Skip to navigation
Workspace APIAuthorization

List the current user’s effective permissions on a resource

View as Markdown

Returns the authenticated caller’s effective (role-derived and inherited) permission set on a single resource. Authorization: any authenticated organization member — scoped to the caller’s membership. Query: resourceType and resourceExternalId (both required). Returns { permissions } (the permission strings the caller effectively holds on that resource). With no membership claim, returns { permissions: [] }.

Authentication

AuthorizationBearer

Bearer authentication of the form Bearer <token>, where token is your auth token.

Query parameters

resourceTypestringRequired>=1 character
resourceExternalIdstringRequired>=1 character

Response

The caller’s effective permissions on the resource.

permissionslist of strings

Permission strings the caller effectively holds, role-derived and inherited.