---
title: "Create permission grant"
method: POST
path: "/rest/api/2/permissionscheme/{schemeId}/permission"
tags: ["Permission schemes"]
---

# Create permission grant

`POST /rest/api/2/permissionscheme/{schemeId}/permission`

## Request

- Base URL: `https://your-domain.atlassian.net`
- URL: `https://your-domain.atlassian.net/rest/api/2/permissionscheme/{schemeId}/permission`
- Auth: one of:
  - HTTP basic
  - OAuth 2 (authorization code, authorization URL `https://auth.atlassian.com/authorize`, token URL `https://auth.atlassian.com/oauth/token`, scopes: `manage:jira-configuration`)

Creates a permission grant in a permission scheme.

**[Permissions](#permissions) required:** *Administer Jira* [global permission](https://confluence.atlassian.com/x/x4dKLg).

## Path parameters

- `schemeId` integer, required

## Query parameters

- `expand` string

## Request body

- PermissionGrant: Details about a permission granted to a user or group.
  - `holder` PermissionHolder: Details of a user, group, field, or project role that holds a permission. See [Holder object](../api-group-permission-schemes/#holder-object) in *Get all permission schemes* for more information.
    - `expand` string: Expand options that include additional permission holder details in the response.
    - `parameter` string: As a group's name can change, use of `value` is recommended. The identifier associated withthe `type` value that defines the holder of the permission.
    - `type` string, required: The type of permission holder.
    - `value` string: The identifier associated with the `type` value that defines the holder of the permission.
  - `id` integer: The ID of the permission granted details.
  - `permission` string: The permission to grant. This permission can be one of the built-in permissions or a custom permission added by an app. See [Built-in permissions](../api-group-permission-schemes/#built-in-permissions) in *Get all permission schemes* for more information about the built-in permissions. See the [project permission](https://developer.atlassian.com/cloud/jira/platform/modules/project-permission/) and [global permission](https://developer.atlassian.com/cloud/jira/platform/modules/global-permission/) module documentation for more information about custom permissions.
  - `self` string, uri: The URL of the permission granted details.

## Response `201`

Returned if the scheme permission is created.

- PermissionGrant: Details about a permission granted to a user or group.
  - `holder` PermissionHolder: Details of a user, group, field, or project role that holds a permission. See [Holder object](../api-group-permission-schemes/#holder-object) in *Get all permission schemes* for more information.
    - `expand` string: Expand options that include additional permission holder details in the response.
    - `parameter` string: As a group's name can change, use of `value` is recommended. The identifier associated withthe `type` value that defines the holder of the permission.
    - `type` string, required: The type of permission holder.
    - `value` string: The identifier associated with the `type` value that defines the holder of the permission.
  - `id` integer: The ID of the permission granted details.
  - `permission` string: The permission to grant. This permission can be one of the built-in permissions or a custom permission added by an app. See [Built-in permissions](../api-group-permission-schemes/#built-in-permissions) in *Get all permission schemes* for more information about the built-in permissions. See the [project permission](https://developer.atlassian.com/cloud/jira/platform/modules/project-permission/) and [global permission](https://developer.atlassian.com/cloud/jira/platform/modules/global-permission/) module documentation for more information about custom permissions.
  - `self` string, uri: The URL of the permission granted details.

## Other responses

- `400`: Returned if the value for expand is invalid or the same permission grant is present.
- `401`: Returned if the authentication credentials are incorrect or missing.
- `403`: Returned if the user does not have the necessary permission.
- `422`: 422 response

## Changes

- **2026-08-20** `fc2da4091826`: 1 info
  - added the non-success response with the status `422`

[Operation history](https://skmtc.dev/atlassian/apis/the-jira-cloud-platform-rest-api/changes/rest/api/2/permissionscheme/:schemeId/permission/post.md)

---

[API](https://skmtc.dev/atlassian/apis/the-jira-cloud-platform-rest-api.md) - [All operations](https://skmtc.dev/atlassian/apis/the-jira-cloud-platform-rest-api/llms.txt) - [OpenAPI document](https://skmtc.dev/atlassian/apis/the-jira-cloud-platform-rest-api/revisions/5b336c497218?raw)