---
title: "Get the permissions the credential creator can grant."
method: GET
path: "/api/v2/permissions"
tags: ["Permissions"]
---

# Get the permissions the credential creator can grant.

`GET /api/v2/permissions`

## Request

- Base URL: `https://app.blackkitetech.com`
- URL: `https://app.blackkitetech.com/api/v2/permissions`
- Auth: OAuth 2
  - Client credentials
  - Token URL: `https://app.blackkitetech.com//api/v2/oauth/token`
- TypeScript: <https://skmtc.dev/blackkitetech/apis/black-kite-api/docs/api/v2/permissions/get.ts> (a function with typed inputs; its response is checked against the schema)

Returns the licensed permissions the user who created this credential can grant. Requires the "User Access Management - Read" permission. When User Access Management for groups has not been enabled for the tenant, the call is rejected before the catalog is read.

## Query parameters

- `page_number` integer
- `page_size` 10 | 20 | 30 | 50 | 100 | 250

## Response `200`

A bare array. Field order is PermissionName, PermissionDescription, PermissionCategory, PermissionType.

- Permission[]
  - `PermissionName` string, required: The display name of the permission.
  - `PermissionDescription` string, required: A short description of what the permission allows.
  - `PermissionCategory` string, required: The name of the permission group the permission belongs to.
  - `PermissionType` 'Company' | 'Tenant', required: Whether the permission applies to individual companies or to the whole tenant.

## Other responses

- `401`: Unauthorized
- `403`: Forbidden
- `default`: Failure

## Changes

- **2026-10-23** `fc42796447f4`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/blackkitetech/apis/black-kite-api/changes/api/v2/permissions/get.md)

---

[API](https://skmtc.dev/blackkitetech/apis/black-kite-api.md) - [All operations](https://skmtc.dev/blackkitetech/apis/black-kite-api/llms.txt) - [OpenAPI document](https://skmtc.dev/blackkitetech/apis/black-kite-api/revisions/fc42796447f4?raw)