccountsForUserQuery: vi.fn().mockReturnValue({}),
   useAccountRoles: vi.fn().mockReturnValue({}),
+  usePermissions: vi.fn().mockReturnValue({}),
 }));
 
 vi.mock('@linode/queries', async () => {
@@ -26,6 +27,14 @@ vi.mock('@linode/queries', async () => {
   };
 });
 
+vi.mock('src/features/IAM/hooks/usePermissions', async () => {
+  const actual = await vi.importActual('src/features/IAM/hooks/usePermissions');
+  return {
+    ...actual,
+    usePermissions: queryMocks.usePermissions,
+  };
+});
+
 vi.mock('@tanstack/react-router', async () => {
   const actual = await vi.importActual('@tanstack/react-router');
   return {
@@ -48,6 +57,10 @@ describe('UserDelegations', () => {
       data: accountRolesFactory.build(),
       isLoading: false,
     });
+    queryMocks.usePermissions.mockReturnValue({
+      data: { list_user_delegate_accounts: true },
+      isLoading: false,
+    });
   });
 
   it('should display no roles text if no roles are assigned to user', async () => {
@@ -86,4 +99,26 @@ describe('UserDelegations', () => {
 
     expect(screen.getByText('Account Delegations')).toBeVisible();
   });
+
+  it('should not render if user does not have permissions', () => {
+    queryMocks.usePermissions.mockReturnValue({
+      data: {
+        list_user_delegate_accounts: false,
+      },
+    });
+
+    renderWithTheme(<UserDelegations />, {
+      flags: {
+        iam: { enabled: true },
+        iamDelegation: {
+          enabled: true,
+        },
+      },
+    });
+    expect(
+      screen.queryByText(
+        `You do not have permission to view this user's account delegations.`
+      )
+    ).toBeVisible();
+  });
 });
diff --git a/packages/manager/src/features/IAM/Users/UserDelegations/UserDelegations.tsx b/packages/manager/src/features/IAM/Users/UserDelegations/UserDelegations.tsx
index bca7ac4d982..cc0cf34ba74 100644
--- a/packages/manager/src/features/IAM/Users/UserDelegations/UserDelegations.tsx
+++ b/packages/manager/src/features/IAM/Users/UserDelegations/UserDelegations.tsx
@@ -1,10 +1,11 @@
 import { useGetDelegatedChildAccountsForUserQuery } from '@linode/queries';
-import { CircleProgress, ErrorState } from '@linode/ui';
+import { CircleProgress, ErrorState, Notice } from '@linode/ui';
 import { useParams } from '@tanstack/react-router';
 import React from 'react';
 
 import { DocumentTitleSegment } from 'src/components/DocumentTitle';
 
+import { usePermissions } from '../../hooks/usePermissions';
 import {
   ERROR_STATE_TEXT,
   NO_ACCOUNT_DELEGATIONS_TEXT,
@@ -15,22 +16,36 @@ import { UserDelegationsTable } from './UserDelegationsTable';
 export const UserDelegations = () => {
   const { username } = useParams({ from: '/iam/users/$username' });
 
+  const { data: permissions, isLoading: isPermissionsLoading } = usePermissions(
+    'account',
+    ['list_user_delegate_accounts']
+  );
+
   const {
     data: allDelegatedChildAccounts,
     isLoading,
     error,
   } = useGetDelegatedChildAccountsForUserQuery({
     username,
+    enabled: permissions?.list_user_delegate_accounts,
   });
 
   const hasDelegatedChildAccounts = allDelegatedChildAccounts
     ? allDelegatedChildAccounts.data.length > 0
     : false;
 
-  if (isLoading) {
+  if (isLoading || isPermissionsLoading) {
     return <CircleProgress />;
   }
 
