---
title: "List ACLs"
method: GET
path: "/clusters/{cluster_id}/acls"
tags: ["ACL (v3)"]
---

# List ACLs

`GET /clusters/{cluster_id}/acls`

[![Generally Available](https://img.shields.io/badge/Lifecycle%20Stage-Generally%20Available-%2345c6e8)](#section/Versioning/API-Lifecycle-Policy)

Return a list of ACLs that match the search criteria.

## Query parameters

- `resource_type` 'UNKNOWN' | 'ANY' | 'TOPIC' | 'GROUP' | 'CLUSTER' | 'TRANSACTIONAL_ID' | 'DELEGATION_TOKEN'
- `resource_name` string
- `pattern_type` string
- `principal` string
- `host` string
- `operation` string
- `permission` string

## Response `200`

The list of ACLs.

- AclDataList
  - `kind` string, required
  - `metadata` ResourceCollectionMetadata, required
    - `self` string, required
    - `next` string, nullable
  - `data` AclData[], required
    - `kind` string, required
    - `metadata` ResourceMetadata, required
      - `self` string, required
      - `resource_name` string, nullable
    - `cluster_id` string, required
    - `resource_type` 'UNKNOWN' | 'ANY' | 'TOPIC' | 'GROUP' | 'CLUSTER' | 'TRANSACTIONAL_ID' | 'DELEGATION_TOKEN', required
    - `resource_name` string, required
    - `pattern_type` string, required
    - `principal` string, required
    - `host` string, required
    - `operation` string, required
    - `permission` string, required

## Other responses

- `400` — Indicates a bad request error. It could be caused by an unexpected request body format or other forms of request validation failure.
- `401` — Indicates a client authentication error. Kafka authentication failures will contain error code 40101 in the response body.
- `403` — Indicates a client authorization error. Kafka authorization failures will contain error code 40301 in the response body.
- `429` — Indicates that a rate limit threshold has been reached, and the client should retry again later.
- `5XX` — A server-side problem that might not be addressable from the client side. Retriable Kafka errors will contain error code 50003 in the response body.

## Changes

> 50 revisions in range; 1 could not be searched.

- **2023-08-08** (v3) `25e5259d1722` — 1 breaking, 2 info
  - removed the media type `text/plain` for the response with the status `400`
  - api operation id `getKafkaV3Acls` removed and replaced with `getKafkaAcls`
  - added the non-success response with the status `403`
- **2023-08-08** (v3) `1be42847ed21` — 3 info
  - api operation id `getKafkaAcls` removed and replaced with `getKafkaV3Acls`
  - added the media type `text/plain` for the response with the status `400`
  - removed the non-success response with the status `403`
- **2023-03-10** (v3) `bb1cdf42f052` — 1 breaking, 2 info
  - removed the media type `text/plain` for the response with the status `400`
  - api operation id `getKafkaV3Acls` removed and replaced with `getKafkaAcls`
  - added the non-success response with the status `403`
- **2022-03-22** (v3) `7500cc59fcff` — 22 breaking, 28 info
  - removed the enum value `ALL` from the `query` request parameter `operation`
  - removed the enum value `ALLOW` from the `query` request parameter `permission`
  - removed the enum value `ALTER` from the `query` request parameter `operation`
  - removed the enum value `ALTER_CONFIGS` from the `query` request parameter `operation`
  - …46 more
- …earlier changes not shown

[Full history](https://skmtc.dev/confluentinc/apis/rest-admin-api/changes/clusters/:cluster_id/acls/get.md)

---

[API](https://skmtc.dev/confluentinc/apis/rest-admin-api.md) · [All operations](https://skmtc.dev/confluentinc/apis/rest-admin-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/confluentinc/rest-admin-api/revisions/e783c1a5e2bd/schema)