---
title: "POST /api/rpc/queryTenant"
method: POST
path: "/api/rpc/queryTenant"
tags: ["me"]
---

# POST /api/rpc/queryTenant

`POST /api/rpc/queryTenant`

## Request

- Base URL: `https://21risk.com`
- URL: `https://21risk.com/api/rpc/queryTenant`
- Auth: OAuth 2 (client credentials, token URL `/api/v1/oauth/token`)

Get the currently authenticated user scoped to a single tenant, including the tenant's boards the user can view and their permissions. Call whoAmI first to list the tenants the user can access and get each slug for the tenantSlug input.

## Request body

- object
  - `tenantSlug` string, required

## Response `200`

Successful response

- object
  - `name` string, nullable, required
  - `email` string, required
  - `effective_picture_id` string, nullable, required
  - `boards` object[], required
    - `_id` string, required
    - `name` string, required
    - `type` 'folder' | 'compliance' | 'compliance-2' | 'findings' | 'insurance' | 'claims' | 'safety-walks' | 'frameworks' | 'hot-work' | 'user-training' | 'document', required
    - `slug` string, required
    - `parent` string, nullable, required
    - `position` integer, required
    - `pinned` boolean, required
    - `permissions` string[], required: What the user may do on this board.
    - `compliance` object, nullable, required
      - `riskTypeId` string, required
  - `tenant` object, required
    - `groupOwner` boolean, nullable, required
    - `groupId` string, required
    - `lastLogin` string, date-time, nullable, required
    - `status` 'activeMember' | 'deleted' | 'neverSeen' | 'passiveMember', required
    - `default` boolean, nullable, required
    - `group` object, required
      - `_id` string, required
      - `name` string, required
      - `slug` string, required
      - `historicSlugs` string[], required
      - `tier` 'enterprise' | 'premium' | 'free', required
      - `logo` string, nullable, required
      - `baseCurrency` 'AED' | 'AFN' | 'ALL' | 'AMD' | 'ANG' | 'AOA' | 'ARS' | 'AUD' | 'AWG' | 'AZN' | 'BAM' | 'BBD' | 'BDT' | 'BGN' | 'BHD' | 'BIF' | 'BND' | 'BOB' | 'BRL' | 'BSD' | 'BWP' | 'BYN' | 'BZD' | 'CAD' | 'CDF' | 'CHF' | 'CLP' | 'CNY' | 'COP' | 'CRC' | 'CVE' | 'CZK' | 'DJF' | 'DKK' | 'DOP' | 'DZD' | 'EGP' | 'ERN' | 'ETB' | 'EUR' | 'FJD' | 'GBP' | 'GEL' | 'GHS' | 'GIP' | 'GMD' | 'GNF' | 'GTQ' | 'GYD' | 'HKD' | 'HNL' | 'HRK' | 'HTG' | 'HUF' | 'IDR' | 'ILS' | 'INR' | 'IQD' | 'IRR' | 'ISK' | 'JMD' | 'JOD' | 'JPY' | 'KES' | 'KGS' | 'KHR' | 'KMF' | 'KRW' | 'KWD' | 'KZT' | 'LAK' | 'LBP' | 'LKR' | 'LRD' | 'LSL' | 'LYD' | 'MAD' | 'MDL' | 'MGA' | 'MKD' | 'MMK' | 'MNT' | 'MOP' | 'MRU' | 'MUR' | 'MVR' | 'MWK' | 'MXN' | 'MYR' | 'MZN' | 'NAD' | 'NGN' | 'NIO' | 'NOK' | 'NPR' | 'NZD' | 'OMR' | 'PAB' | 'PEN' | 'PGK' | 'PHP' | 'PKR' | 'PLN' | 'PYG' | 'QAR' | 'RON' | 'RSD' | 'RUB' | 'RWF' | 'SAR' | 'SBD' | 'SCR' | 'SDG' | 'SEK' | 'SGD' | 'SLL' | 'SOS' | 'SRD' | 'SSP' | 'STN' | 'SVC' | 'SYP' | 'SZL' | 'THB' | 'TJS' | 'TMT' | 'TND' | 'TOP' | 'TRY' | 'TTD' | 'TWD' | 'TZS' | 'UAH' | 'UGX' | 'USD' | 'UYU' | 'UZS' | 'VES' | 'VND' | 'VUV' | 'WST' | 'XAF' | 'XAU' | 'XCD' | 'XDR' | 'XOF' | 'XPF' | 'YER' | 'ZAR' | 'ZMW' | 'ZWL', required
      - `respectApprovalStep` boolean, required
      - `insuranceEnabled` boolean, required
    - `effectivePermissions` object, required: The user’s organization-level permissions.
      - `createUsers` boolean, nullable, required
      - `updateUsers` boolean, nullable, required
      - `deleteUsers` boolean, nullable, required
      - `createSites` boolean, nullable, required
      - `updateSites` boolean, nullable, required
      - `deleteSites` boolean, nullable, required
      - `accessAllSites` boolean, required
      - `itAdmin` boolean, required
      - `billing` boolean, required
      - `createBoards` boolean, required
  - `insurancePer` object, required: The user’s permissions on the Insurance board.
  - `videoIntroductions` object[], required
    - `slug` 'access-introduction' | 'user-groups-introduction' | 'sites-table' | 'sites-tree' | 'sites-map' | 'sites-groups' | 'sites-activity' | 'sites-more' | 'c2-sites-view' | 'c2-questions' | 'c2-questions-by-site' | 'c2-reports' | 'c2-settings' | 'risk-improvements', required
    - `title` string, required
    - `description` string, nullable, required
    - `durationSeconds` integer, nullable, required
    - `videoId` string, required
    - `thumbnailUrl` string, nullable, required
  - `hasInsuranceAccess` boolean, required
  - `hasClaimsAccess` boolean, required
  - `groupOwner` boolean, nullable, required
  - `insuranceBoardId` string, required: Empty when the user has no Insurance board.
  - `claimsBoardId` string, required: Empty when the user has no Claims board.

---

[API](https://skmtc.dev/21risk/apis/21risk-api.md) · [All operations](https://skmtc.dev/21risk/apis/21risk-api/llms.txt) · [OpenAPI document](https://skmtc.dev/21risk/apis/21risk-api/revisions/273a727dfd49?raw)