--- title: "List org ACLs" method: GET path: "/v1/acl/list_org" tags: ["Acls"] --- # List org ACLs `GET /v1/acl/list_org` ## Request - Base URL: `https://api.braintrust.dev` - URL: `https://api.braintrust.dev/v1/acl/list_org` - Auth: one of: - HTTP bearer - none List all ACLs in the org. This query requires the caller to have `read_acls` permission at the organization level ## Query parameters - `limit` integer, nullable: Limit the number of objects to return - `ids` union: Filter search results to a particular set of object IDs. To specify a list of IDs, include the query param multiple times - string, uuid - string[] - `starting_after` string, uuid: Pagination cursor id. For example, if the final item in the last page you fetched had an id of `foo`, pass `starting_after=foo` to fetch the next page. Note: you may only pass one of `starting_after` and `ending_before` - `ending_before` string, uuid: Pagination cursor id. For example, if the initial item in the last page you fetched had an id of `foo`, pass `ending_before=foo` to fetch the previous page. Note: you may only pass one of `starting_after` and `ending_before` - `object_type` 'organization' | 'project' | 'experiment' | 'dataset' | 'prompt' | 'prompt_session' | 'group' | 'role' | 'org_member' | 'project_log' | 'org_project' | 'org_audit_logs' | 'project_group' | 'project_group_projects' | 'ai_secret' | 'org_ai_secret' | 'org_account': The object type that the ACL applies to - `object_id` string, uuid: The id of the object the ACL applies to - `user_id` string, uuid: Id of the user the ACL applies to. Exactly one of `user_id` and `group_id` will be provided - `group_id` string, uuid: Id of the group the ACL applies to. Exactly one of `user_id` and `group_id` will be provided - `permission` 'create' | 'read' | 'update' | 'delete' | 'create_acls' | 'read_acls' | 'update_acls' | 'delete_acls': Each permission permits a certain type of operation on an object in the system Permissions can be assigned to to objects on an individual basis, or grouped into roles - `restrict_object_type` 'organization' | 'project' | 'experiment' | 'dataset' | 'prompt' | 'prompt_session' | 'group' | 'role' | 'org_member' | 'project_log' | 'org_project' | 'org_audit_logs' | 'project_group' | 'project_group_projects' | 'ai_secret' | 'org_ai_secret' | 'org_account': The object type that the ACL applies to - `role_id` string, uuid: Id of the role the ACL grants. Exactly one of `permission` and `role_id` will be provided - `org_name` string: Filter search results to within a particular organization ## Response `200` A list of ACLs - Acl[] - `id` string, uuid, required: Unique identifier for the acl - `object_type` 'organization' | 'project' | 'experiment' | 'dataset' | 'prompt' | 'prompt_session' | 'group' | 'role' | 'org_member' | 'project_log' | 'org_project' | 'org_audit_logs' | 'project_group' | 'project_group_projects' | 'ai_secret' | 'org_ai_secret' | 'org_account', required: The object type that the ACL applies to - `object_id` string, uuid, required: The id of the object the ACL applies to - `user_id` string, uuid, nullable: Id of the user the ACL applies to. Exactly one of `user_id` and `group_id` will be provided - `group_id` string, uuid, nullable: Id of the group the ACL applies to. Exactly one of `user_id` and `group_id` will be provided - `permission` 'create' | 'read' | 'update' | 'delete' | 'create_acls' | 'read_acls' | 'update_acls' | 'delete_acls': Each permission permits a certain type of operation on an object in the system Permissions can be assigned to to objects on an individual basis, or grouped into roles - `restrict_object_type` 'organization' | 'project' | 'experiment' | 'dataset' | 'prompt' | 'prompt_session' | 'group' | 'role' | 'org_member' | 'project_log' | 'org_project' | 'org_audit_logs' | 'project_group' | 'project_group_projects' | 'ai_secret' | 'org_ai_secret' | 'org_account': The object type that the ACL applies to - `role_id` string, uuid, nullable: Id of the role the ACL grants. Exactly one of `permission` and `role_id` will be provided - `_object_org_id` string, uuid, required: The organization the ACL's referred object belongs to - `created` string, date-time, nullable: Date of acl creation ## Other responses - `400`: The request was unacceptable, often due to missing a required parameter - `401`: No valid API key provided - `403`: The API key doesn’t have permissions to perform the request - `429`: Too many requests hit the API too quickly. We recommend an exponential backoff of your requests - `500`: Something went wrong on Braintrust's end. (These are rare.) ## Changes - **2026-10-30** `8f5039399f77`: 2 breaking, 27 info - the `items/permission` response's property type changed from `string` to no type for status `200` - the `items/restrict_object_type` response's property type changed from `string` to no type for status `200` - added `#/components/schemas/AclObjectType, subschema #2` to the `items/restrict_object_type` response property `anyOf` list for the response status `200` - added `#/components/schemas/Permission, subschema #2` to the `items/permission` response property `anyOf` list for the response status `200` - …25 more - **2026-10-03** `877ab1fd2a22`: 2 warning, 2 info - added the new `project_group_projects` enum value to the `items/object_type` response property for the response status `200` - added the new `project_group_projects` enum value to the `items/restrict_object_type` response property for the response status `200` - added the new enum value `project_group_projects` to the `query` request parameter `object_type` - added the new enum value `project_group_projects` to the `query` request parameter `restrict_object_type` - …earlier changes not shown [Operation history](https://skmtc.dev/braintrustdata/apis/braintrust-api/changes/v1/acl/list_org/get.md) --- [API](https://skmtc.dev/braintrustdata/apis/braintrust-api.md) - [All operations](https://skmtc.dev/braintrustdata/apis/braintrust-api/llms.txt) - [OpenAPI document](https://skmtc.dev/braintrustdata/apis/braintrust-api/revisions/19184ec94018?raw)