---
title: "POST /accounts/{account_pk}/groups/{group_pk}/permissions"
method: POST
path: "/accounts/{account_pk}/groups/{group_pk}/permissions"
tags: ["Accounts"]
---

# POST /accounts/{account_pk}/groups/{group_pk}/permissions

`POST /accounts/{account_pk}/groups/{group_pk}/permissions`

## Request

- Base URL: `https://api.connect.cloudblue.com/public/v1`
- URL: `https://api.connect.cloudblue.com/public/v1/accounts/{account_pk}/groups/{group_pk}/permissions`
- Auth: API key in header `Authorization`
- TypeScript: <https://skmtc.dev/cloudblue/apis/cloudblue-connect-api/docs/accounts/:account_pk/groups/:group_pk/permissions/post.ts> (a function with typed inputs; its response is checked against the schema)

## Path parameters

- `account_pk` string, required
- `group_pk` string, required

## Request body

- AuthGroupPermissionWrite
  - `id` string
  - `object` AuthPermissionObjectMerge
    - `id` string, required
  - `privilege` 'viewer' | 'editor'

## Response `201`

- AuthGroupPermissionWrite
  - `id` string
  - `object` AuthPermissionObjectMerge
    - `id` string, required
  - `privilege` 'viewer' | 'editor'

## Other responses

- `400`

## Changes

- **2026-08-06** `54fef191d46c`: 3 info
  - api operation id `auth_group_permissions_list_createPermissionMerge` removed and replaced with `auth_group_permissions_list_createGroupPermissionWrite`
  - added the new optional request property `privilege`
  - added the optional property `privilege` to the response with the `201` status
- **2025-05-17** `2de715cbd1f3`: 2 breaking, 5 info
  - the request's body type changed from no type to `object`
  - the response's body type changed from no type to `object` for status `201`
  - added the new optional request property `id`
  - added the new optional request property `object`
  - …3 more
- **2023-12-01** `22a697bcb678`: 3 breaking, 4 warning
  - the request's body type changed from `object` to no type
  - the response's body type changed from `object` to no type for status `201`
  - removed the media type `application/json` for the response with the status `400`
  - removed the request property `id`
  - …3 more
- **2022-12-08** `86adefb0bb29`: 2 breaking, 5 info
  - the request's body type changed from no type to `object`
  - the response's body type changed from no type to `object` for status `201`
  - added the new optional request property `id`
  - added the new optional request property `object`
  - …3 more
- …earlier changes not shown

[Operation history](https://skmtc.dev/cloudblue/apis/cloudblue-connect-api/changes/accounts/:account_pk/groups/:group_pk/permissions/post.md)

---

[API](https://skmtc.dev/cloudblue/apis/cloudblue-connect-api.md) - [All operations](https://skmtc.dev/cloudblue/apis/cloudblue-connect-api/llms.txt) - [OpenAPI document](https://skmtc.dev/cloudblue/apis/cloudblue-connect-api/revisions/798ba51500b5?raw)