---
title: "ACL permission tree"
method: GET
path: "/acl"
tags: ["Admin Settings: Roles"]
---

# ACL permission tree

`GET /acl`

## Request

- Base URL: `http://localhost:8000/api/admin`
- URL: `http://localhost:8000/api/admin/acl`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/bagisto/apis/bagisto-admin-api/docs/acl/get.ts> (a function with typed inputs; its response is checked against the schema)

Returns every permission the admin role screen offers, as a nested tree sorted the same way. Each node carries its `key` (the value to send in a role's `permissions`), its translated `name`, the admin `route` it guards, its `sort` and its `children`.

## Response `200`

The ACL tree.

## Other responses

- `401`: Unauthenticated.
- `403`: Missing the settings.roles permission.

## Changes

- **2026-10-28** `3198f11be70f`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/bagisto/apis/bagisto-admin-api/changes/acl/get.md)

---

[API](https://skmtc.dev/bagisto/apis/bagisto-admin-api.md) - [All operations](https://skmtc.dev/bagisto/apis/bagisto-admin-api/llms.txt) - [OpenAPI document](https://skmtc.dev/bagisto/apis/bagisto-admin-api/revisions/3198f11be70f?raw)