+  if (!permissions?.list_user_delegate_accounts) {
+    return (
+      <Notice variant="error">
+        You do not have permission to view this user&apos;s account delegations.
+      </Notice>
+    );
+  }
+
   if (error) {
     return <ErrorState errorText={ERROR_STATE_TEXT} />;
   }
diff --git a/packages/manager/src/features/IAM/Users/UsersTable/Users.tsx b/packages/manager/src/features/IAM/Users/UsersTable/Users.tsx
index 0b928d251a1..6e4f452a119 100644
--- a/packages/manager/src/features/IAM/Users/UsersTable/Users.tsx
+++ b/packages/manager/src/features/IAM/Users/UsersTable/Users.tsx
@@ -202,6 +202,7 @@ export const UsersLanding = () => {
             />
             {isChildOrDelegateWithDelegationEnabled && (
               <Select
+                disabled={!permissions?.view_user}
                 hideLabel
                 label="Select user type"
                 onChange={(_, selected) => {
diff --git a/packages/manager/src/features/IAM/hooks/adapters/accountGrantsToPermissions.ts b/packages/manager/src/features/IAM/hooks/adapters/accountGrantsToPermissions.ts
index 79ef3967717..97ad56524b2 100644
--- a/packages/manager/src/features/IAM/hooks/adapters/accountGrantsToPermissions.ts
+++ b/packages/manager/src/features/IAM/hooks/adapters/accountGrantsToPermissions.ts
@@ -89,5 +89,6 @@ export const accountGrantsToPermissions = (
     update_default_delegate_access: true,
     view_child_account: true,
     create_child_account_token: true,
+    view_default_delegate_access: true,
   } as Record<AccountAdmin, boolean>;
 };
diff --git a/packages/manager/src/features/IAM/hooks/useDelegationRole.ts b/packages/manager/src/features/IAM/hooks/useDelegationRole.ts
index 4a609001f42..89c77280bee 100644
--- a/packages/manager/src/features/IAM/hooks/useDelegationRole.ts
+++ b/packages/manager/src/features/IAM/hooks/useDelegationRole.ts
@@ -39,7 +39,7 @@ export const useDelegationRole = (): DelegationRole => {
 /**
  * isDefaultDelegationRolesForChildAccount is true if:
  * - IAM Delegation is enabled for the account
- * - The current user is a child account
+ * - The current user is a child or delegate account
  * - The current route includes '/iam/roles/defaults'
  *
  * This flag is used to determine if the component should show or fetch/update delegated default roles
@@ -47,13 +47,13 @@ export const useDelegationRole = (): DelegationRole => {
  */
 export const useIsDefaultDelegationRolesForChildAccount = () => {
   const { isIAMDelegationEnabled } = useIsIAMDelegationEnabled();
-  const { isChildUserType } = useDelegationRole();
+  const { isChildUserType, isDelegateUserType } = useDelegationRole();
   const location = useLocation();
 
   return {
     isDefaultDelegationRolesForChildAccount:
       (isIAMDelegationEnabled &&
-        isChildUserType &&
+        (isChildUserType || isDelegateUserType) &&
         location.pathname.includes('/iam/roles/defaults')) ??
       false,
   };
diff --git a/packages/manager/src/features/TopMenu/UserMenu/UserMenu.tsx b/packages/manager/src/features/TopMenu/UserMenu/UserMenu.tsx
index e33fc1ff850..dffdbdbd2bd 100644
--- a/packages/manager/src/features/TopMenu/UserMenu/UserMenu.tsx
+++ b/packages/manager/src/features/TopMenu/UserMenu/UserMenu.tsx
@@ -57,8 +57,7 @@ export const UserMenu = React.memo(() => {
 
   const { data: parentProfile } = useProfile({ headers: proxyHeaders });
 
-  const userName =
-    (isProxyOrDelegateUserType ? parentProfile : profile)?.username ?? '';
+  const userName = (isProxyUserType ? parentProfile : profile)?.username ?? '';
 
   const matchesSmDown = useMediaQuery((theme: Theme) =>
     theme.breakpoints.down('sm')
diff --git a/packages/manager/src/routes/IAM/index.ts b/packages/manager/src/routes/IAM/index.ts
index 30e6802d089..9df0966e2e4 100644
--- a/packages/manager/src/routes/IAM/index.ts
+++ b/packages/manager/src/routes/IAM/index.ts
@@ -106,7 +106,9 @@ const iamDefaultsTabsRoute = createRoute({
     const profile = context?.profile;
     const userType = profile?.user_type;
 
-    if (userType !== 'child' || !isDelegationEnabled) {
+    const isChildOrDelegate = userType === 'child' || userType === 'delegate';
+
+    if (!isChildOrDelegate || !isDelegationEnabled) {
       throw redirect({
         to: '/iam/roles',
         replace: true,